Privacy policy

Who we are

MadClub is operated by MYBUDDY LABS LLP, registered at Badrish Colony, Dehradun, Uttarakhand, India-248005.

This policy explains what personal data MadClub collects, why, who it is shared with, and how to reach us about it. It covers madclub.co and the MadClub app.

What we collect

Account details. A name, a username, and at least one verified way to reach you — a mobile number, an email address, or both. We record whether each has been verified, and when.

Profile details you choose to add. A display name, a short bio, and profile or cover images you upload.

Booking and payment records. The trips you book, who you booked for, and the amounts involved. Card, UPI and bank details are handled entirely by our payment gateway — they never reach MadClub's servers and we cannot see them.

Government ID, for trips that require one. Some operators need a valid photo ID on file before you travel — Aadhaar, PAN, passport, driving licence or voter ID. We keep the image you upload. Our systems have no way to store a complete ID number, only its last few digits at most, and today we don't even collect that — just the image.

Things you post. Reviews you write after a trip you attended, and your messages and events inside clubs you join.

Technical records. Server logs of requests to the platform. These identify records by id only — we do not write contact details into logs.

Sign in with Google

If you sign in with Google, we request three basic scopes and no others: openid, email and profile. That gives us your Google account's stable identifier, your email address, and basic profile information such as your name and profile picture.

We do not request, receive, or have any access to your Gmail, Drive, Calendar, Contacts, or any other Google service or data.

We link your MadClub account to Google's stable account identifier, never to your email address alone — so if an email address is ever reassigned, it cannot hand your MadClub account to someone else.

You can revoke MadClub's access at any time from your Google Account's security settings. Doing so stops future Google sign-ins; it does not by itself delete your MadClub account.

Why we use it

To run the service: creating your account, signing you in, taking bookings, issuing refunds, and paying operators.

Government ID: for trips that require one, so the operator can meet permit and insurance requirements and confirm who is travelling.

To keep the marketplace trustworthy: verifying operators before they can publish, confirming that a review comes from someone who actually attended, and investigating safety reports.

To send you messages you need — booking confirmations, payment and refund notices, and sign-in codes. We do not sell your data, and we do not use it for third-party advertising.

Who we share it with

Payments are processed by Razorpay, which receives what it needs to take payment and issue refunds.

Transactional email is sent through Maileroo, which receives the address being messaged and the message itself. We do not send WhatsApp messages today.

Operators receive only what they need to run the trip you booked with them — your name, the participants you listed, and the contact details required to reach you about that specific trip.

If your trip requires a government ID, only the operator running that specific trip can view it — from when your booking is confirmed until 7 days after the trip ends, never before or after. Every view is logged.

Uploaded images are stored on MadClub's own infrastructure, not a third-party media host.

We may disclose data where the law requires it. We do not otherwise share your personal data with third parties.

Keeping and deleting your data

We keep account and booking records for as long as your account exists and for as long afterwards as tax, accounting and dispute-resolution obligations require.

You can ask us to correct or delete your personal data using the contact below. Some records — a completed booking's financial trail, for instance — must be retained even after an account is closed, because the law requires it.

We delete a government ID's image automatically: 360 days after your most recent completed trip that used it, once you have no other confirmed trip still to come. The document type and, if you gave us the last digits of the number, those digits stay on file after that for resolving disputes — never the image itself. You can delete an ID document yourself, at any time, from your account.

Your rights and how to reach us

You can ask what personal data we hold about you, ask us to correct it, ask us to delete it, or complain about how it has been handled.

Grievance Officer: Poonam Bhandari. Write to [email protected] and we will acknowledge your complaint and respond to it.

For anything else, customer care is at [email protected].

Changes to this policy

If we change what we collect, why, or who it goes to, we will update this page and change the date at the top. Continuing to use MadClub after a change means the updated policy applies.