1driver Privacy Policy

1. Information We Collect

1.1 Driver Information

When you register as a 1driver driver, we collect:

• Basic Information: Name, phone number, email address, identity card number (for identity verification)
• Driving Qualification Information: Driver's license, vehicle registration certificate, insurance information
• Vehicle Information: License plate number, vehicle model, color, vehicle photos
• Biometric Information: Facial photos (for identity verification and security purposes)
• Location Information: Real-time GPS positioning (during order acceptance and service periods)
• Income Information: Bank account information (for backend top-up and income settlement)

1.2 Passenger Information

When you register as a 1driver passenger, we collect:

• Basic Information: Name, phone number, email address
• Profile Photo: Avatar (optional)
• Location Information: Pick-up location and destination
• Trip History: Past trip records and ratings

1.3 Automatically Collected Information

When using our application, we automatically collect:

• Device Information: Device model, operating system version, unique device identifiers
• Usage Data: App usage time, feature usage, crash reports
• Network Information: IP address, network type, carrier information
• Google Maps Data: Map interactions, route preferences, navigation data

1.4 Permission-Related Information

2. How We Use Your Information

2.1 Service Provision

• Matching Services: Match passengers with suitable designated drivers
• Navigation Services: Provide route planning and real-time navigation through Google Maps API
• Communication Services: Enable phone contact between drivers and passengers
• Payment Management: Process cash payment records and driver backend top-up settlements

2.2 Safety & Security

• Identity Verification: Ensure user identity authenticity through facial recognition and document verification
• Trip Safety: Monitor abnormal trip routes to ensure passenger safety
• Emergency Response: Provide necessary information to relevant authorities in emergency situations
• Fraud Prevention: Detect and prevent fraudulent activities

2.3 Service Improvement

• User Experience Optimization: Analyze usage patterns to improve app functionality
• Customer Support: Handle complaints, suggestions and customer service requests
• Service Quality: Maintain service standards through rating systems

2.4 Marketing & Promotion (Requires Separate Consent)

3. Information Sharing and Disclosure

3.1 Sharing Between Users

To provide designated driver services, we share between drivers and passengers:

• Driver Information: Name, avatar, vehicle information, rating, contact phone
• Passenger Information: Name (or nickname), pick-up location, destination, contact phone

3.2 Third-Party Service Providers

We may share your information with the following third parties:

• Google Maps: Location data for map and navigation services
• Banking Institutions: Driver bank account information for backend top-up settlements
• Cloud Storage Services: For secure data storage
• Communication Service Providers: For sending SMS verification codes
• Data Analytics Services: Anonymized data for service improvement

3.3 Legal Requirements

3.4 Business Transfer

If we undergo merger, acquisition or asset sale, your information may be transferred as part of the transaction. We will notify you before the transfer.

4. Data Storage and Protection

4.1 Storage Period

• Account Information: Retained during the validity period of your account
• Trip Records: Retained for 7 years (for tax and accounting compliance)
• Location Data: Deleted within 24 hours after trip completion (for security incident detection)
• Call Records: Retained for 30 days (for dispute resolution)
• Identity Verification Photos: Encrypted storage after verification completion, deleted after account cancellation

4.2 Security Measures

We employ the following measures to protect your information:

• Encryption Technology: Use AES-256 encryption to store sensitive data
• Transmission Security: Use TLS 1.3 protocol for data transmission
• Access Control: Strictly limit employee access permissions
• Security Audits: Regularly conduct security assessments and penetration testing
• Incident Response: Establish data breach emergency response mechanisms

4.3 Data Localization

5. Your Rights and Choices

5.1 Right of Access

You have the right to access personal information we hold about you. You can view and export your data through the "Privacy Center" within the app.

5.2 Right of Rectification

If you find your information is incorrect or incomplete, you can update it within the app at any time or request us to correct it.

5.3 Right of Erasure

You have the right to request deletion of your personal information. Please note that certain information may need to be retained for specific periods due to legal requirements.

5.4 Right to Data Portability

You can request to obtain your personal data in a structured, commonly used and machine-readable format, and have the right to transmit this data to other service providers.

5.5 Right to Withdraw Consent

You can withdraw previously given consent at any time, including:

• Receipt of marketing communications
• Collection of location information (this may affect service usage)
• Data analytics and improvement purposes

5.6 Right to Restrict Processing

In certain circumstances, you can request us to restrict the processing of your personal information.

6. Protection of Minors

7. Cross-Border Data Transfer

Although we primarily operate in Malaysia, cross-border data transfer may occur in the following situations:

• Use of international cloud service providers
• Application of global technical support services

All cross-border transfers will comply with applicable data protection laws and appropriate protective measures will be taken.

8. Cookies and Similar Technologies

Our mobile application uses the following technologies:

• In-App Analytics: Collect usage data to improve services
• Crash Reporting: Automatically collect app crash information
• Push Tokens: Used for sending service notifications

You can manage these features in your device settings.

9. Third-Party Links and Services

Our app may contain links to third-party websites or services. Please note that these third parties have their own privacy policies, and we are not responsible for their privacy practices.

10. Updates to Privacy Policy

We may update this privacy policy from time to time. When there are significant changes, we will notify you through the following methods:

• In-app push notifications
• Email notifications
• Displaying update notifications in the app

Continued use of our services indicates your acceptance of the updated policy.

11. Contact Us

If you have any questions, comments or complaints about this privacy policy, please contact us through the following methods:

12. Compliance Statement

This privacy policy complies with the following legal and regulatory requirements:

• Malaysia Personal Data Protection Act 2010 (PDPA) and its amendments
• Google Play Store data security requirements
• Apple App Store privacy requirements
• Applicable international data protection standards

13. Privacy Notes for Specific Features

13.1 Google Maps Integration

13.2 Photo and Camera Usage

• Avatar Upload: Only used for personal profile display
• Vehicle Photos: Used for vehicle verification and passenger safety
• Identity Verification: Facial photos are only used for one-time verification, encrypted storage

13.3 Phone Functionality

• We do not store call content
• Phone numbers are only visible to both parties during trips
• Number details are automatically hidden 30 days after trip completion