Privacy Policy

1. Introduction

Welcome to tripSYMS ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (collectively, the "Service"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked to you, including:

• Identity Information: Name, phone number, email address
• Account Information: Username, password, profile picture
• Payment Information: Payment method details, transaction history
• Vehicle Information: Vehicle type, registration details (for drivers)
• Driver Documentation: Driver's license, insurance documents, vehicle registration

2.2 Location Information

We collect precise location data to provide transportation services, including:

• Real-time GPS location during trips
• Pick-up and drop-off locations
• Route information and navigation data
• Historical location patterns for service improvement

2.3 Device Information

We automatically collect certain information about your device, including:

• Device type, model, and manufacturer
• Operating system version and type
• Unique device identifiers (UDID, IMEI, etc.)
• Mobile network information and carrier
• IP address and geolocation data
• App version and device settings

2.4 Usage Information

We collect information about your interaction with our Service, including:

• Trip history, patterns, and preferences
• App features used and navigation patterns
• Time, frequency, and duration of use
• Error reports, crash logs, and performance data
• Search queries and booking patterns

2.5 Communication Data

We may collect information from your communications with us, including:

• Customer support interactions
• Feedback and reviews
• Survey responses
• Marketing communication preferences

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Provision

• Enable ride booking and matching with drivers
• Facilitate trip completion and route optimization
• Process payments and manage transactions
• Provide customer support and assistance
• Send trip updates, notifications, and receipts

3.2 Safety and Security

• Verify user identities and prevent fraud
• Enhance security measures and monitoring
• Investigate incidents and resolve disputes
• Comply with legal obligations and law enforcement requests

3.3 Service Improvement

• Analyze usage patterns to enhance user experience
• Develop new features and functionality
• Optimize routes and reduce wait times
• Conduct research and analytics

3.4 Communication

• Send service-related notifications
• Provide promotional offers (with consent)
• Deliver important safety information
• Respond to inquiries and feedback

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

4.1 With Service Providers

• Payment Processors: For secure transaction handling
• Cloud Hosting: For data storage and server management
• Analytics Providers: For service improvement and insights
• Communication Platforms: For notifications and messaging
• Mapping Services: For navigation and location services

4.2 Between Users

During active trips, we share limited information between drivers and passengers:

• First names and profile pictures
• Vehicle information (for passengers)
• Pick-up and drop-off locations
• Trip route and estimated arrival times
• Contact information for trip coordination

4.3 For Legal Compliance

We may disclose information when required by law or in response to:

• Valid legal requests from authorities
• Court orders or subpoenas
• Government investigations
• Emergency situations involving safety

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity with appropriate notice.

4.5 With Your Consent

We may share information with third parties when you provide explicit consent for such sharing.

5. Data Security

We implement comprehensive security measures to protect your personal information:

5.1 Technical Safeguards

• End-to-end encryption for data transmission
• AES-256 encryption for data at rest
• Secure API endpoints with authentication
• Regular security audits and penetration testing
• Automated threat detection and monitoring

5.2 Administrative Safeguards

• Multi-factor authentication for system access
• Role-based access controls
• Employee security training and background checks
• Data handling policies and procedures
• Incident response and breach notification protocols

5.3 Physical Safeguards

• Secure data centers with restricted access
• Environmental controls and monitoring
• Backup and disaster recovery systems

Important Note: While we use industry-standard security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to promptly addressing any security incidents.

6. Data Retention

We retain your personal information for different periods based on the type of data and purpose:

6.1 Retention Periods

• Account Information: Until account deletion or 7 years after last activity
• Trip Data: 3 years for service improvement and legal compliance
• Payment Information: 7 years for financial and tax purposes
• Location Data: 1 year unless required for ongoing investigations
• Support Communications: 2 years after resolution
• Marketing Data: Until consent is withdrawn

6.2 Retention Criteria

We determine retention periods based on:

• Legal and regulatory requirements
• Legitimate business interests
• User safety and security needs
• Dispute resolution requirements
• Service improvement purposes

6.3 Data Deletion

When retention periods expire, we securely delete or anonymize your data using industry-standard methods.

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access Rights

• Request access to your personal information
• Receive a copy of your data in portable format
• View your data processing activities

7.2 Correction and Update

• Correct inaccurate or incomplete information
• Update your profile and preferences
• Modify account settings

7.3 Deletion Rights

• Request deletion of your account and data
• Remove specific information (subject to legal requirements)
• Withdraw consent for processing

7.4 Communication Preferences

• Marketing Communications: Unsubscribe via email links or app settings
• Push Notifications: Manage in app or device settings
• SMS Messages: Reply STOP to opt-out
• Email Updates: Update preferences in your account

7.5 Location and Privacy Controls

• Location Tracking: Disable in device settings (may affect service functionality)
• Data Processing Objection: Object to certain processing activities
• Automated Decision-Making: Request human review of automated decisions

7.6 How to Exercise Your Rights

To exercise these rights, you can:

• Use in-app privacy settings and controls
• Contact us at [email protected]
• Submit a request through our support system
• Mail us at the address provided in the Contact section

We will respond to your requests within 30 days and may require identity verification for security purposes.

8. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18.

8.1 Age Verification

• We require users to confirm they are 18 or older during registration
• Driver accounts require additional age and license verification
• We may request proof of age if we suspect underage use

8.2 Parental Concerns

If we become aware that we have collected personal information from a child under 18, we will:

• Immediately delete such information from our systems
• Terminate the associated account
• Notify the parents or guardians if required by law

Parents who believe their child has provided information to us should contact us immediately at [email protected].

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

9.1 Transfer Safeguards

When transferring data internationally, we ensure appropriate safeguards:

• Standard Contractual Clauses (SCCs) with service providers
• Adequacy decisions by relevant data protection authorities
• Binding Corporate Rules for internal transfers
• Explicit consent when required

9.2 Data Processing Locations

We may process your data in the following regions:

• Your home country/region
• Countries with adequate data protection laws
• Secure cloud facilities with appropriate safeguards

10. Third-Party Services

Our Service may contain links to or integrate with third-party websites, applications, or services. We are not responsible for the privacy practices of these third parties.

10.1 Third-Party Integrations

• Payment Processors: Stripe, PayPal, etc. (governed by their privacy policies)
• Mapping Services: Google Maps, OpenStreetMap
• Analytics Tools: Google Analytics, Firebase
• Communication Services: Twilio, SendGrid
• Social Media: Facebook, Twitter login options

10.2 Your Responsibility

We encourage you to:

• Review privacy policies of third-party services
• Understand what data they collect and how they use it
• Configure privacy settings on third-party platforms
• Contact third parties directly for their data practices

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

11.1 Notification Methods

We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top
• Sending an in-app notification for material changes
• Email notification for significant changes (if you've provided an email)
• Push notification through the mobile app

11.2 Effective Date

Policy changes become effective:

• Immediately upon posting for minor changes
• 30 days after notification for material changes
• Upon your acceptance for changes requiring consent

11.3 Your Options

If you do not agree with the updated Privacy Policy:

• You may discontinue using our Service
• You may delete your account
• Your continued use constitutes acceptance of the updated policy

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Consent

By using our Service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and sharing of your information as described herein.

13.1 Types of Consent

• Account Creation: Consent to basic data processing for service provision
• Location Services: Explicit consent for location tracking
• Marketing Communications: Opt-in consent for promotional materials
• Data Sharing: Specific consent for sharing with third parties

13.2 Withdrawing Consent

You can withdraw your consent at any time by:

• Updating your app settings
• Contacting our privacy team
• Deleting your account

Note that withdrawing consent may limit your ability to use certain features of our Service.

14. Platform-Specific Information

14.1 Google Play Store

When you download our app from Google Play Store, Google may collect certain information as described in Google's Privacy Policy.

14.2 App Store (iOS)

When you download our app from Apple's App Store, Apple may collect certain information as described in Apple's Privacy Policy.

14.3 App Permissions

Our app requests the following permissions and here's why:

14.4 Data Collection Disclosure

In compliance with app store requirements, we disclose that our app collects:

• Personal Information: Name, email, phone number
• Location Data: Precise location for service delivery
• Payment Information: Through secure payment processors
• Usage Analytics: App performance and usage patterns
• Device Information: Device type, OS version, app version