1. Overview

Drivekaro Tech Pvt. Ltd. (“DriveKaro”, “we”, “our”) operates the DriveKaro Rider and DriveKaro Driver mobile applications, and the website at drivekaro.site. We are headquartered in Haroonabad, Bahawalnagar District, Punjab, Pakistan.

This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information. By using our services you agree to the practices described here. If you do not agree, please discontinue use of the app and contact syedshahwarhassan87@gmail.com to delete your account.

2. Data We Collect

Account & Identity

Full name
Phone number (used for OTP login)
Email address
Profile photo (optional, uploaded by you)

Location Data

Precise GPS coordinates — collected while the app is open (foreground only)
Approximate network location as a fallback
Pickup and drop-off addresses entered during booking

Ride & Activity Data

Trip history (origin, destination, fare, status, timestamps)
Driver assigned, vehicle details, and ratings given
Parcel delivery details (receiver name, phone, package description, OTP)

Device & Technical Data

Device model and OS version
Push notification token (for ride alerts)
Crash logs and performance diagnostics (anonymous)

Data We Do NOT Collect

Payment card or bank account numbers (app is cash-only)
Contacts from your phone
Background location (we never track you when the app is closed)
Microphone audio (RECORD_AUDIO permission is reserved for a future SOS feature; not active in v1.0)

3. How We Use Your Data

Purpose	Data Used
Account creation & login	Name, phone, email
Matching you with nearby drivers	GPS location
Real-time ride & parcel tracking	GPS location, ride ID
Fare estimation	Pickup/dropoff coordinates
Push notifications (driver assigned, ETA, completion)	Device push token, ride data
Parcel OTP delivery verification	Receiver phone, delivery ID
Ride history & receipts	Trip records
Customer support & complaint resolution	Name, phone, ride data
Crash reporting & performance improvement	Anonymous device & crash logs
Safety, fraud prevention	Location, ride patterns

We do not use your data for advertising, behavioural profiling, or selling to any third party.

4. Data Sharing & Disclosure

With Your Assigned Driver

When you book a ride your first name, phone number, and pickup/dropoff addresses are shared with the assigned driver so they can find and serve you.

Sub-processors (Service Providers)

Provider	Purpose	Privacy Policy
Supabase Inc.	Database, authentication, real-time sync	supabase.com/privacy
Google LLC	Maps display, geocoding, routing	policies.google.com/privacy
Expo (expo.dev)	Push notification delivery	expo.dev/privacy

Legal Obligations

We may disclose data if required by Pakistani law, court order, or lawful government request (PTA, FIA, police). We will notify you of such disclosures where legally permitted.

We never sell, rent, or trade your personal data to any third party for marketing or advertising purposes.

5. Security & Retention

In Transit

All network traffic encrypted with TLS 1.2/1.3 (HTTPS)

At Rest

AES-256 database encryption via Supabase infrastructure

Authentication

JWT session tokens with automatic expiry

Access Control

Row-Level Security (RLS) — users can only read their own data

Account data

Retained while account is active + 30 days after deletion request

Ride history

Retained for 24 months for legal and dispute resolution

Location data

Not stored beyond ride completion

Crash logs

Retained for 90 days (anonymous)

6. Your Rights & Controls

Access — Request a copy of all personal data we hold about you.

Correction — Update inaccurate information directly in the app's Profile screen.

Deletion — Request full account and data deletion. We process within 30 days.Request deletion →

Portability — Request your data in a machine-readable format (JSON/CSV).

Withdraw Consent — Revoke location permission at any time via device Settings. This disables core ride features.

Opt-out of notifications — Disable push notifications via device Settings or the in-app Notifications screen.

To exercise any right email syedshahwarhassan87@gmail.com with your registered phone number. We respond within 30 days.

7. Push Notifications

We send push notifications to keep you informed about your ride status (driver assigned, arriving, ride started, completed), parcel delivery OTP, and important DriveKaro announcements. Notifications are delivered via Expo's push service using your device token — no personally identifiable information is embedded in the token itself. You can disable notifications at any time through your device settings without affecting core app functionality.

8. Location Data

Location is the core data that makes DriveKaro work. Here is exactly how we handle it:

When collectedOnly while the app is open and in use (foreground access only)

Background collectionNever. We do not hold the ACCESS_BACKGROUND_LOCATION permission.

Why precise GPSTo show your map pin, match nearby drivers, calculate accurate fares, and track your ride route

Shared withYour assigned driver (pickup coordination) and Google Maps API (route rendering)

Stored after ridePickup/dropoff coordinates are stored in ride history. Live route coordinates are not retained.

Your controlRevoke via Android Settings → Apps → DriveKaro Rider → Permissions → Location

9. Contact Us

Privacy Requests

syedshahwarhassan87@gmail.com

Access, correction, deletion, portability

General Support

syedshahwarhassan87@gmail.com

Response within 24 hours

Postal Address

DriveKaro — Haroonabad, Bahawalnagar District, Punjab, Pakistan

Want to delete your account and all associated data? Submit a deletion request →

Children's Privacy

DriveKaro Rider is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected such data please email syedshahwarhassan87@gmail.com immediately.

Changes to This Policy

We may update this policy periodically. Significant changes will be notified via in-app notification and email. The “Last updated” date at the top reflects the latest revision. Continued use of the app after changes constitutes acceptance.