Privacy Policy

1. Introduction

RahPey (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data. By using the RahPey Service, you agree to the collection and use of information described in this policy.

2. Information We Collect

We collect the following categories of information:

• Account information: Mobile phone number, name, and profile photo you provide during registration.
• Location data: Real-time GPS location while the app is in use, pick-up and drop-off addresses, and trip routes.
• Trip data: Date, time, distance, fare, and rating for each completed trip.
• Payment data: Transaction history and in-app wallet balance. Full card details are processed by our payment partners and are not stored on RahPey servers.
• Device information: Device type, operating system version, and app version used to access the Service.
• Communications: In-app messages and support tickets submitted to our team.

3. How We Use Your Information

We use your data to:

• Provide, operate, and improve the RahPey platform.
• Match passengers with nearby available drivers.
• Process payments and manage your wallet.
• Send OTP codes, trip confirmations, and service notifications.
• Investigate and resolve safety incidents or disputes.
• Comply with legal obligations and enforce our Terms of Service.
• Analyse usage patterns to enhance the user experience.

4. Data Sharing

We do not sell your personal data. We may share your data with:

• Drivers / Passengers: Your name, pick-up location, and rating are shared with the driver (or passenger) assigned to your trip.
• Payment processors: To facilitate transactions and wallet operations.
• Service providers: Cloud hosting, analytics, and customer support tools operating under strict data processing agreements.
• Law enforcement: Where required by applicable law or a valid court order.

5. Data Retention

We retain your account and trip data for as long as your account is active or as needed to provide services. After account deletion, we may retain anonymised trip data for analytical purposes and retain certain records as required by law for up to 5 years.

6. Data Security

We implement industry-standard security measures including TLS encryption for data in transit, AES-256 encryption for sensitive data at rest, and role-based access controls on all internal systems. OTP authentication protects every account against unauthorised access. Despite these measures, no system is entirely secure; please notify us immediately if you suspect any breach.

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate or incomplete information through the app settings.
• Deletion: Request deletion of your account and associated personal data.
• Objection: Object to processing of your data for analytics or marketing purposes.
• Portability: Request your trip history in a structured, machine-readable format.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Children's Privacy

The Service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. The “Last updated” date at the top of this page reflects the most recent revision.

10. Contact

For privacy-related questions or to exercise your rights, contact our team at [email protected] or write to us at: RahPey, Kabul, Afghanistan.