Effective date: 11 August 2026.

This Privacy Policy explains how KiloDrive collects, uses, discloses, retains, and protects personal information when people use our mobile applications, websites, portals, support channels, ride services, parcel-delivery marketplace, driver onboarding, payments, safety features, and related services (collectively, the ÔÇ£KiloDrive PlatformÔÇØ). It also explains your choices and rights.

This is a publication draft intended for review in every country where KiloDrive operates. Applicable law may provide additional rights or impose different requirements. A country-specific notice presented in the Platform supplements this Policy.

1. Who this Policy covers

This Policy applies to riders, parcel senders and recipients, drivers and driver applicants, sole traders and driver businesses, business representatives, portal users, website visitors, support contacts, and anyone whose information is provided in connection with a ride or delivery. A person who books or pays for a service for someone else must have authority to provide that personÔÇÖs information and should direct them to this Policy.

2. Who controls your information

The KiloDrive operating entity responsible for the country in which a service occurs is normally the controller of information required to provide that service. A separate entity may control payment, identity-verification, insurance, or regulated financial processing. The applicable operating entity and contact details must be identified in the country schedule, receipt, or support response. KiloDrive service providers process information under contract and instructions unless they act as independent controllers under law.

3. Information you provide

  • Account and profile information: name, email, phone number, country, language, timezone, profile photograph, account role, preferences, accessibility settings, referral information, and authentication details. Passwords are stored only as protected hashes.
  • Driver and business information: date of birth or eligibility evidence where required, licence, identity documents, selfie/profile photograph, address, prior-platform username or rating-import request, driver status, membership, business type, legal and trading names, registration and tax identifiers, business contacts, beneficial-owner or representative information where legally required.
  • Vehicle information: make, model, year, category, colour, plate, registration, insurance, inspections, photographs, document expiry dates, and administrative review notes.
  • Ride and delivery information: pickup, destination, stops, saved and recurring routes, requested time, proposed fare, bids, passenger or recipient details, parcel description and handling instructions, proof of pickup or delivery, ratings, cancellations, disputes, lost-item reports, and safety reports.
  • Payment and payout information: transaction amount, currency, payment method, provider reference, wallet and immutable ledger records, membership charges, refunds, chargebacks, cash obligations, escrow holds, cashout requests, masked payout destination, bank/branch selection, PayPal identifier, tax information, and fraud-review evidence. KiloDrive does not intentionally store full card credentials.
  • Communications and content: in-app chat, support tickets, contact forms, notification preferences, survey responses, ratings, photographs, documents, call metadata, and files or evidence you choose to submit. Private chat content is not written to operational application logs, but it remains stored where needed to provide chat, safety, support, or legal functions.

4. Information collected when you use KiloDrive

  • Location and route information: approximate or precise device location, pickup and destination coordinates, active-driver location, ordered trip GPS samples, route deviations, stops, speed or heading where available, traffic and ETA results, geofence confirmations, and last-known location. Location collection depends on your role, permissions, and whether a trip or safety feature is active.
  • Device, session, and network information: IP address, proxy and Cloudflare forwarding information, device and installation identifiers, operating system, app version, browser type, mobile network, push token, login/session activity, connected devices, security settings, App Check results, and diagnostics.
  • Usage and operational information: screens and features used, searches, button and notification interactions, request timing, API and provider outcomes, crash data, performance measurements, correlation IDs, and redacted security or audit events.
  • Safety and fraud signals: account linkage, unusual devices or locations, failed logins, payout and top-up velocity, cooldown events, route anomalies, duty time, disputes, reports, duplicate instructions, and risk or confidence scores used to refer activity for review.
  • Website technologies: essential cookies and local storage, consent choices, andÔÇöwhere enabled and lawfulÔÇöanalytics and measurement information described in our Cookie Policy.

5. Information received from others

We may receive information from other users involved in a service; driver businesses and authorized representatives; payment processors, banks, and payout providers; identity and document-verification services; mapping and traffic providers; app stores and social-login providers; communications providers; insurers and professional advisers; fraud-prevention and device-integrity providers; public records and lawful authorities; and people who make referrals, complaints, disputes, or safety reports. A recipient may provide proof of delivery or a rider may provide feedback concerning another participant.

6. How we use information

  • create, authenticate, secure, and administer accounts, devices, roles, permissions, preferences, and tenants;
  • verify phone numbers, identities, drivers, businesses, vehicles, documents, insurance, memberships, and continuing eligibility;
  • locate nearby eligible drivers, widen an offer area, display driver availability, facilitate bids, match participants, route journeys, calculate distance, traffic-aware ETA, and estimated or proposed fares;
  • operate rides and deliveries, scheduled and recurring bookings, saved routes, chat, calls, notifications, trip sharing, live status, proof of delivery, trip replay, support, ratings, and receipts;
  • process wallet entries, external payments, holds, escrow, membership fees, cash obligations, refunds, chargebacks, cashouts, payouts, reconciliation, tax and accounting records;
  • protect users and the Platform through driver verification, duty limits, route-anomaly detection, safety check-ins, incident response, access control, fraud detection, abuse prevention, auditing, and investigation;
  • provide customer support, resolve complaints and disputes, recover lost property, enforce agreements, and establish, exercise, or defend legal claims;
  • maintain, troubleshoot, test, measure, and improve reliability, accessibility, product design, dispatch, marketplace health, and operational performance;
  • send transactional messages and, with any consent required by law, promotions or product communications; and
  • comply with transport, licensing, insurance, financial, sanctions, tax, accounting, privacy, safety, court, and lawful government requirements.

7. Automated processing and human review

KiloDrive uses rules and automated processes for nearby-driver discovery, offer ordering, traffic and ETA calculations, eligibility, duplicate-request prevention, account security, fraud signals, cashout blocks, and safety alerts. Inputs can include location, availability, service type, vehicle eligibility, request expiry, transaction history, device linkage, and reported incidents. These processes may delay, block, rank, or refer an action for review. They do not guarantee a match, price, outcome, or safety. Where applicable law grants a right to information, objection, or human review of a decision producing legal or similarly significant effects, you may request review through Contact Us.

8. When information is disclosed

  • Between users: drivers may receive the rider or senderÔÇÖs first name, rating where enabled, pickup, destination, stops, proposed fare, service instructions, and limited recipient details needed for the service. Riders and senders may receive the driverÔÇÖs name, photograph, rating, vehicle, plate, offer, ETA, and location during the service. A trip-share recipient receives limited live-trip information until the link expires.
  • Driver businesses: an authorized business account may receive information concerning its drivers, vehicles, assignments, earnings, compliance, and incidents, subject to role and legal restrictions.
  • Service providers: cloud hosting, Valkey/cache, mapping, traffic, identity, document storage and scanning, communications, analytics, customer support, payment, payout, fraud, security, reporting, and professional-service providers receive only information reasonably required for their function.
  • Payment and legal participants: processors, banks, card networks, PayPal, insurers, auditors, tax advisers, regulators, courts, law enforcement, emergency services, or other authorities may receive information for payment processing, reconciliation, incidents, legal obligations, or valid process.
  • Corporate events: information may be disclosed in a financing, reorganization, merger, acquisition, insolvency, or sale, subject to confidentiality and applicable law.
  • At your direction: we disclose information when you use a sharing feature, connect a third-party service, authorize a representative, or otherwise give valid instructions.

KiloDrive does not sell personal information for money and does not operate as a data broker. Certain analytics or advertising disclosures may be treated as ÔÇ£sale,ÔÇØ ÔÇ£sharing,ÔÇØ or targeted advertising under some laws; where applicable, consent and opt-out controls will be provided.

9. Location, safety, and trip replay

Location is central to pickup, dispatch, navigation, ETA, active-trip status, driver availability, fraud prevention, and safety. With applicable permissions, KiloDrive may collect active-driver location and timestamped trip telemetry. Authorized trip replay can support support, safety investigations, disputes, and valid criminal or legal investigations. Access is role-restricted and audited. KiloDrive may preserve relevant location records during an active safety incident or legal hold. Trip sharing is time-limited and should be shared only with trusted people.

10. Legal bases

Depending on jurisdiction and context, we rely on performance of a contract or steps requested before entering one; compliance with legal obligations; legitimate interests such as safety, fraud prevention, support, platform security, service improvement, and legal claims; protection of vital interests in an emergency; and consent for processing that requires it, such as optional marketing, some analytics, precise background location, or device permissions. You may withdraw consent prospectively, but withdrawal does not affect prior lawful processing and may make a feature unavailable.

11. Retention and deletion

We retain information only for as long as reasonably necessary for the purpose collected and applicable legal, accounting, tax, insurance, safety, dispute, limitation-period, and regulatory obligations. Account information generally remains while the account is open. Transaction, wallet, ledger, payment, payout, membership, platform-fee, tax, and completed-service records may be retained for the legally required accounting period. Driver and vehicle records may be preserved to prove historical eligibility. Security, notification, support, location, trip replay, and document retention periods are limited by configured policy and may differ by country and incident status. Legal holds suspend ordinary deletion.

An account-deletion request anonymizes or deletes eligible personal fields and disables future use. It does not erase immutable financial records or information KiloDrive must retain for fraud, safety, disputes, insurance, tax, legal claims, or law. We may retain a minimal record to prevent re-registration by a suspended person where lawful.

12. Security

Measures include encrypted transport; private network services; protected secret storage; short-lived signed sessions; password rules; optional two-factor authentication and biometric app lock; device/session controls; tenant and role isolation; rate limits; private document storage; file type, size, and malware controls; Firebase App Check where enabled; idempotent financial operations; wallet locking and immutable ledger references; fraud review; correlation and audit records; sensitive-data redaction; readiness monitoring; backups; restoration and incident procedures. No system is completely secure, and users must protect credentials, devices, and one-time codes.

13. International and cross-country processing

KiloDrive uses a control plane and country transaction cells. A service requested while travelling normally belongs to the country where it occurs and uses that countryÔÇÖs currency and timezone. Providers may process information outside your country. Where required, KiloDrive uses contractual, technical, organizational, consent, adequacy, or other lawful transfer safeguards. Cross-country wallet conversion is not offered unless expressly disclosed under a compliant feature.

14. Your choices and rights

Depending on applicable law, you may request access, confirmation, correction, a portable export, deletion, restriction, objection, withdrawal of consent, information about automated processing, or human review. You may manage devices, permissions, notification categories, marketing choices, saved routes, payout methods, and certain profile information in the Platform. Device-level location, camera, photo, microphone, notification, and biometric permissions can be changed in operating-system settings, although a dependent feature may stop working.

Submit a request through Contact Us or the available in-app privacy workflow. We may verify your identity, authority, country, and account before responding. We will not unlawfully discriminate against you for exercising a right. We may deny or limit a request where permittedÔÇöfor example, when identity cannot be verified, another personÔÇÖs rights would be affected, the request is manifestly unfounded or excessive, or retention is legally required. You may complain to the relevant privacy or data-protection authority.

15. Children

KiloDrive is not intended for children below the minimum age required to hold an account in the relevant country, and no minor may register as a driver. A parent, guardian, or authorized adult must use any locally permitted dependent or guest feature. If we learn that information was collected from an ineligible child without lawful authority, we will take appropriate deletion or restriction action.

16. Third-party services

Maps, app stores, social login, payment pages, external websites, and provider services have their own terms and privacy practices. KiloDrive is not responsible for independent processing by those parties. Review their notices before directing information to them.

17. Changes and contact

We may update this Policy to reflect product, legal, or operational changes. The effective date will change, and material changes will be communicated through an appropriate channel before they take effect where required. Previous versions should be retained for accountability.

For privacy questions, rights requests, or complaints, use Contact Us. Do not include passwords, authentication codes, full payment credentials, or unnecessary identity documents in an ordinary message.