DriveOn Privacy Policy

Last Updated: November 16, 2025

1. Introduction

DriveOn ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.

2. Information We Collect

2.1 Personal Information

• Account Information: Name, email address, phone number, profile picture
• Vehicle Information: Make, model, year, license plate, VIN
• Service History: Maintenance records, service appointments, provider interactions
• Payment Information: Billing address, payment method (processed securely by third-party providers)

2.2 Location Information

• Precise Location: GPS coordinates for service provider matching and navigation (foreground only)
• Approximate Location: General area for service availability
• Note: We only access location when the app is in use (foreground). We do not access location in the background.

2.3 Device Information

• Device Identifiers: Device ID (for app functionality only)
• Technical Information: Operating system, app version, device model
• Usage Data: App interactions, feature usage, crash reports
• Note: We do not use advertising IDs or collect advertising-related data.

2.4 Communication Data

• Phone Calls: Our app can redirect you to your device's dialer app to call service providers. We do not access your call history or make calls directly.
• SMS/Messaging: Our app can redirect you to your device's messaging apps (SMS, WhatsApp, Email) to contact service providers. We do not access, read, or send SMS messages directly.
• Push Notifications: Service reminders, appointment updates, promotional content

3. How We Use Your Information

3.1 Core Services

• Service Matching: Connect you with nearby service providers
• Appointment Scheduling: Manage your service appointments
• Payment Processing: Process payments for services
• Communication: Facilitate communication with service providers

3.2 Location Services

• Provider Matching: Find service providers near your location
• Navigation: Provide directions to service locations
• Service Reminders: Send location-based maintenance reminders
• Emergency Services: Locate your vehicle in case of emergency

3.3 Communication Features

• Phone Redirect: Redirect to your device's dialer app to call service providers (you control the call)
• Messaging Redirect: Redirect to your device's messaging apps (SMS, WhatsApp, Email) to contact providers (you control the messages)
• Push Notifications: Deliver important app updates and reminders
• Note: We do not access your call logs, SMS history, or read your messages. All communication is handled by your device's native apps.

4. Information Sharing

4.1 Service Providers

We share necessary information with service providers to:

• Schedule and complete services
• Process payments
• Provide customer support

4.2 Third-Party Services

• Firebase: Analytics, crash reporting, push notifications
• Cloudflare R2: Media storage for social features
• Payment Processors: Secure payment processing
• Maps Services: Navigation and location services

4.3 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal obligations
• Protect our rights and property
• Ensure user safety
• Prevent fraud or abuse

5. Data Security

We implement appropriate security measures to protect your information:

• Encryption: Data encrypted in transit and at rest
• Access Controls: Limited access to personal information
• Regular Audits: Security assessments and updates
• Secure Storage: Industry-standard data storage practices

6. Your Rights and Choices

6.1 Location Permissions

• Grant/Revoke: You can enable or disable location services in device settings
• Precision Control: Choose between precise or approximate location
• Foreground Only: We only access location when the app is actively in use. We do not access location in the background.

6.2 Communication Permissions

• Phone Redirect: Our app redirects to your device's dialer app. We do not access call logs or make calls directly.
• Messaging Redirect: Our app redirects to your messaging apps. We do not access, read, or send SMS messages.
• Push Notifications: Enable/disable push notifications
• Note: We do not request or use SMS or Call Log permissions. All communication is handled through your device's native apps.

6.3 Data Management

• Account Deletion: Request account deletion and data removal
• Data Export: Request a copy of your personal data
• Data Correction: Update or correct your information

7. Data Retention

We retain your information for as long as necessary to:

• Provide our services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

Retention Periods:

• Account Information: Until account deletion
• Service History: 7 years (for warranty and legal purposes)
• Location Data: 30 days (unless longer retention required)
• Communication Logs: 1 year

8. Children's Privacy

DriveOn is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through:

• App notifications
• Email notifications
• Updated policy in the app

11. Contact Information

DriveOn Privacy Team

• Email: pwsimeon@gmail.com
• Address: Nairobi Kenya
• Phone: 0748306871 or 0725890336

Data Protection Officer

• Email: pwsimeon@gmail.com

12. Regional Privacy Rights

12.1 California Residents (CCPA)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information
• Right to non-discrimination

12.2 European Union Residents (GDPR)

• Right of access to personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

13. Third-Party Services

13.1 Firebase (Google)

• Purpose: Analytics, crash reporting, push notifications
• Data: Device information, usage analytics, crash logs
• Privacy Policy: https://policies.google.com/privacy

13.2 Cloudflare R2

• Purpose: Media storage for social features
• Data: User-uploaded images and videos
• Privacy Policy: https://www.cloudflare.com/privacypolicy/

13.3 Payment Processors

• Purpose: Secure payment processing
• Data: Payment information, transaction details
• Privacy Policy: [Payment processor privacy policy]

This Privacy Policy is effective as of the date listed above and applies to all users of the DriveOn application.