Privacy Policy

1. Data Controller

The data controller responsible for your personal data is Raha Tech Group FZE, Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates. Email: info@rahashare.com

2. Data We Collect

We may collect the following categories of personal data:

• Identity data: first name, last name, date of birth, gender
• Contact data: email address, phone number
• Account data: username, password (encrypted), profile photo
• Trip data: pickup/drop-off locations, travel history, booking records
• Location data: GPS coordinates shared during ride searches and live trips
• Device data: IP address, browser type, operating system, device identifiers
• Payment data: transaction history (we do not store full card details)
• Communication data: messages exchanged through our in-app chat
• Verification documents: driving license, national ID, or passport (for driver verification)

3. How We Use Your Data

We use your personal data for the following purposes:

• To create and manage your account and profile
• To provide and facilitate carpooling and ride-sharing services
• To verify the identity and eligibility of drivers
• To process bookings, payments, and refunds
• To enable in-app communication between users
• To send transactional notifications and service-related updates
• To ensure safety and prevent fraud, abuse, or illegal activity
• To improve our platform through analytics and usage monitoring
• To comply with legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal grounds under GDPR (where applicable):

• Contract performance: processing necessary to deliver the services you have requested
• Legitimate interests: fraud prevention, platform security, and service improvement
• Legal obligation: compliance with applicable laws and regulations
• Consent: where you have given explicit consent (e.g., marketing communications)

5. Sharing Your Data

We do not sell your personal data. We may share it with:

• Other platform users: limited profile and trip information visible to matched drivers or passengers
• Service providers: third-party processors who help operate the platform (e.g., maps, payment, cloud hosting)
• Legal authorities: when required by law or to protect the rights and safety of our users
• Business transfers: in the event of a merger, acquisition, or asset sale

6. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Account data is retained for the duration of the account and for up to 3 years after account deletion for legal and dispute resolution purposes. Trip data is retained for up to 5 years for safety and legal compliance.

7. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right to access: request a copy of your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your data ("right to be forgotten")
• Right to restriction: limit how we process your data
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: at any time, without affecting prior processing

8. Cookies & Tracking

We use cookies and similar tracking technologies to improve user experience, analyze platform usage, and deliver relevant content. You can manage your cookie preferences through our cookie banner or your browser settings. Essential cookies are required for the platform to function and cannot be disabled.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. Where data is transferred from the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you become aware that a child has provided us with personal data, please contact us immediately at info@rahashare.com and we will take steps to delete such information.

11. Data Security

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encrypted data storage, secure connections (HTTPS/TLS), and strict access controls. However, no method of transmission over the internet is 100% secure.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of significant changes by email or through a prominent notice on our platform. The updated policy will be effective as of the date posted.