WE DRIVE — Privacy Policy

This Privacy Policy explains how We Drive (Private) Limited ("WE DRIVE", "we", "us", or "our") collects, uses, stores, shares, and protects information about you when you use the WE DRIVE mobile app, our website at wedrivepakistan.com, and any related services (collectively, the "Service"). By using the Service you agree to the practices described here.

1. Who We Are

WE DRIVE is a ride-hailing and parcel-delivery platform connecting riders with independent drivers across Pakistan. The data controller responsible for your personal information is We Drive (Private) Limited, a private limited company registered with the Securities and Exchange Commission of Pakistan (SECP) under CUIN 0332896.

2. Data We Collect

2.1 Information you give us directly

• Account info: Full name, mobile phone number, email address, profile photo, gender (optional, used for the Female Privacy mode), preferred language.
• Driver-only info: CNIC (Computerized National Identity Card) number and image, driving licence, vehicle registration certificate (RC Book), insurance certificate, fitness certificate, route permit, vehicle photos, bank account / EasyPaisa / JazzCash details for payouts.
• Communications: Messages you send to our AI support agent or human support team, ratings, complaints, and survey responses.

2.2 Information collected automatically

• Location data: Precise GPS coordinates of pickup, drop-off, and the route in between. For drivers who go online, location is collected continuously (including when the app is in the background) so we can match riders, calculate fares, and verify rides.
• Device data: Device model, operating system version, app version, IP address, language, time zone, mobile network operator, and unique device identifiers.
• Usage data: Screens visited, buttons tapped, ride history, search queries, time stamps, and crash reports.
• Cookies / local storage (web only): Session cookies on wedrivepakistan.com for authentication and basic analytics. No third-party advertising cookies.

2.3 Information from third parties

• OTP delivery confirmation status from our WhatsApp messaging provider (Meta WhatsApp Business Cloud API).
• Payment confirmation status from EasyPaisa, JazzCash, and partnered banks.
• Map and routing data from Google Maps.

3. How We Use Your Data

• To verify your identity and create your account (via WhatsApp / SMS OTP).
• To match riders with the nearest available drivers in real time.
• To calculate fares based on distance, time, vehicle category, and surge factors.
• To process payments and wallet top-ups via EasyPaisa, JazzCash, and bank transfers.
• To enable safety features: live ride tracking, SOS alert, "Have a Safe Journey" notifications, and ride-completion verification.
• To detect and prevent fraud, including "ghost ride" detection via dual GPS path matching, fake-document detection, and driver-rider proximity verification.
• To provide customer support through our in-app AI agent (powered by Google Gemini) and human support team.
• To comply with legal obligations including invoicing, tax reporting to FBR, and SECP filings.
• To send you operational notifications (ride status, payment confirmations, safety alerts) and, with your consent, promotional messages.

4. Data Sharing

We do NOT sell your personal data. We share only the minimum information necessary, with the following categories of recipients:

4.1 Other users of the Service

• Riders see the driver's first name, vehicle, plate number, photo, rating, and live location.
• Drivers see the rider's first name, pickup/drop-off, and (after acceptance) phone number for coordination.

4.2 Service providers (data processors)

• META Meta WhatsApp Business Cloud API — to deliver OTPs, ride alerts, and AI support replies via WhatsApp.
• GOOGLE Google Maps Platform — for geocoding, routing, and map display.
• GOOGLE Google Gemini API — to power our AI customer-support agent. Conversation transcripts are processed but not used to train Google's models.
• EMAIL Resend — for transactional email (receipts, support tickets) from support@wedrivepakistan.com.
• PAY EasyPaisa, JazzCash, and partnered banks — to process wallet top-ups and driver payouts.
• HOST Replit Inc. — our cloud hosting provider for the application backend and database.

4.3 Legal & safety

• Pakistani regulators including SECP and FBR when required by law.
• Law-enforcement agencies in response to a valid court order, FIR, or written request from authorised officers.
• To protect the safety of riders, drivers, our staff, or the public, including in the event of an accident or SOS alert.

5. Location Data — Background Tracking Disclosure

Our app requests foreground location for all users and background location for drivers who choose to go online. Background location is used only while the driver is in "Online" mode and is required to:

• Match the driver with nearby ride requests.
• Show riders the driver's live position en route to pickup.
• Verify ride completion and detect ghost rides.

Background location collection stops the moment the driver toggles "Offline". You can revoke location permission at any time through your device's settings; doing so will prevent you from using ride-related features.

6. Female Privacy Protection

WE DRIVE provides additional privacy options for female riders:

• Option to hide ride details from drivers until the moment of pickup.
• Female-only driver matching where verified female drivers are available in your area.
• Priority routing of SOS alerts from female riders to our 24/7 safety desk.

6A. Automated Notifications & Re-engagement

To deliver a reliable transport service, WE DRIVE sends automated notifications via in-app alerts (sounds and vibrations) and via WhatsApp on the registered mobile number:

• Service alerts (always on): ride confirmation, driver assigned, driver arrived at pickup, ride completed, payment received, and SOS confirmations. These are essential to operating the service safely and cannot be disabled while you have an active ride.
• OTP & security: one-time login codes are delivered via Meta WhatsApp Business Cloud API. Requests are rate-limited (max 1 per minute, 5 per hour, 15 per day per number) to prevent abuse.
• Re-engagement reminders: if your account remains inactive for five (5) consecutive days, we may send one short WhatsApp reminder so you do not miss available rides or driver earnings. We send no more than one such reminder per inactivity period.
• Promotional messages: only with your explicit opt-in via in-app settings or by replying YES to a consent prompt.

You can opt out of re-engagement reminders and promotional messages at any time by replying STOP to any of our WhatsApp messages, by emailing support@wedrivepakistan.com, or by adjusting notification settings inside the app. Service alerts tied to an active ride or to your account security cannot be disabled.

7. Data Retention

• Active accounts: Retained for the lifetime of your account.
• Closed / deleted accounts: Personal data is anonymised within 30 days of your deletion request, except where longer retention is required by law.
• Ride records, invoices, and tax data: Retained for 6 years as required by FBR and SECP regulations.
• Crash and security logs: Retained for up to 12 months for fraud and abuse investigations.

8. Your Rights

You have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or out-of-date information through the in-app profile screen.
• Delete your account and personal data — submit a request at wedrivepakistan.com/delete-account.html or in-app under Settings → Delete Account.
• Withdraw consent for promotional messages at any time.
• Object or complain to us, and ultimately to the relevant Pakistani data-protection authority.

9. Security

We use industry-standard safeguards including HTTPS/TLS encryption in transit, bcrypt-hashed passwords, signed session tokens, role-based access controls, encrypted database storage, and HSTS on our domain. No method of transmission is 100% secure; please notify us immediately of any suspected unauthorised access to your account.

10. Children

WE DRIVE is not directed to children under 13, and we do not knowingly collect data from them. Drivers must be at least 18 years old and hold a valid Pakistani driving licence. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top will reflect any change. Material changes will be notified to you in-app at least 7 days before they take effect.

12. Contact Us