Privacy Notice

1. Who we are and scope

Drivver is responsible for the processing described in this Notice unless another notice identifies a different role. This Notice applies to website visitors, prospective and active riders, driver-partners, fleet/business users, guests, emergency contacts, support contacts and others interacting with Drivver. Applicant data is addressed separately for job candidates.

2. Information we collect

• Account and contact: name, mobile, email, language, city, credentials and preferences.
• Driver/fleet verification: CNIC and identity details, photograph, licence, vehicle, registration, permits, fitness, insurance, ownership/use authority, screening and inspection results.
• Location and trip: pickup/destination, precise and background location where enabled, route, timestamps, category, driver/rider match, status, distance, duration and trip events.
• Payment and commercial: payment token/provider, transaction, cash record, charges, adjustments, settlement, tax and dispute data.
• Communications and support: in-app messages, complaints, incident reports, evidence, lost-property and survey responses.
• Device and usage: IP, device/app version, identifiers, network, diagnostics, security events, cookies, pages/actions and crash logs.
• Safety and integrity: ratings, account links, fraud/risk signals, unusual trip/payment/location patterns, eligibility and service indicators.
• Information from others: riders, drivers, fleet/business administrators, guests, emergency contacts, vendors, partners and lawful authorities.

3. Why we use information

• Provide and manage website, account, registration, matching, trip, payment, settlement, support and business/fleet services.
• Verify identity, licences, vehicles, eligibility, documents and continuing compliance.
• Support safety, incident response, trip sharing, emergency contacts, investigations and lawful authority cooperation.
• Detect, prevent and address fraud, account compromise, collusion, payment abuse and platform interference.
• Communicate service, security, legal, city and account information; send marketing only under your recorded preference.
• Analyse reliability, demand, supply, routes, performance and user experience.
• Meet tax, accounting, legal, regulatory and record-preservation duties.

4. Permissions and just-in-time notices

The app or website explains each sensitive permission at the moment it is requested — see the list below. A permission denial will not block unrelated functionality unless the permission is necessary for it.

5. How we share information

• Between riders and drivers: necessary profile, vehicle, pickup/destination, trip, rating and masked communication information.
• With fleets/businesses: authorised trip, user, policy, billing and reporting data based on roles — personal trips do not become visible merely because a user has a business account.
• With Jazz/JazzCash and partners: only the information required for the approved connectivity, payment or service purpose — the partnership does not mean unrestricted sharing.
• With service providers: cloud/hosting, maps, messaging, call centre, analytics, security, verification and payment processors under appropriate terms.
• With authorities and others: where required or permitted by lawful process, or to protect life, safety, rights or platform integrity — see our Law Enforcement Guidelines.

6. Retention

Drivver retains information only for the period needed for the purpose it was collected for — account/trip history, safety and fraud windows, tax/accounting, legal claims and regulatory obligations. The final published schedule will state specific retention periods for unverified leads, inactive accounts, trip/payment records, driver documents, support recordings, safety incidents, fraud investigations and marketing consent. At expiry, information is deleted, de-identified or securely archived with restricted access.

7. International processing

Drivver does not promise Pakistan-only storage unless our architecture and every vendor support it. Where providers process information outside Pakistan, we use contractual, technical and access controls approved by our Legal and Security teams. The specific countries/regions involved will be identified here once confirmed.

8. Security

Drivver uses administrative, technical and physical measures appropriate to risk, including access controls, encryption in transit and where appropriate at rest, logging, monitoring, secure development, vendor review, backup and incident response. No system is completely secure — please protect your credentials and report suspected compromise through our Contact page.

9. Choices and requests

You may update your account information, manage permissions and marketing preferences, request information or correction, ask for deletion/deactivation and raise a privacy complaint through our Privacy Request page, our account deletion page or Contact page, subject to verification and applicable law. Authorised-agent requests require proof of authority. We will provide a reference and review route if a request is denied or limited.

10. Children

The Platform is not intended for independent use below the approved minimum age. A parent, guardian or authorised adult must request permitted journeys for minors under the rules for the location/category. Drivver does not knowingly collect child information beyond what is necessary for an authorised service and legal/safety purpose.

11. Automated decisions

Drivver may use automated signals to detect fraud, safety risk, eligibility or service issues. Where a decision has a significant adverse effect on you, we provide appropriate human review, an explanation category and a challenge route, except where urgent action or law justifies a different process.

12. Updates and contact

This Notice shows an effective date, version and summary of changes once published. Material changes will be communicated as required. For privacy questions or complaints, use our Contact page. You may also raise a complaint with any authority or forum available to you under applicable law.