Contents
1. Information We Collect
Account information
When you register, we collect your name, phone number, and optionally your email address and profile photo. Drivers additionally provide their vehicle plate number, vehicle model, and a government-issued ID verified at our physical office.
Location data
The passenger app requests your device's GPS location to detect your pickup point and show nearby drivers on the map. The driver app requests "Always Allow" (background) location access so passengers can track your position in real time during an active ride.
Ride data
We record details of every trip including pickup and drop-off coordinates, addresses, fare, distance, timestamps, payment method, and any cancellation reason.
Delivery data
For food and package deliveries, we record pickup and drop-off addresses, a description of the item(s) being sent, the recipient's name and contact number, fee, distance, timestamps, payment method, and any delivery notes or failure reason.
Device and usage data
We collect your Firebase Cloud Messaging (FCM) token to deliver push notifications. We may also collect device type and operating system version for diagnostic purposes.
Payments
We do not store credit card or GCash credentials. Cash fares are settled directly between passenger and driver. Digital payment details are handled by the respective payment provider and are not stored on our servers.
2. How We Use Your Information
- To match passengers with nearby available drivers.
- To display real-time driver location to the passenger during a ride.
- To calculate and display fare estimates and final charges.
- To send push notifications about ride status, driver arrival, and in-app messages.
- To maintain ride history and earnings records.
- To calculate and display ratings for passengers and drivers.
- To validate and apply promo codes.
- To investigate disputes, safety incidents, and support requests.
- To improve the accuracy of the matching algorithm and fare calculator.
3. Sharing Your Information
We do not sell your personal data. We share your information only in the following circumstances:
- Between ride participants. When a driver accepts a booking, the passenger sees the driver's name, vehicle plate, vehicle model, photo, and phone number. The driver sees the passenger's name, photo, and phone number.
- Between delivery participants. When a driver accepts a delivery, the sender sees the driver's name, vehicle plate, vehicle model, photo, and phone number. The driver sees the sender's and recipient's name, address, and phone number necessary to complete the delivery.
- Service providers. We use Firebase (Google) for authentication, database, storage, and push notifications. Google Maps is used for location search and routing. These providers process data solely to provide their services to us.
- Legal requirements. We may disclose your information when required by Philippine law, a court order, or to protect the safety of any person.
- Emergency situations. In an emergency, we may share trip details with law enforcement or emergency services.
4. Location Data
Location is central to how Vreyo works. Here is exactly what each app collects and when:
Passenger app
Location is requested while the app is in use ("While Using the App"). It is used to set your pickup point and is not collected in the background.
Driver app
Background location ("Always Allow") is requested when you go online. This is necessary so passengers can track your position in real time during a ride. Location updates are transmitted to Firestore only when you have an active ride. Going offline stops all location transmission.
You may revoke location permission at any time in your device settings. Revoking background location on the driver app will prevent real-time tracking from working.
5. Data Retention
We retain your account data for as long as your account is active. Ride records are retained for a minimum of two years to support dispute resolution and regulatory compliance.
You may delete your account at any time from the Settings screen inside the app. Account deletion removes your profile, photo, and personal details from our systems. Anonymised ride records (with no personally identifiable information) may be retained for analytics purposes.
6. Security
All data is stored in Google Firebase, which provides encryption at rest and in transit. Access to your data is controlled by Firestore security rules that restrict each user to reading only data they are a participant in.
Driver profile fields (name, vehicle plate, vehicle model) are locked after admin verification and cannot be changed by the driver through the app, preventing impersonation.
Despite our safeguards, no system is completely secure. If you believe your account has been compromised, contact us immediately.
7. Your Rights
Under the Philippine Data Privacy Act of 2012 (Republic Act 10173), you have the right to:
- Be informed about how your data is collected and used.
- Access the personal data we hold about you.
- Correct inaccurate personal data.
- Request erasure of your personal data (subject to legal retention requirements).
- Object to the processing of your personal data.
- Lodge a complaint with the National Privacy Commission (NPC).
To exercise any of these rights, contact us at the details in Section 10.
8. Children's Privacy
Vreyo is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us and we will remove the account promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you through the app. Continued use of Vreyo after changes are posted constitutes acceptance of the updated policy.
10. Contact Us
If you have questions or concerns about this Privacy Policy or your personal data, please contact our Data Protection Officer:
- Email: privacy@vreyo.ph
- Address: Vreyo Philippines, [Office Address], Philippines
You may also contact the National Privacy Commission (NPC) at www.privacy.gov.ph if you believe your rights under the Data Privacy Act have been violated.