Template notice: This Privacy Policy is a starting template for lawyer review before public launch. Replace placeholder language with your final reviewed text. The structure follows GDPR, Bahrain PDPL, UAE PDPL, and the requirements of Google Play / Apple App Store data-safety disclosures.
This Privacy Policy explains how WiseHop ("WiseHop", "we", "us") collects, uses, shares, and protects information about you when you use the WiseHop mobile apps, the website at https://wisehop.app, and any related services (together, the "Service").
1. Information we collect
1.1 Information you give us
- Account profile: name, phone number, email address, date of birth, profile photo.
- Driver onboarding: government ID, driving licence, vehicle registration, vehicle photos, insurance certificate, bank or payout-destination details.
- Booking content: pickup and drop-off locations, passenger count, vehicle preference, contacts you add for delivery, notes you write for the driver.
- Messages and calls: in-app chat content, voice-call metadata (start time, duration, participants).
- Payment information: card details, PayPal account, cryptocurrency wallet addresses, transaction history. Card numbers are tokenised via our payment processor; we do not store full card numbers.
- Support enquiries: content of messages you send us via email or in-app chat.
1.2 Information we collect automatically
- Device: model, OS version, device identifier, app version, language, time zone.
- Network: IP address, carrier (mobile), connection type.
- Location: precise GPS coordinates during active bookings; coarse location for nearby-driver detection. You can disable location at any time in OS settings (rides cannot be completed without it).
- Usage: screens viewed, taps, errors, crash reports. Anonymised by default.
2. How we use information
- To operate the Service: matching passengers to drivers, calculating routes, processing payments.
- To verify drivers (government ID, licence, insurance, background check).
- To provide customer support and to investigate fraud or safety incidents.
- To improve and personalise the Service (anonymised usage analytics).
- To send transactional communications (booking confirmations, receipts, ride updates).
- To send marketing communications (promotional, only with your consent or where lawfully permitted).
- To comply with legal obligations and respond to lawful requests from authorities.
3. How we share information
- With the other party to a booking (driver sees passenger name; passenger sees driver name, rating, vehicle, and photo). Phone numbers are never shared.
- With service providers we contract with: payment processors, cloud infrastructure, SMS gateways, push-notification services, fraud detection, customer support tools. Each has a contractual obligation to protect your data.
- With authorities when required by law, court order, or to protect rights, property, or safety.
- In connection with a sale, merger, or transfer of all or part of our business (with notice).
We do not sell your personal data to advertisers. We do not share precise location data with third parties for advertising.
4. International transfers
WiseHop is operated from the Kingdom of Bahrain with infrastructure in (data centre region). Where we transfer data outside your country of residence, we rely on Standard Contractual Clauses or comparable transfer mechanisms.
5. Retention
We keep account and booking data for as long as your account is active and for a reasonable period afterwards to support legal, accounting, and dispute-resolution requirements (typically up to 7 years for financial records). Verification documents are retained for the regulatory period required in each jurisdiction we operate in.
6. Your rights
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to fix inaccurate or incomplete data.
- Deletion — ask us to delete your account and associated data, subject to legal retention requirements.
- Restriction or objection — ask us to limit how we use your data, or object to certain uses.
- Portability — receive a structured export of your data.
- Withdraw consent — for processing based on consent (e.g. marketing).
Exercise these rights by emailing [email protected] from the email address linked to your account. We respond within 30 days.
7. Security
We use technical and organisational measures including TLS 1.3 in transit, AES-256 at rest, role-based access controls, and 24/7 logging of administrative actions. No system is perfect — to report a suspected vulnerability, email [email protected].
8. Children
The Service is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
9. Cookies and tracking
Our website uses cookies and similar technologies. See our Cookie Policy for details and choices.
10. Changes to this policy
We may update this policy. We will notify you in-app or by email for material changes. The "Last updated" date at the top reflects the current version.
11. Contact
Privacy questions: [email protected].
Security disclosures: [email protected].