Privacy policy

1. Who operates Ride

Ride is operated by Ride Digital Services (“Ride”, “we”, “us”). Registered/business address: 7/1-D, R.K. Mission Road, Dhaka - 1203. This legal identity must match the developer/company identity used in the app and store listing.

Privacy contact: privacy@ride.digital-papyrus.com

2. Information the app may process

Complete this section from a data inventory. Depending on the services and roles enabled in the released app, the audit should determine whether Ride processes:

• Account and identity information, such as name, phone number, profile, role and verification records.
• Precise or approximate location, pickup/drop-off points, route and trip or delivery status.
• Booking, order, parcel, merchant, driver and service-provider records.
• Payment method references, transaction status, refunds and settlement records. Do not publish full payment-card handling claims without confirming the payment gateway architecture.
• Device, diagnostics, crash reports, app usage and security information collected by the app or SDKs.
• Support requests and communications.

Required completion: for each data type, state whether it is collected, why, whether it is optional, whether it is shared, and whether it is processed on-device or by a service provider.

3. How information is used

Insert the verified purposes for account operation, service matching, booking fulfilment, navigation/trip or delivery updates, payment processing, fraud prevention, customer support, security, analytics and legal compliance. Remove any purpose that the production app does not perform.

4. When information is shared

Document each recipient category and the data shared with it. This may include the matched driver or service provider, merchant or delivery partner, payment processor, map/location provider, cloud hosting provider, analytics/crash SDK provider, support tools and competent authorities where legally required. Name material processors where required and verify their own privacy terms.

5. Location and background access

Explain when Ride accesses location, whether access occurs while the app is in use or in the background, which role/service needs it, how the user is informed, how permission can be changed, and what happens when permission is denied. The app's prominent disclosures, runtime permissions and Play Console declarations must match this policy.

6. Retention and account deletion

State the actual retention periods or criteria for account data, trip/order records, payment and settlement records, verification materials, support requests, location records, security logs and backups. Explain any narrow legal, accounting, safety or fraud-prevention retention exceptions and when retained data is erased or de-identified.

Users can initiate a deletion request through the Ride account-deletion page. The production process must delete associated account data unless a documented legal or legitimate retention exception applies. Account deletion must also be available inside the app.

7. Security

Describe the actual administrative, technical and organizational safeguards used to protect personal data. Do not claim a certification, encryption standard, penetration-test result or security guarantee unless it has been verified.

8. Children's privacy

Insert the actual minimum-age and eligibility rules, whether children can create accounts or use services, and how data relating to minors is handled. Obtain local legal review before publication.

9. Cross-border processing

Identify hosting regions and any service providers that process data outside Bangladesh, the relevant safeguards and user disclosures. Do not leave this section blank if cross-border processing occurs.

10. Changes and contact

Policy owner: Ride Digital Services. Last updated: 5 November 2026. For privacy questions, contact privacy@ride.digital-papyrus.com. General app support: support@ride.digital-papyrus.com.