Privacy Policy
Effective Date: February 2026 · Last Updated: February 2026
1. Introduction
ZanCo Holdings Ltd trading as Ride Safar (“Ride Safar,” “we,” “us,” or “our”) is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, store, and share personal data when you use our mobile application, website, and related services (the “Platform”).
Ride Safar operates as a marketplace platform connecting independent transportation providers (“Drivers”) with travelers (“Passengers”) for pre-arranged intercity journeys. This policy applies to all users of the Platform, including Drivers, Passengers, and website visitors.
2. Data We Collect
2.1 Information You Provide
- Account information: Name, phone number, and preferred language when you create an account
- Profile information: Profile photo and display name (optional)
- Journey information: Pickup and destination locations, travel dates, route preferences, and seat availability (Drivers)
- Payment information: Payment card details are collected and processed securely by our payment processor (Stripe). Ride Safar does not store full card numbers on its servers.
- Communications: Messages sent through the Platform and support inquiries
- Ratings and reviews: Feedback you leave for other users
2.2 Information Collected Automatically
- Device information: Device type, operating system, unique device identifiers, and push notification tokens
- Location data: Approximate location when searching for journeys; precise GPS location for Drivers when actively providing transportation (with your consent)
- Usage data: App interactions, feature usage, and session information
- Log data: IP address, access times, and error logs
2.3 Information from Third Parties
- Payment processor: Transaction status and payment confirmations from Stripe
- Maps services: Route and distance calculations from Google Maps
3. How We Use Your Data
We use your personal data to:
- Provide the Platform: Create and manage your account, facilitate journey matching, process bookings, and handle payments
- Enforce commitments: Operate the lock mechanism, process cancellation consequences, and administer the Platform Guarantee
- Communicate with you: Send booking confirmations, journey updates, lock-window notifications, and critical safety information via push notifications and in-app messages
- Maintain safety and trust: Verify user identities, operate the rating and review system, detect and prevent fraud, and enforce our Terms of Service
- Improve our services: Analyze usage patterns, diagnose technical issues, and develop new features
- Legal compliance: Meet regulatory requirements and respond to lawful requests from authorities
4. Legal Basis for Processing
We process your personal data based on:
- Contract performance: Processing necessary to provide the Platform services you have requested (account management, bookings, payments)
- Legitimate interests: Fraud prevention, platform security, service improvement, and enforcing our terms
- Consent: Location data collection, push notifications, and optional marketing communications (you can withdraw consent at any time)
- Legal obligation: Compliance with applicable laws and regulations in Saudi Arabia and the United Kingdom
5. How We Share Your Data
We share personal data only in the following circumstances:
5.1 With Other Users
When you make or accept a booking, we share limited information between Driver and Passenger to facilitate the journey (name, phone number, pickup location, and ratings).
5.2 With Service Providers
We use trusted third-party services to operate the Platform:
- Stripe: Payment processing (subject to Stripe's Privacy Policy)
- Convex: Backend infrastructure and data storage
- Google Maps: Mapping and route services
- Expo: Push notification delivery
5.3 For Legal Reasons
We may disclose personal data when required by law, regulation, court order, or governmental request, or when necessary to protect the rights, safety, or property of Ride Safar, our users, or the public.
5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity.
We do not sell your personal data to third parties for advertising or marketing purposes.
6. Data Retention
We retain your personal data for as long as:
- Your account remains active
- Necessary to provide our services and fulfill the purposes described in this policy
- Required by applicable law or regulation
- Needed to resolve disputes or enforce our agreements
When you delete your account, we will delete or anonymize your personal data within 90 days, except where retention is required by law (e.g., financial transaction records).
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit (TLS/HTTPS)
- Secure authentication with one-time passwords (OTP)
- Access controls limiting data access to authorized personnel
- Regular security reviews of our infrastructure
No system is completely secure. While we take reasonable measures to protect your data, we cannot guarantee absolute security.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data (subject to legal retention requirements)
- Portability: Request your data in a structured, machine-readable format
- Objection: Object to certain processing of your data
- Withdraw consent: Withdraw previously given consent at any time
To exercise these rights, contact us at privacy@ridesafar.com. We will respond within 30 days.
9. International Data Transfers
Your data may be processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and compliance with applicable data protection frameworks.
10. Children's Privacy
The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via push notification or prominent notice on the Platform. Continued use of the Platform after changes constitutes acceptance of the updated policy.
13. Contact Us
For questions or concerns about this Privacy Policy or our data practices: