Privacy Policy

Kuick Digital SMC Pvt Ltd ("Vaya", "we", "our", or "us") operates the Vaya mobile application and related services (collectively, the "Platform"). Vaya is a women-only ride-hailing platform designed to enable safe transportation between verified female riders and verified female drivers. This Privacy Policy explains how we collect, use, process, store, and share personal information when users access or use the Platform. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of information as described herein.

Vaya collects personal information directly from users during account registration and during the use of the Platform. Riders registering on the Platform are required to provide identifying information including their name, phone number, and a valid government-issued identification document in the form of a Computerized National Identity Card (CNIC). Riders are required to upload both the front and back of their CNIC at signup for the purpose of identity verification and confirmation of eligibility to use the Platform.

Drivers registering on the Platform must provide additional documentation including their CNIC, driver's license, vehicle registration information, contact number, and other identifying details necessary to verify their eligibility to operate as a driver on the Platform. All identity verification procedures are conducted manually by the Vaya team prior to account approval. The purpose of collecting these documents is to verify identity, confirm eligibility requirements for the women-only platform, prevent fraud, and maintain the safety and integrity of the service.

In addition to identification information, the Platform collects certain operational information required to provide ride-hailing services. This includes ride request information, pickup and destination locations, ride history, timestamps, driver and rider identifiers, and communications exchanged through the in-app messaging system. The Platform allows riders and drivers to communicate through an in-app chat interface and phone numbers are not shared between users. Communications conducted through the Platform may be stored for safety, dispute resolution, and customer support purposes.

The Platform also collects device and technical information automatically when users interact with the application. Such information may include device type, operating system version, application version, IP address, device identifiers, network information, and usage activity within the app. This information is used to maintain the functionality, security, and reliability of the Platform and to improve user experience and system performance.

Location data plays an important role in enabling the Platform's services. The Vaya driver application uses background location tracking through a system-level foreground service with a persistent notification. This allows location updates to continue even if the driver locks their phone or switches to another application. Driver location tracking begins when the driver sets their status to "Online," allowing the system to identify nearby drivers and dispatch ride requests efficiently. As long as the driver remains online, the Platform continues to receive location updates even if no active ride is in progress. Location tracking stops only when the driver manually changes their status to "Offline" or logs out of the application. This background tracking enables accurate ride matching, route monitoring, safety verification, and operational functionality of the Platform.

For riders, the Platform follows a strictly foreground-only location policy. Rider location data is accessed only when the rider opens the application to view nearby drivers, requests a ride to set the pickup location, or is viewing the ride while the application remains open on their device during an active trip. Rider location tracking does not occur in the background and stops if the rider closes the application or navigates away from it. This approach is designed to protect user privacy while still enabling essential ride-hailing functionality.

Vaya uses the personal information it collects to operate and improve the Platform, verify user identities, match riders with drivers, facilitate ride services, maintain platform safety, detect fraud or misuse, investigate incidents or disputes, communicate with users, send service notifications, and comply with legal and regulatory requirements. Push notifications may be used to inform users about ride updates, safety alerts, account activity, or other operational information related to the Platform. Users may disable push notifications through their device settings.

Personal information may be shared in limited circumstances necessary to operate the Platform. Riders and drivers may receive limited identifying information about each other during a ride request, such as names, vehicle details, and pickup locations, solely for the purpose of facilitating the ride. Personal information may also be shared with trusted third-party service providers that assist in operating the Platform, including cloud infrastructure providers, mapping services, payment service providers for driver payouts, identity verification services, analytics providers, and technical support services.

The Platform currently relies on services provided by companies such as Google, including Google Cloud and Firebase, to store and process certain operational data, as well as Google Maps for navigation and mapping services. These providers may process data on servers located outside Pakistan as part of their global infrastructure.

Personal information may also be disclosed when required by law, regulation, legal process, or governmental request, including requests from law enforcement authorities. Vaya may also disclose information when necessary to protect the rights, safety, and property of the Platform, its users, or the public, or to investigate suspected fraud, misconduct, or violations of the Platform's Terms of Use.

Vaya retains personal information only for as long as necessary to provide services, maintain platform safety, comply with legal obligations, and resolve disputes. Identification documents such as CNIC copies may be retained for identity verification and compliance purposes and stored securely with restricted access. Ride history, operational logs, and related data may be retained for safety monitoring, fraud prevention, customer support, and legal compliance. When a user deletes their account, Vaya will take reasonable steps to remove or anonymize personal information associated with the account unless retention is required by law or necessary for legitimate operational purposes.

Vaya implements commercially reasonable administrative, technical, and organizational safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction. Data stored within the Platform is protected using industry-standard security practices including secure cloud infrastructure, controlled administrative access, and encryption during data transmission. While Vaya strives to protect user information, no method of transmission over the internet or method of electronic storage can be guaranteed to be completely secure.

The Platform is intended for users who are at least 18 years old. Vaya does not knowingly collect personal information from individuals under the age of 18. If it becomes aware that such information has been collected inadvertently, reasonable steps will be taken to delete it.

Vaya may update this Privacy Policy from time to time to reflect changes in technology, legal requirements, or platform operations. Updated versions will be made available within the application or on the Platform's website. Continued use of the Platform after such updates constitutes acceptance of the revised Privacy Policy.

Users who have questions regarding this Privacy Policy or who wish to request access to or deletion of their personal information may contact Vaya through the support channels provided within the application.