Privacy Policy

1. Scope & Who This Applies To

This policy applies to two categories of users of the Platform:

• Riders — individuals who request rides or delivery services through the Enteqal rider app.
• Drivers — independent transport providers who accept and fulfil rides or deliveries through the Enteqal Driver app.

Some sections apply only to one category; where that is the case we say so explicitly.

2. Information We Collect

2.1 Information you provide directly

2.2 Information collected automatically

• Precise location (GPS): collected continuously from the Driver app while online and from the Rider app during ride request and active trips. Used for matching, navigation, fare calculation and trip safety. See Section 4.
• Device and technical data: device model, operating system version, app version, language, unique installation identifier, IP address, network type, crash logs and diagnostic events.
• Usage data: pages viewed, buttons tapped, fare estimates requested, ride history, timings of trip events (requested, accepted, arrived, started, completed, cancelled).

2.3 Information from third parties

• Maps & routing: Google Maps Platform provides mapping, directions, places autocomplete and street view imagery.
• Payments: HesabPay and other licensed payment processors notify us of payment status.
• SMS delivery: Ghoncha SMS gateway delivers one-time passwords and transactional SMS for phone verification.
• Background checks (Drivers): where legally required, we may obtain driving history and criminal background information from authorised providers.

2.4 Device permissions we request

The Enteqal apps request the following Android permissions. Each is used only for the purposes listed below. You may revoke any permission at any time in your device Settings.

We do not request access to your contacts, SMS messages, call log, microphone (for recording), or calendar.

3. How We Use Information

• Provide the service — match riders with nearby drivers, calculate fares, process payments, enable in-app chat and calls, generate receipts, handle cancellations and refunds.
• Safety & security — verify driver identity and vehicle documents, detect fraud, investigate incidents, respond to SOS and share-trip requests.
• Communication — send OTPs, ride status updates, receipts, promotional offers (you can opt out of marketing).
• Personalisation — remember saved places, favourite drivers, language preference, preferred payment method.
• Analytics & improvement — measure demand, improve matching quality, fix bugs, design new features.
• Legal compliance — meet tax, accounting, anti-fraud and lawful request obligations in Afghanistan and other jurisdictions where we operate.

4. Location Data

Location data is central to ridesharing. Specifically:

• Drivers: while you are online in the Driver app, we collect your precise location continuously (including in the background) so the matching service can offer you nearby rides and so riders can see your position while you are en route. When you go offline, background location collection stops.
• Riders: we collect your location when you open the app, request a ride, or during an active trip, so we can show nearby drivers, provide pickup suggestions, and share your trip progress.
• Trip history: we retain the route polyline, pickup and drop-off coordinates of each completed or cancelled trip for the period described in Section 6.
• Controls: you can revoke location permission from your device settings at any time. Drivers cannot go online without location permission; riders may be unable to request rides.

5. Sharing With Third Parties

We do not sell personal information. We share it only with the parties below, for the purposes described:

• Between rider and driver — first name, rating, vehicle model and plate, profile photo, and live location during an active trip are visible to the other party to allow the trip to happen. Phone numbers are masked in in-app calling where technically possible.
• Service providers — Google Maps Platform (mapping, directions, geocoding), HesabPay and other payment processors, Ghoncha SMS (OTP delivery), cloud storage providers (hosting), crash and analytics tools. These providers may only use your data to perform services for us and are contractually bound to keep it confidential.
• Trusted contacts — if you use "Share Trip", the contact you select receives a link showing your real-time trip progress and driver details until drop-off.
• Emergency services & authorities — if you trigger SOS, or if we receive a lawful request, or if disclosure is necessary to prevent imminent harm, we may share relevant information with police or emergency responders.
• Corporate transactions — in case of merger, acquisition or asset sale, information may be transferred to the acquiring entity subject to this policy.

6. Data Retention

• Account data — retained for the lifetime of your account. When you delete your account, we delete or anonymise personal identifiers within 90 days, except where retention is required by law (for example, tax records retained for 7 years).
• Trip records — retained for up to 7 years to meet accounting, tax and dispute-resolution obligations. Precise GPS breadcrumbs between pickup and drop-off are retained for up to 18 months, after which only the pickup/drop-off endpoints and summary remain.
• Chat & safety reports — retained for the time needed to investigate and resolve the matter, then archived for audit purposes.
• Payment records — retained as long as required by law and the relevant payment processor's rules.

7. Security

We use industry-standard technical and organisational measures, including TLS encryption in transit, encrypted storage for sensitive fields, access controls for employees on a need-to-know basis, device-level biometric authentication options in the app, and regular security reviews. No system is perfectly secure; we encourage you to use a strong password and to enable biometric or PIN lock on your device.

8. Your Rights & Choices

• Access & update — view and edit your profile in the app under Account > Personal Info.
• Delete your account — from the app under Account > Settings, or by emailing us. We will delete or anonymise personal identifiers within 90 days, subject to legal retention obligations.
• Download your data — email us and we will provide a copy of your personal information held by the Platform within 30 days.
• Opt out of marketing — use the unsubscribe link in any marketing email, or toggle notifications under Settings. Transactional messages (OTPs, ride status, receipts) are operationally required and cannot be disabled.
• Location permission — can be revoked at any time from device settings, with the consequences described in Section 4.

9. Children

The Platform is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes To This Policy

We may update this policy from time to time. When we make material changes, we will notify you through the app or by email before the change takes effect. The "Effective" date at the top of this page indicates when the current version was published.

11. Contact Us

If you have questions, complaints, or requests regarding this policy or your personal information, please contact:

Ghoncha Online Services Company
Privacy Office
Kabul, Afghanistan
Email: develop@ghoncha.com
Support: develop@ghoncha.com
Website: https://enteqal.com