HABAL

At Habal, protecting your privacy and personal data is our top priority. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ride-hailing platform in Silago, Southern Leyte. By using our services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect information that you provide directly to us, as well as information automatically collected when you use our services:

1.1 Account Information

• Personal identification information (full name, email address, phone number)
• Profile information including profile picture (optional)
• Government-issued identification for rider verification (driver's license, vehicle registration)
• Emergency contact information

1.2 Location Information

• Real-time location data when you use our services via GPS, WiFi, and cellular network
• Pickup and destination locations for ride requests
• Route information during active rides
• Location history for completed rides
• IP address and approximate location from your device

1.3 Transaction and Ride Information

• Ride history including dates, times, routes, and fares
• Ratings and reviews for riders and passengers
• Communications between riders and passengers
• Reports and feedback submitted through the platform

1.4 Device and Usage Information

• Device type, operating system, and browser information
• Unique device identifiers and mobile network information
• App usage data and interaction patterns
• Crash reports and performance diagnostics

1.5 Waitlist Information

• Information provided when joining our early access waitlist
• User preferences and interests in platform features

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Service Delivery

• Connect passengers with available riders in real-time
• Calculate fares and optimal routes
• Track ride progress and enable real-time location sharing
• Process ride requests and facilitate communication
• Maintain ride history and provide receipts

2.2 Safety and Security

• Verify rider credentials and ensure platform safety
• Investigate and respond to reports of misconduct
• Detect and prevent fraud, abuse, and security incidents
• Implement emergency response features (SOS button, location sharing)
• Monitor and analyze suspicious activities

2.3 Platform Improvement

• Analyze usage patterns to improve user experience
• Develop new features and services
• Optimize route suggestions and availability zones
• Conduct research and analytics on transportation patterns

2.4 Communication

• Send ride notifications, confirmations, and updates
• Provide customer support and respond to inquiries
• Send promotional communications (with your consent)
• Notify waitlist members of platform updates and launch
• Send important service announcements and policy updates

2.5 Legal Compliance

• Comply with legal obligations and law enforcement requests
• Enforce our Terms of Service and other agreements
• Protect the rights, property, and safety of our users and the public

3. Information Sharing and Disclosure

We may share your information in the following situations:

3.1 With Other Users

• Riders receive passenger's pickup location, destination, and contact information
• Passengers receive rider's name, photo, vehicle details, and real-time location
• Users can view ratings and reviews after ride completion

3.2 With Service Providers

• Firebase (Google) for authentication, database, and hosting services
• OpenStreetMap for mapping and location services
• Analytics providers to understand platform usage
• Customer support and communication tools

3.3 For Legal Reasons

• To comply with legal obligations and government requests
• To respond to law enforcement inquiries
• To investigate potential violations of our Terms of Service
• To protect against legal liability and fraud

3.4 Business Transfers

• In connection with a merger, acquisition, or sale of assets
• During business negotiations (with appropriate confidentiality measures)

3.5 With Your Consent

• When you explicitly authorize us to share specific information
• For purposes you have been notified about and agreed to

4. Location Data Usage and Controls

Location tracking is essential to our service. Here's how we handle it:

4.1 When We Collect Location Data

• During active ride requests and ongoing rides
• When the app is open and you're available as a rider
• When you explicitly share your location for a booking

4.2 How We Use Location Data

• Match passengers with nearby available riders
• Display real-time location on maps for both parties
• Calculate accurate fares based on distance
• Optimize route suggestions
• Provide ride history with route information
• Analyze transportation patterns in Silago (aggregated and anonymized)

4.3 Your Location Controls

• You can enable or disable location services in your device settings
• Location sharing stops when a ride is completed or cancelled
• Riders can toggle availability on/off to control location tracking
• You can delete your ride history, which includes location data

5. Data Security

We implement comprehensive security measures to protect your personal information:

• Industry-standard encryption for data transmission (HTTPS/TLS)
• Secure Firebase authentication and database with access controls
• Regular security audits and vulnerability assessments
• Restricted access to personal data on a need-to-know basis
• Secure session management with token expiration
• Protection against common web vulnerabilities (XSS, CSRF, SQL injection)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Privacy Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and applicable laws, you have the following rights:

6.1 Right to Access

• Request a copy of your personal data we hold
• Obtain information about how we process your data

6.2 Right to Correction

• Update or correct inaccurate personal information
• Modify your profile and account settings

6.3 Right to Deletion

• Request deletion of your personal data (subject to legal retention requirements)
• Delete your account through the settings page

6.4 Right to Object

• Object to certain types of data processing
• Opt-out of marketing communications
• Disable certain features that collect data

6.5 Right to Data Portability

• Request your data in a structured, commonly used format
• Transfer your data to another service provider

6.6 Right to Withdraw Consent

• Withdraw consent for optional data processing at any time
• Note: Some data processing is necessary to provide our services

To exercise these rights, contact us at privacy@habal.fun or through your account settings.

7. Data Retention

We retain your personal information for different periods depending on the type of data:

• Account information: Retained while your account is active and for 1 year after account deletion
• Ride history: Retained for 3 years for tax and legal compliance purposes
• Location data: Retained for 1 year after ride completion, then anonymized
• Transaction records: Retained for 7 years as required by law
• Support communications: Retained for 2 years
• Reports and safety incidents: Retained for 5 years or as required by law
• Anonymized analytics data: Retained indefinitely

After the retention period, we will securely delete or anonymize your personal data.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences and settings
• Analyze platform usage and performance
• Improve user experience

You can control cookie preferences through your browser settings. Note that disabling cookies may affect platform functionality.

9. Third-Party Services

Our platform integrates with third-party services:

• Firebase (Google): Authentication, database, and hosting - Privacy Policy
• OpenStreetMap: Mapping services - Privacy Policy

These services have their own privacy policies. We encourage you to review them.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we discover that a child under 18 has provided personal information, we will delete it immediately. If you believe a child has provided us with personal information, please contact us at privacy@habal.fun.

11. International Data Transfers

Your data may be transferred to and processed in countries outside the Philippines (e.g., Firebase servers). We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will:

• Post the new Privacy Policy on this page
• Update the "Last updated" date
• Notify you of significant changes via email or in-app notification
• For material changes, obtain your consent where required by law

We encourage you to review this Privacy Policy periodically.

13. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@habal.fun
• Support Email: support@habal.fun
• Developer Contact: developer@habal.fun
• Phone: 09707859835
• Address: Silago, Southern Leyte, Philippines

For data privacy complaints or concerns, you may also contact the National Privacy Commission:

• Website: www.privacy.gov.ph
• Email: info@privacy.gov.ph

14. Governing Law

This Privacy Policy is governed by the Data Privacy Act of 2012 (Republic Act No. 10173) and other applicable Philippine laws. Any disputes arising from this policy shall be resolved in accordance with Philippine law.

This Privacy Policy is effective as of the date stated above and applies to all users of the Habal platform. By continuing to use our services, you acknowledge that you have read, understood, and agree to this Privacy Policy.