Privacy, plainly

What we collect

Your mobile number (to sign you in and run your bookings), your name if you choose to add it, saved home address and car details if you choose to save them, booking details (pickup, destination, landmark, fare), your live location while you wait for pickup (only if you allow it, and only until your trip starts), passenger name and number when you book for someone else, and insurance claim details you submit.

For trips booked on someone else's behalf, the valet may take one "safely aboard" photo of the passenger settled in the car, with the passenger's in-person consent (they can decline, and the trip proceeds normally). The photo is visible only to the person who booked, is never public, and is automatically deleted 7 days after the trip completes, or immediately on account deletion.

Why we collect it

Solely to provide the valet service: matching you with a valet, navigation to your pickup, fare calculation, trip records, and claims handling. We do not sell personal data or use it for third-party advertising.

Who sees it

Your assigned valet sees your pickup, destination, landmark, car details, passenger name, and (while you wait) your live pickup location. While the trip is live they also see the mobile number to reach you on, and you see theirs, so the two of you can find each other; both are withdrawn when the trip ends. Our operations team sees booking records to run the service.

How long we keep it

Live location is used in real time and cleared from the active record when your trip starts. Booking and payment records are retained for business and legal record-keeping. You can request deletion at any time (below).

Your PDPA rights

Access: download everything we hold about you from the Account page (Download my data).

Correction: update your name, saved home and car in the app; contact us for anything else.

Withdrawal and deletion: use Delete my account on the Account page of either app, or delete without the app at /delete-account. Your profile is anonymised and identifying details are scrubbed from trip records.

Phone numbers & SMS consent

Signing in and applying to drive are opt-in by design: you type your own number, see the consent notice, and request the code yourself. We send transactional messages only, never marketing: sign-in and verification codes by SMS, and, if a bill for your trip is still unpaid 2 minutes after it ends, one reminder with its payment link, on WhatsApp through our WhatsApp Business provider or by SMS if WhatsApp cannot reach you. The full opt-in flow for codes is documented on our SMS & Phone Number Consent page at /sms-consent.

Security

Data is stored with an established cloud database provider, encrypted in transit (HTTPS everywhere) and at rest. Sessions are signed and expire after 30 days. Access is limited to what each role needs.

Phone numbers are shared only between you and the valet driving your car, and only while that trip is live: from the moment they are assigned until the trip ends or is cancelled, they can call you and you can call them. Before and after that window neither side is given the other's number, and a live-trip link you forward to someone else never contains either. If you booked for someone else, the number shared is the passenger's, not yours.

Contact / DPO

Data protection questions and requests: dpo@ddd.sg or the hotline at 6100 0000. We respond within 30 days as required by the PDPA.