This Privacy Policy explains how MoonRide ("MoonRide", "we", "us") collects, uses, shares, and protects personal information when you use our website at moonride.co.za, our mobile applications for Android and iOS, and related services (together, the "Services"). We operate in South Africa and process personal information in line with the Protection of Personal Information Act, 2013 (POPIA), where it applies.
Responsible party: MoonRide is the operator responsible for your personal information under this policy. Formal registered entity details will be published here when available. For privacy requests, contact support@moonride.co.za.
1. Information we collect
Depending on how you use MoonRide, we may collect:
- Account information: name, email address, phone number, profile photo, role (rider, driver, vendor, or other), and authentication identifiers when you sign in (including via third-party sign-in such as Google or Firebase Authentication).
- Location information: precise and approximate GPS location when you request or provide rides, track deliveries, use maps, or when drivers are online. With your permission, we may collect location in the background while you are actively providing services as a driver so trips can be matched and tracked safely.
- Trip, order, and booking data: pickup and drop-off addresses, route information, timestamps, service type (ride, food delivery, water, hire, accommodation, etc.), pricing, status, and related metadata.
- Payment information: transaction references, amounts, and payment status. Card and banking details are processed by our payment partners; we do not store full card numbers on our servers.
- Identity and verification data (drivers and vendors): South African ID or other identity document numbers, photographs of identity documents, and verification outcomes when you complete onboarding.
- Communications: messages between riders, drivers, and vendors; support ticket content; and push notification tokens so we can send service alerts.
- Emergency and safety information (optional): emergency contact names and phone numbers, medical notes, or safety preferences you choose to save in settings.
- Media you upload: photos or documents you submit (for example profile images, menu items, or proof of delivery) via our upload flows, stored on secure cloud storage.
- Device and technical data: device type, operating system, app version, IP address, and diagnostic logs needed to operate and secure the Services.
2. How we use your information
We use personal information to:
- Provide, operate, and improve the Services (matching, navigation, fulfilment, and payouts).
- Process payments and send receipts or transaction confirmations.
- Verify driver and vendor identities and comply with safety requirements.
- Send transactional notifications (trip updates, order status, account alerts).
- Provide customer support and respond to enquiries.
- Detect, prevent, and address fraud, abuse, or security incidents.
- Comply with applicable law and enforce our Terms of Service.
- Analyse aggregated usage to improve reliability and user experience (not to sell your personal data).
3. Legal bases under POPIA
We process personal information when:
- It is necessary to perform a contract with you or take steps at your request before entering a contract.
- You have given consent (for example optional emergency contacts or marketing, where offered).
- Processing is necessary for our legitimate interests (such as safety, fraud prevention, or service improvement), balanced against your rights.
- We have a legal obligation to process or retain certain records.
4. Sharing with third parties
We may share information with:
- Other users as needed for the service (for example a driver sees pickup details; a vendor sees order details).
- Service providers who help us run MoonRide, including cloud hosting (AWS), authentication (Firebase / Google), maps (Google Maps, Mapbox), payment processors, and push notification delivery.
- Authorities when required by law or to protect rights, safety, or security.
We require processors to protect personal information and use it only for the purposes we specify. We do not sell your personal information to advertisers.
5. Location data
Location is central to rides, deliveries, and driver operations. You can control location permissions in your device settings. If you disable location, some features may not work. Drivers who go online may need to allow location access (including background location where supported) so passengers can track trips and we can operate the platform safely.
6. Verification and identity documents
Drivers and vendors must submit identity information for verification. We use this only for onboarding, compliance, fraud prevention, and account security. Documents are stored using access controls and retained only as long as needed for these purposes or as required by law.
7. Data retention
We keep personal information for as long as your account is active and as needed to provide the Services, resolve disputes, enforce agreements, and meet legal, tax, or regulatory requirements. When data is no longer required, we delete or anonymise it where reasonably possible.
8. Security
We use technical and organisational measures appropriate to the sensitivity of the data, including encryption in transit (HTTPS), access controls, and secure cloud infrastructure. No method of transmission or storage is completely secure; please use a strong password and protect your device.
9. International transfers
Our infrastructure and some service providers may process data outside South Africa (for example in the United States or other regions where AWS or partner services operate). Where required, we take steps to ensure appropriate safeguards for cross-border transfers under POPIA.
10. Your rights
Subject to POPIA and applicable law, you may have the right to:
- Request access to personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of information where we no longer have a lawful reason to keep it.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent (without affecting prior lawful processing).
- Lodge a complaint with the Information Regulator (South Africa).
To exercise these rights, email support@moonride.co.za. We may need to verify your identity before responding.
11. Children
MoonRide is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated through the app or by email where appropriate.
13. Contact
MoonRide
Website: https://moonride.co.za
Email: support@moonride.co.za
Support: moonride.co.za/support
See also our Terms of Service.