Legal
Privacy Policy
This Privacy Policy explains how we collect, use, store, and share personal information when you use the Drive Me Home customer app, driver app, websites, and related services that arrange a sober driver for your own vehicle in Sri Lanka.
By using the Service you acknowledge this Policy. If you do not agree, please do not use the apps or request a trip. For contract terms, see our Terms & Conditions.
1. Who is responsible
Nightfall operates Drive Me Home. For privacy questions contact privacy@drivemehome.live or support@drivemehome.live.
2. Information we collect
Account & profile
- Mobile number, name, email (if provided), profile photo;
- OTP verification records and session tokens;
- For Drivers: licence/NIC details, onboarding documents, availability, preferred start location.
Trip & location
- Pickup and drop-off addresses and coordinates;
- H3 location cells derived from coordinates (used for distance quoting, caching, and future nearby matching);
- Trip status history, timestamps, odometer photos uploaded by Drivers, and in-trip action locations;
- Device push tokens for trip updates (Apple APNs / Firebase).
Payments
- Payment amounts, currency, status (pending, authorised, captured, cancelled);
- Masked card brand/last digits returned by our processor;
- Stripe PaymentIntent / charge identifiers. Full card numbers are handled by Stripe — we do not store raw PAN or CVV.
Device & usage
- App version, device type, approximate diagnostics needed to keep the Service reliable;
- Support messages you send us.
3. How we use information
- Create and secure your account;
- Match customers with available Drivers and calculate fare estimates using our routing/distance partners;
- Pre-authorise and capture payments, send receipts, and prevent fraud;
- Send transactional push notifications (e.g. driver assigned, sync updates);
- Improve safety, quality, and operations (including reviewing trip logs and odometer evidence);
- Comply with law, respond to lawful requests, and enforce our Terms;
- With your consent where required, send product updates or promotions (you can opt out of marketing).
4. Legal bases (where applicable)
We process data because it is needed to perform the contract (provide the trip), because we have a legitimate interest in securing the platform and preventing fraud, because we must meet legal obligations, or because you consented (for example certain device permissions or optional marketing).
5. Sharing
We share personal data only as needed:
- Drivers & customers — limited trip details so the other party can complete the ride (name, phone as shown in-app, pickup/drop, vehicle notes);
- Payment processors — Stripe and related banking partners;
- Infrastructure — hosting, databases, object storage for images, SMS/OTP providers, push notification providers;
- Routing / distance — coordinates and H3 cell ids sent to our distance service to price trips (results may be cached by cell pair);
- Professional advisers & authorities — when required by law or to protect rights and safety.
We do not sell your personal information.
6. International transfers
Some processors (for example Stripe or cloud providers) may process data outside Sri Lanka. We use reputable providers and contractual protections appropriate to the transfer.
7. Retention
We keep account, trip, and payment records for as long as your account is active and thereafter for a period needed for disputes, accounting, fraud prevention, and legal retention (typically aligned with Sri Lankan commercial and tax practice). You may request deletion; we may retain limited data where the law requires or where it is necessary for safety/fraud records.
8. Security
We use industry-standard measures such as encrypted transport (HTTPS), access controls, and tokenised sessions. No method of transmission or storage is 100% secure. Protect your phone and do not share OTPs.
9. Your choices & rights
- Update profile details in the app;
- Control location and notification permissions in device settings (some features will not work without them);
- Request access, correction, or deletion by emailing privacy@drivemehome.live;
- Object to certain processing or withdraw optional consent where applicable.
We will respond within a reasonable time consistent with applicable law.
10. Children
The Service is not directed at children under 18. We do not knowingly create accounts for minors. Contact us if you believe a minor has provided data so we can delete it.
11. Cookies & websites
Our marketing site may use essential cookies or similar technologies for security and basic analytics. Mobile apps primarily use account sessions and device tokens rather than browser cookies.
12. Changes
We may update this Policy periodically. The “Last updated” date will change, and significant updates may also be highlighted in-app or on the website. Continued use after changes means you accept the revised Policy.
13. Contact
Privacy requests:
privacy@drivemehome.live
General support:
support@drivemehome.live
Drive Me Home by nightfall · Colombo, Sri Lanka.