1. Introduction
Baiku ("we," "our," or "us") operates the Baiku mobile application (the "App"), a bike ride-hailing service for Khyber Pakhtunkhwa, Pakistan. This Privacy Policy explains what information we collect from riders and drivers, how we use it, who we share it with, and the choices you have. By creating an account or using the App, you agree to the practices described in this policy.
2. Location Data
Location is central to how Baiku works — it is how we match riders with nearby drivers, calculate routes, fares, and estimated arrival times, and let riders track their driver in real time. We collect and use location data as follows:
2.1 Precise (GPS) Location
The Baiku app requests precise location (GPS) and approximate location permissions on your device. We use this to:
- Show your current position on the map so you can request a ride from your location.
- Match riders with the nearest available drivers.
- Calculate distance, route, fare estimates, and navigation directions between pickup and drop-off points.
- Allow riders to see a driver's live position on the map while a ride is being arranged or in progress.
- Improve safety, fraud prevention, and service reliability, such as verifying a driver is on the expected route.
2.2 Driver Location While Online (Foreground Service)
For drivers specifically: when a driver switches their status to "Online" and becomes available to accept ride requests, the app runs an active foreground service that periodically collects the driver's GPS location and sends it to our servers so nearby riders can be matched and can see the driver approaching. While this is active, a persistent notification is shown at all times (e.g. "You are online and receiving requests") so the driver always knows location is being shared. This location sharing:
- Only occurs while the driver has explicitly set their status to "Online."
- Stops immediately when the driver sets their status to "Offline."
- Is always accompanied by a visible, ongoing notification while active.
- Is never collected without the driver's knowledge or outside of this online/offline toggle.
2.3 Location Data We Do Not Collect
Baiku does not track a driver's or rider's location when the app is closed and the driver is offline, and does not collect location for advertising or profiling purposes.
2.4 Storage & Retention of Location Data
Driver location updates are stored in our backend database (Firebase/Firestore) to enable live tracking and ride matching. Historical trip data, including pickup point, drop-off point, and route, is retained as part of the trip record for safety, dispute resolution, and service improvement, for as long as your account remains active, or as required by applicable law.
3. Other Information We Collect
3.1 Account & Profile Information
- Name, phone number, email address, and profile photo.
- For drivers: identity and vehicle verification details submitted during onboarding.
- Authentication data via phone number, email, or Google Sign-In.
3.2 Camera & Photos
The App requests camera access so users can take or upload a profile photo, and so drivers can submit verification documents such as CNIC and vehicle photos during onboarding. Photos are only accessed when you actively choose to take or upload one.
3.3 Call Feature
The App requests phone-call permission so riders and drivers can call each other directly from within the app to coordinate a pickup. We do not record calls or access your call history.
3.4 Device & Usage Information
- Device model, operating system version, and unique device identifiers, used for security, diagnostics, and fraud prevention.
- App usage and crash/performance data, used to fix bugs and improve stability.
- Network and connectivity status, used to handle offline states gracefully.
3.5 Notifications
With your permission, we send push notifications for ride status updates such as driver assigned, driver arriving, or ride completed, as well as important account or safety alerts.
4. How We Use Your Information
- To provide, operate, and maintain the ride-booking service, including matching riders and drivers.
- To calculate fares, routes, and estimated times of arrival.
- To verify driver identity and vehicle eligibility.
- To communicate with you about your rides, account, or support requests.
- To detect, prevent, and investigate fraud, safety incidents, and policy violations.
- To improve app performance, reliability, and user experience.
- To comply with legal obligations.
5. How We Share Your Information
We do not sell your personal data. We share information only in the following circumstances:
- Between riders and drivers: a rider's pickup location and a driver's live location and basic profile details are shared with each other only for the duration needed to complete a ride.
- Service providers: we use trusted infrastructure providers to operate the app, including Google Firebase (Authentication, Firestore database, Cloud Storage, Cloud Messaging, App Check, Crashlytics) for account management, data storage, notifications, and crash reporting; and Google Maps Platform (Maps, Places, Geocoding, Directions APIs) for maps, address search, and route calculation.
- Legal requirements: if required to comply with a legal obligation, protect our rights, or ensure user safety.
- Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to affected users where required.
6. Permissions Used by the App
| Permission | Why we need it |
|---|---|
| Precise / Approximate Location | Map display, ride matching, route and fare calculation, live driver tracking. |
| Camera | Take profile photo or upload driver verification documents. |
| Phone (Call) | Let riders and drivers call each other to coordinate pickup. |
| Notifications | Ride status updates and account/safety alerts. |
| Internet / Network State | Core app functionality and connectivity handling. |
| Foreground Service | Keep drivers' live location updating and visible via a persistent notification while they are online and available for rides. |
7. Your Choices & Rights
- You can deny or revoke location, camera, or notification permissions at any time via your device settings, though this may limit or disable core app features.
- Drivers can stop location sharing at any time by switching to "Offline."
- You can request access to, correction of, or deletion of your personal data by contacting us (see Section 10).
- You can delete your account, which removes your profile data subject to any legal retention requirements for trip records.
8. Data Security
We use industry-standard safeguards, including Firebase's security infrastructure and encrypted data transmission, to protect your information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Children's Privacy
Baiku is not intended for use by children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.
10. Contact
For privacy concerns, email us at sarmadkhanii204@gmail.com
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page. Continued use of the App after changes take effect constitutes acceptance of the revised policy.