ehatud Rider Privacy Policy

Effective Date: July 1, 2026

ehatud (“ehatud,” “we,” “us,” or “our”) is a duly registered sole proprietorship under the laws of the Republic of the Philippines, with principal business address at 32 Purok Papaya, Pondol, Hinunangan, Southern Leyte, Philippines. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use the ehatud Rider app and related services (the “Platform”).

This Privacy Policy applies specifically to Riders and should be read together with our Rider Terms and Conditions. If you use the ehatud Customer app or the ehatud Merchant app, see the separate Privacy Policy for that app.

1. Information We Collect

1.1 Information You Provide at Registration

• Account information: full name, mobile number, email address, and password.

• Identity and eligibility documents: government-issued ID, driver's license, and vehicle registration or equivalent documents submitted at onboarding.

• Communications: messages you send to support or Customers through the Platform, and any complaint or dispute details you submit.

1.2 Location Data While Online and Delivering

• Location data: GPS coordinates and timestamps collected while you are online and, used to match you with delivery opportunities, track delivery progress, calculate distance-based earnings, and serve as records in resolving disputes. This data continues to be collected while the app is minimized during an active delivery session, shown to you through a persistent notification, so that Customers can track their order.

You can go offline at any time to stop this collection, though doing so also stops the matching of new delivery opportunities to your account.

1.3 Financial and Delivery Data

• Financial/payout information: bank or e-wallet details used to disburse earnings, and records of any Rider Float or security deposit balance and deductions.

• Cash on Delivery (COD) transaction data: records of COD amounts collected, remitted, or disputed, tied to individual deliveries.

• Performance data: completion rate, timeliness, customer feedback, and reliability metrics, used for prioritization and tier placement.

1.4 Information from Payment Partners

Earnings payouts are processed by our licensed third-party Payment Partners (such as Dragonpay Corporation or other authorized providers). We may receive limited confirmation data (such as payout status and amount) from our Payment Partners to complete disbursement.

1.5 Camera and Photo Access

• Camera usage: with your permission, we access your device camera to scan order verification QR codes at pickup and delivery, capture proof of delivery photos, and take photos to send in active chat support or client messages.

• Photo library access: with your permission, we access your device photos to allow you to upload or update your profile picture.

1.6 Device and Notification Data

• Device identification: unique device identifiers, operating system version, and system logs to diagnose app issues and prevent fraud.

• Push notifications: push notification tokens collected to deliver real-time notifications for new delivery opportunities, chat messages, and order status updates. You can manage notification preferences in your device settings.

2. How We Use Your Information

• Verify your eligibility to deliver on the Platform.

• Match you with delivery opportunities and calculate distance-based earnings.

• Disburse earnings and manage your Rider Float/security deposit balance.

• Process order pickups and completions, including scanning verification QR codes and attaching proof of delivery photos to order records.

• Evaluate performance metrics and manage prioritization, visibility, and tier placement.

• Allow personalization of your account, including setting your profile picture.

• Send push notifications for new delivery offers, chat messages, and account updates.

• Investigate and resolve disputes and COD discrepancies, using location, timestamp, and transaction records as evidence.

• Monitor for fraud and enforce our Terms and Conditions.

• Maintain the security, integrity, and performance of the Platform.

• Comply with applicable laws, regulations, and lawful requests from public authorities.

We do not use your data for purposes incompatible with the above without first notifying you and, where required by law, obtaining your consent.

3. How We Share Your Information

• With Customers: your name, photo, and live location during an active delivery, so they can track their order.

• With Merchants: your name and estimated arrival time for pickup coordination.

• With Payment Partners: bank/e-wallet details necessary to process your earnings payouts.

• With service providers: vendors who help us operate the Platform, including our backend and authentication provider (Appwrite), and our push notification delivery provider (Firebase Cloud Messaging, via Expo's notification service), under confidentiality and data protection obligations.

• For legal reasons: when required by law, regulation, court order, or to protect the rights, property, or safety of ehatud, our users, or the public.

• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to continued protection of your information under this Policy.

Access to identity documents and bank/e-wallet details is restricted to personnel and systems that need it for onboarding, payout, and compliance purposes. We do not sell your personal information.

4. Data Retention

We retain your information for as long as your account remains active and as necessary to fulfill the purposes described in this Policy. Delivery records (including GPS/timestamp logs tied to completed deliveries), COD transaction records, and Rider Float/security deposit ledgers are retained for the period necessary to resolve disputes and to comply with tax, accounting, and regulatory obligations, even after your account is deleted. Identity and eligibility documents are retained only for as long as necessary for compliance and safety purposes, after which they are securely deleted.

5. Account and Data Deletion

You may request deletion of your Rider account and associated data at any time, using either of the following methods:

• In-app: Go to Account Settings > Delete Account, and follow the on-screen instructions.

• Web request: Submit a request at https://sites.google.com/view/ehatud/account-deletion or email us at support@ehatud.com.

Before a deletion request can be initiated, you must ensure that you do not have any active or pending delivery jobs assigned to your account. The Platform will block deletion requests if there are active deliveries (including jobs in pending, accepted, preparing, pickup, or transit statuses). Furthermore, any outstanding Cash on Delivery (COD) collections, pending cash remittances/handovers, or negative Rider Float balances (such as platform fees or commission cuts owed to the Platform) must be fully settled and cleared before the account deletion process can be finalized. Once you submit a request, you will be immediately signed out, and your account will enter a 30-day grace period. You can log back into your account at any time within this 30-day window to cancel the deletion request and restore full access. If the grace period expires without cancellation, we will permanently delete your Rider profile and location data, while retaining delivery records, Cash on Delivery (COD) transactions, and financial balances for tax, accounting, and legal compliance. Temporarily deactivating or suspending your account does not constitute deletion.

6. Your Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, you have the right to be informed of processing, access your data, request correction, object to processing (subject to legal or contractual restrictions), request erasure or blocking, request data portability where feasible, and file a complaint with the National Privacy Commission (NPC). To exercise these rights, contact us using the details in Section 8.

7. Data Security

We implement reasonable organizational, technical, and physical safeguards designed to protect your data against unauthorized access, alteration, disclosure, or destruction, including encrypted data transmission, access controls, and transaction monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Contact Us

ehatud – Rider Privacy Inquiries

Address: 32 Purok Papaya, Pondol, Hinunangan, Southern Leyte, Philippines

Email: support@ehatud.com.

Account/data deletion request link: https://sites.google.com/view/ehatud/account-deletion

9. Changes to This Policy

• We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, business practices, or applicable laws and regulations.

• When we make changes, we will post the updated Privacy Policy on this page and update the Effective Date at the top of this Policy. Where required by applicable law or where the changes are material, we may also notify you through the Platform or by other appropriate means before the changes take effect.

• Your continued use of the ehatud Rider application after the updated Privacy Policy becomes effective constitutes your acknowledgment of the revised Policy, except where applicable law requires your explicit consent.

• We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, disclose, retain, and protect your personal information.