Privacy Policy

Overview

Fi Sektak ("we," "us," "our") operates the Fi Sektak mobile application and this companion website (together, the "Service"), connecting verified Owners and Passengers for shared daily commutes. This Privacy Policy explains what personal data we collect, why we collect it, how we protect it, and the choices available to you. It applies to anyone who creates an account, uses the app, or visits this site.

Information We Collect

Account & identity

• Full name, username, phone number, and email address used to create and secure your account.
• Your password, stored only as a secure one-way hash — we never store or can view your plain-text password.
• A self-chosen account-recovery question and answer, stored as a secure hash and used only to verify your identity if you request a password reset.
• Your selected role (Passenger or Owner).

Owner verification data (sensitive)

• If you register as an Owner: company name, work area, job title, vehicle model, plate number, seat capacity, and an emergency contact name and phone number.
• A photo of your vehicle license and a work-identification document, uploaded through your device's photo library and stored in an access-restricted file storage system that only you and authorized Fi Sektak reviewers can open.
• We request photo-library access strictly to let you select and upload these documents; we do not access your photo library for any other purpose.

Ride & route activity

• The pickup and destination areas you select from our fixed list of service areas, ride date/time or recurring schedule, number of seats, and any optional notes you add (e.g., a meeting-point description).
• We do not collect your device's GPS location or continuously track your real-time whereabouts. Matching is based on the named areas and schedule you choose, and on distances you or the Owner enter.

Messages, reports & support

• Text messages you exchange with a matched Owner or Passenger inside the app's chat.
• Reports you file about a ride (e.g., no-show, safety concern, wrong location) and any support requests or messages you send us.

Subscription & payment data

• Your subscription plan, status, and billing period.
• A payment reference/token and transaction status supplied by our payment processor, Paymob. We never receive, process, or store your full card number, CVV, or banking credentials — those are handled entirely by Paymob under its own security standards.

Technical & security information

• Basic technical logs (timestamps, app version, error diagnostics) used to keep the Service reliable, secure, and free of fraud or abuse.

What we do not collect

• We do not collect precise GPS location, contacts, or camera access beyond the document upload described above, and we do not collect push-notification device tokens.
• We do not use third-party advertising or analytics SDKs in the app, and this website does not set third-party tracking cookies.

How We Use Your Information

• Create, secure, and authenticate your account.
• Verify Owners before they may publish routes.
• Match Passengers with suitable Owners and routes.
• Calculate ride pricing and estimated impact or savings.
• Operate subscriptions and process payments through Paymob.
• Respond to support requests and safety reports.
• Detect, investigate, and prevent fraud, abuse, and safety incidents.
• Comply with legal obligations.

Legal Bases for Processing

We process personal data to perform our contract with you (operating your account and matching rides), to comply with legal obligations (e.g., fraud prevention and record-keeping), and, where applicable, based on your consent for optional information. Where the law in your jurisdiction provides additional bases or requirements for processing, we comply with those as well.

Automated Matching

Our matching feature suggests routes based on the areas, schedule, and pricing information you provide. It helps you find rides more easily and does not make any legal or similarly significant decision about you without the ability for our support team to review it on request.

Cookies & Similar Technologies

This website does not use third-party advertising or analytics cookies, and the Fi Sektak app does not use third-party analytics or advertising SDKs. See our Cookie Policy for full details on the technologies we do use.

Third-Party Links

The Service may reference or link to third-party websites or services, such as our payment processor. We are not responsible for the privacy practices of third parties outside our control; please review their own privacy policies before providing them information.

How We Share Information

We only share personal data in the following circumstances:

• Service providers who process data on our behalf under confidentiality obligations: Supabase (our database, authentication, file storage, and real-time messaging infrastructure) and Paymob (payment processing).
• Other users, limited to what is necessary for matching and coordination — for example, an Owner can see a Passenger's request details, and matched users can message each other.
• Law enforcement or regulators, only where required by law, to protect rights, safety, or property, or to investigate fraud or abuse.

We do not sell your personal information, and we do not share it with third parties for their own advertising purposes.

Data Retention

We retain account and ride data for as long as your account is active, and for a limited period afterward as needed to resolve disputes, satisfy legal or accounting obligations, and prevent fraud. Owner verification documents are retained only as long as necessary for verification and compliance, then deleted or securely archived in line with applicable regulatory requirements.

Data Security

• Passwords and security-question answers are stored as salted one-way hashes, never in plain text.
• Verification documents are stored in a private storage bucket protected by access rules limiting visibility to the document owner and authorized members of our team only.
• We apply role-based access controls and secured infrastructure to guard against unauthorized access, alteration, or disclosure.

Your Rights & Choices

Depending on your location, you may have the right to access, correct, export, or delete your personal data, or to object to certain processing. You can update most profile information directly in the app, or contact privacy@fisektak.app to request access, correction, deletion, or an export of your data. We will verify your identity and respond within a reasonable time.

Deleting your account removes your profile, and we delete or anonymize associated data except where retention is required for legal, safety, or accounting reasons.

Children's Privacy

Fi Sektak is intended for users who are at least 18 years old (or the age of legal majority in their jurisdiction), consistent with our Owner verification and liability requirements. We do not knowingly collect data from children, and we will delete any such data if we become aware of it.

International Data Transfers

Our infrastructure providers may process and store data in locations outside your home country. Where this occurs, we require our providers to maintain appropriate safeguards for your information.

Changes to This Policy

We may update this Privacy Policy as the Service evolves. Material changes will be reflected by updating the "Last updated" date above, and significant changes may be announced in the app.

Contact Us

Questions or requests about this Privacy Policy or your data can be sent to privacy@fisektak.app.