MyCab (Private) Limited

Effective Date: [11/03/2026]

1. Introduction

This Privacy Policy (“Policy”) governs the collection, use, processing, storage, and disclosure of Personal Data by MyCab (Private) Limited, a company incorporated under the Companies Act, 2017, Islamic Republic of Pakistan (“Company”).

The Company operates the MyCab24/7 digital ride-hailing platform, which connects riders with drivers and transportation providers through a mobile application and related services.

The platform facilitates multiple transportation services including:

  • Chauffeur and luxury vehicle services
  • Airport transportation
  • Hotel transfers
  • On-demand ride services connecting passengers and drivers

This Policy is issued in alignment with applicable Pakistani law, including the Prevention of Electronic Crimes Act, 2016 (PECA), and recognized principles of lawful and responsible data processing.

By accessing or using the MyCab24/7 platform, you acknowledge and consent to the data practices described in this Policy.

2. Definitions

For purposes of this Policy:

2.1 “Personal Data” means any information relating to an identified or identifiable natural person.

2.2 “User” includes Riders, Drivers, and Community Participants.

2.3 “Processing” means collection, recording, storage, use, disclosure, transfer, or deletion of data.

2.4 “Sensitive Data” refers to information requiring heightened protection, including identity verification documentation and financial details.

3. Data Controller Status

3.1 MyCab (Private) Limited acts as the Data Controller in respect of Personal Data processed through the Platform.

3.2 The Company determines the purposes and means of processing consistent with operational necessity and regulatory compliance.

4. Categories of Data Collected

The Company may collect and process the following categories:

4.1 Identity Information

  • Full name
  • CNIC/NICOP (for Drivers and Community Participants where required)
  • Date of birth

4.2 Contact Information

  • Mobile number
  • Email address
  • Residential address (where applicable)

4.3 Location Data

  • Real-time GPS location during active ride sessions
  • Trip origin and destination data

4.4 Transaction Data

  • Ride history
  • Payment details
  • Incentive and reward records

4.5 Device & Technical Data

  • Device type
  • IP address
  • Log data
  • App usage patterns

4.6 Verification Data

  • Driver licenses
  • Vehicle registration
  • Background screening documents (where applicable)

5. Purposes of Data Processing

Personal Data is processed solely for lawful, specific, and operationally necessary purposes, including:

5.1 Facilitating ride transactions between Riders and Drivers.

5.2 Operating and improving Platform functionality.

5.3 Calculating and administering Community Reward Program incentives derived from bona fide ride transactions.

5.4 Fraud prevention, abuse detection, and platform integrity enforcement.

5.5 Identity verification and compliance with legal obligations.

5.6 Customer support and dispute resolution. 5.7 Compliance with PECA 2016 and lawful requests from competent authorities.

6. Lawful Basis for Processing

Data processing is based on:

6.1 User consent obtained through electronic acceptance mechanisms.

6.2 Performance of a digital services agreement.

6.3 Compliance with applicable legal obligations.

6.4 Legitimate business interests, including fraud prevention and service optimization.

7. Data Minimization and Retention

7.1 The Company limits data collection to what is necessary for defined purposes.

7.2 Personal Data is retained only for as long as necessary for:

  • Operational requirements
  • Legal compliance
  • Regulatory recordkeeping
  • Dispute resolution

7.3 Data no longer required shall be securely deleted or anonymized where feasible.

8. Data Sharing and Disclosures

8.1 The Company does not sell Personal Data.

8.2 Personal Data may be shared in the following situations:

  • Between Riders and Drivers to facilitate ride transactions
  • With secure payment processors to process ride payments
  • With technology service providers supporting platform operations
  • With regulatory or law enforcement authorities when legally required

8.3 All third-party service providers are required to maintain confidentiality and data protection standards.

9. Community Reward Program Data

9.1 Data related to referrals and incentives is processed strictly for performance-based reward calculation.

9.2 Incentives arise solely from completed ride transactions.

9.3 No recruitment-only or speculative earnings data is generated.

9.4 Fraudulent or artificial transaction data may result in suspension and reversal of incentives

10. Data Security Measures

10.1 The Company implements reasonable technical and organizational safeguards, including:

  • Encryption protocols
  • Secure cloud hosting
  • Access controls
  • Audit logging
  • Role-based data access

10.2 While commercially reasonable measures are implemented, no digital system can guarantee absolute security.

11. User Rights

Subject to applicable Pakistani law, Users may:

11.1 Request access to their Personal Data.

11.2 Request correction of inaccurate information.

11.3 Request deletion where legally permissible.

11.4 Withdraw consent where processing is consent-based.

Requests may be submitted via official contact channels.

12. Cookies and Tracking Technologies

12.1 The Platform may use cookies or similar technologies to enhance functionality and user experience.

12.2 Users may manage device-level permissions; however, certain features may not function without required permissions.

13. Children’s Privacy

13.1 The Platform is not intended for individuals below the legally recognized age of contractual capacity.

13.2 The Company does not knowingly collect Personal Data from minors.

14. Regulatory Cooperation

14.1 The Company may disclose information where required under lawful authority, including under PECA 2016.

14.2 The Company reserves the right to comply with court orders, law enforcement directives, or regulatory instructions.

15. Data Breach Response

15.1 The Company maintains internal protocols to detect, investigate, and mitigate data security incidents.

15.2 Where legally required, affected parties or authorities may be notified.

16. Policy Amendments

16.1 The Company reserves the right to amend this Policy to maintain regulatory alignment or reflect operational changes.

16.2 Updated versions shall be published on the Platform.

Continued use constitutes acceptance of the revised Policy.

17. Governing Law

This Policy shall be governed by and interpreted in accordance with the laws of the Islamic Republic of Pakistan.

Disputes shall fall under the jurisdiction of competent courts in Pakistan, subject to applicable dispute resolution provisions in the Terms and Conditions.

18. Third-Party Services

The MyCab24/7 platform may integrate third-party services including:

  • Mapping and navigation services
  • Payment processing systems
  • Cloud hosting providers
  • Analytics and performance monitoring tools

These third parties may process limited data necessary for platform operation in accordance with their own privacy policies and contractual obligations.

19. Data Shared Between Riders and Drivers

To facilitate transportation services, limited information may be shared between riders and drivers, including:

  • First name
  • Pickup and drop-off location
  • Contact number (masked where possible)
  • Trip details necessary for completing the ride

This information is used solely for the purpose of completing the ride transaction.

20. International Data Transfers

Since MyCab24/7 services may operate in multiple countries including the United States and Canada, personal data may be processed or stored on servers located outside the user’s country.

Where cross-border transfers occur, appropriate safeguards are implemented to protect personal data.

21. Payment Information

Payment transactions made through the MyCab24/7 platform may be processed by secure third-party payment providers.

The Company does not store full credit or debit card information on its servers.

22. App Permissions

The MyCab24/7 mobile application may request the following permissions:

  • Location Access – to match riders with nearby drivers and calculate routes
  • Internet Access – to communicate with platform servers
  • Notifications – to provide ride updates and alerts
  • Camera (if applicable) – for identity verification or profile photos

Users may manage these permissions through device settings.

23. Account Deletion

Users may request deletion of their account and associated personal data by contacting customer support or through available in-app account management features.

Certain information may be retained where required for legal or regulatory purposes.

24. Additional Privacy Rights

Users located in certain jurisdictions, including parts of the United States and Canada, may have additional rights under applicable privacy laws, including rights to access, correct, or request deletion of personal data.

Requests may be submitted through official support channels.

25. Contact Information

For privacy-related inquiries, Contact:

info@mycab.com

Address: Niku Solution PTE LTD (registered in Singapore)