At KanggaXpress, we respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy explain how we collect, use, store, and share your information when you access or use the KanggaXpress web applications, mobile applications (Expo-based), and API endpoints.
2. Information We Collect
We collect information that you provide to us directly or through third-party services. This includes:
Account Details: Full name, email address, password, phone number, and profile image.
Driver Information: If registering as a Driver or Courier, we collect vehicle details (type, model, color, plate number, make, and year), driver’s license number, franchise registrations, and TODA memberships.
Location Data: To facilitate ride dispatching and courier tracking, we collect active location data (latitude/longitude) from drivers and passengers during ride processes.
Transaction Data: Details of wallet tops-ups, payouts, fares, and payment gateway references processed via our integration with PayMongo.
3. Google Sign-In (Google OAuth) Scopes & Data Usage
KanggaXpress implements Google Sign-In to allow passengers and drivers to easily register and log in to their accounts. When you authenticate using Google Sign-In:
Information Accessed: We request access to your primary Google account email address (`email`), your full name (`profile`), and your Google profile photo URL (`openid` / profile info).
Purpose of Use: We use your Google email address to uniquely identify and authenticate your account. Your name and profile image are used to initialize your KanggaXpress user profile (passenger or driver dashboard).
Data Storage: This information is stored in our secure PostgreSQL database managed via Supabase. Profile images may be displayed to drivers/passengers during active rides to confirm identity.
Revocation: You can disconnect your Google account or request the permanent deletion of your data at any time via the user profile settings or by contacting support.
4. How We Use Your Data
We use the collected personal data to:
Verify identity and authenticate user sessions (via Better Auth).
Match passengers with nearby drivers/couriers.
Process wallet transactions, tops-ups, and driver deductions securely.
Send real-time notifications about ride and bidding statuses.
Improve application performance, prevent fraud, and comply with legal requirements in the Philippines.
5. Data Sharing & Security
We do NOT sell or lease your personal data. Your data is shared only under these conditions:
Ride Participants: Drivers see passenger names and pickup locations; passengers see driver vehicle details, rating, and location during an active trip.
Service Providers: We share necessary details with Supabase (database storage), PayMongo (payment checkout generation), and Nodemailer/Gmail SMTP (sending transactional emails).
Security: All database operations are secured with strict Row Level Security (RLS). We enforce HTTPS/SSL protocols and verify Better Auth session states on every API gateway query.
6. Your Rights & Deletion Request
You have the right to request access to, correction of, or permanent deletion of your personal data. To delete your account and remove all stored profile details, you can visit the user settings inside the app or submit an account deletion request by emailing us at support@kanggaxpress.com.