Privacy Notice

Effective 7 October 2026

Who we are

G-Ride (“G-Ride”, “we”) is a delivery and errand service based in San Isidro, Nueva Ecija, operating across the Philippines. In each town, G-Ride runs through its own team or a licensed G-Ride operator.

This notice explains how we handle personal data on this website, in the G-Ride booking app, through our Facebook Messenger page, and when you apply to work with us. We follow the Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and the issuances of the National Privacy Commission.

What we collect

• When you use the join form: what you’re interested in (running a town, riding or selling), your name, mobile number, town or city, and any message you add.
• When you order or book: your name and mobile number; pickup, stop and drop-off addresses with map pins, landmarks and notes; what you send or ask us to buy, with item budgets and receipts; the fare; and your rating and feedback.
• When you have an account: your mobile number, your name, a password that we store only in scrambled (hashed) form, and your saved addresses. If you continue with Google, Google gives us your name, your email address if Google has verified it, and your Google account ID. We don’t get your Google password or anything else from your Google account, and we never post to it.
• If you apply as a rider: your first, middle and last names, home and current addresses, contact number, sex, birth date and optional nickname; driver’s license number, whether it is professional, expiry date and front/back photos; motorcycle details, model year, engine size and front/side/rear photos with the plate; OR/CR photos; one NBI, police or barangay clearance; and the owner’s authorization letter and ID if the vehicle is not registered to you. We also collect your LTO portal account number and email, and your emergency contact’s name, number and address. We never ask for your LTO password. Tell your emergency contact and vehicle owner before sharing their details. Our assigned operator checks these documents manually; this form does not perform automatic face verification. While you ride, we also process your location when online or on a job, your jobs, cash collected and amounts owed. If you start tracking in a native rider app, it sends your location, measurement time and estimated GPS accuracy while you use other apps or lock the screen. Android shows a tracking notification with a Stop action. The iPhone version uses the system location indicator; reopen the app to stop tracking. Tracking also stops when you go off duty or your session loses access. Device power settings or closing the app can interrupt tracking. Government-issued IDs and some application details are sensitive personal information. We ask for consent before saving application details or photos, and use them to review your eligibility and operate safely. One Google account can retain customer ordering access after rider approval.
• If you’re a store or an operator: your business details, the people we deal with and their contact details, and the records of orders, fares and settlements.
• Photos taken for a booking, such as proof of pickup or delivery and errand receipts.
• Security records: to stop abuse, we keep short-lived records of sign-in and form attempts, with your phone number and network address scrambled so they can’t be read back.
• Optional AI support: when you send a message in AI chat, we may send your support message, earlier messages in that help chat and a minimized booking status and order counts to the named AI provider to draft an answer or operator note. For food assistance, we also share your selected delivery barangay and relevant public menu names, prices and options information to suggest items for you to review. We don’t send customer or rider names, exact addresses or map coordinates, payment codes or delivery codes from our database. The assistant can prepare a cart suggestion; you review it and confirm any order in checkout. Typed messages may still contain personal information; redaction is only a best-effort safeguard.
• Sign-in cookies, described in our Cookie Notice. We don’t use analytics, advertising or tracking tools.

Why we use it

• To get back to you about the join form, because you asked us to.
• To take, carry out and complete your bookings and orders, show fares, collect cash and settle with riders, stores and operators — our agreement with you.
• To check riders before they drive and keep everyone safe — proof photos, incident and dispute handling — with your consent for sensitive information, and because a safe service is in everyone’s legitimate interest.
• To prevent fraud and abuse and keep our systems secure.
• To keep the records that tax and business laws require, and to respond to lawful orders from the authorities.
• To send you messages about your bookings. We’ll send promotions only if you agree, and you can stop them at any time.

We don’t sell personal data, and we don’t make automated decisions about you that have legal or similarly significant effects.

Who we share it with

• Your rider sees what they need for the job — your name, the pickup and drop-off and your mobile number — only while the booking is active.
• Stores see your order and its delivery details for food orders.
• The G-Ride operator for your town handles the bookings, riders, stores and disputes there.
• Service providers that run our website and app for us, under contracts that keep the data confidential and secure: Vercel (hosting) and Neon (database). Map and routing services receive locations only, never your name.
• Google: if you continue with Google, Google knows you signed in to G-Ride and handles that sign-in under its own privacy policy.
• Facebook Messenger: if you order through our Messenger page, Meta also processes those messages under its own privacy policy.
• AI support provider: only when you send a message in AI chat. Choose help guides to ask without AI sharing. Cloudflare is the current provider; OpenAI or Gemini may be used later only after the app names that provider before sharing.
• Government authorities, when the law requires it or to protect someone’s life or safety.

Where it’s stored

Our website and database run on servers in Singapore (Vercel and Neon). We use contracts and security measures that protect your data to the standard the Data Privacy Act requires. Optional AI support providers may process the support message outside Singapore.

How long we keep it

• Join-form details: up to 12 months after we last contact you, unless you become a partner.
• Operator owner ID photos: kept while the operator is active or pending review, and deleted one year after the operator is suspended.
• Rider application photos (license, OR/CR, clearance and IDs): deleted 30 days after an unsubmitted application goes idle or is not approved, and one year after rider access is suspended or closed.
• Account details: while your account is open. We delete or anonymize them within 90 days after you close it, except records we must keep.
• Booking, fare and settlement records: as long as tax and business laws require.
• Support chats: your browser tab keeps up to 40 messages per conversation in session storage, with up to 10 conversations, removed when you reopen support after 7 days without activity in that conversation. This lets you refresh without losing the chat. Clear chat removes the current conversation. History is separated by account and sign-in session; it does not sync between devices. We don’t keep free-form chats in the database. Confirmed reports are kept with the related booking record.
• Rider documents: while you ride with G-Ride and up to one year after, unless a dispute or legal claim needs them longer.
• Booking photos: up to one year, or longer while a dispute or claim is open.
• Rider GPS points recorded during a delivery: deleted 30 days after they were recorded.
• Security records: a few days.

When we no longer need data, we delete it or make it anonymous.

How we protect it

• Every page uses an encrypted connection (HTTPS).
• Passwords are stored only in scrambled (hashed) form, and the sign-in cookie can’t be read by scripts.
• Riders, stores and operators see only what their work needs, and each operator sees only its own towns.
• Photos and documents are stored privately and shown only to the people allowed to see them.
• Changes made by our staff are logged.

No system is perfectly secure. If a breach puts your data at risk, we’ll tell you and the National Privacy Commission as the law requires.

Your rights

Under the Data Privacy Act, you can:

• be told how your data is used (this notice);
• get a copy of your data;
• have it corrected if it’s wrong;
• object to its processing, or withdraw a consent you gave (this doesn’t affect what we did before);
• have it deleted or blocked when it’s no longer needed or was processed unlawfully;
• get your data in a portable electronic format;
• claim damages if you’re harmed by inaccurate, unlawfully obtained or unauthorized use of your data; and
• complain to the National Privacy Commission at privacy.gov.ph.

To use any of these, message us (below). We may ask you to confirm who you are. We aim to reply within 15 working days.

Children

G-Ride accounts are for people 18 and over. If you’re younger, a parent or guardian should book for you. If we learn we hold a child’s data without a parent’s consent, we’ll delete it.

Changes to this notice

We’ll post any changes on this page and update the date at the top. If a change is significant, we’ll also tell you in the app or by message before it takes effect.

Contact us

G-Ride’s Data Protection Officer handles privacy questions and requests. Email privacy@grideph.com or message us on Facebook Messenger at m.me/gridemototaxi and start your message with “Privacy”.