Privacy Policy

Foti ("we", "us", or "our") operates the Foti mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our ride-hailing and delivery services in Timor-Leste.

1. Information We Collect

We collect the following types of information:

• Account information: Phone number, name, email address (if you sign in with Google), and profile photo.
• Location data: Your real-time GPS location while using the App to connect you with drivers, calculate routes, and provide accurate ETAs. Location is collected only while the App is in use.
• Ride and order data: Pickup and drop-off locations, ride history, order details, ratings, and payment amounts.
• Device information: Device model, operating system version, app version, and Firebase Cloud Messaging token for push notifications.
• Chat messages: Messages exchanged between riders and drivers during an active trip.

2. How We Use Your Information

• To provide and improve our ride-hailing and delivery services
• To match you with available drivers
• To calculate fares and process payments
• To send you ride updates and push notifications
• To ensure safety and resolve disputes
• To monitor and improve app performance (via Firebase Crashlytics)
• To comply with legal obligations

3. Data Sharing

We share your information only in the following circumstances:

• With drivers/riders: Your name and location are shared with the driver (or rider) matched to your trip.
• Service providers: We use Firebase (Google) for authentication, data storage, and crash reporting. We use Mapbox for maps and navigation.
• Legal requirements: We may disclose your information if required by law or to protect our rights and safety.

We do not sell your personal information to third parties.

4. Data Storage and Security

Your data is stored securely using Google Firebase infrastructure with encryption in transit and at rest. We implement security measures including:

• Firebase Authentication for secure sign-in
• Firestore security rules that restrict data access to authorized users
• HTTPS encryption for all network communications
• Secure local storage for sensitive data on your device

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Ride history is retained for dispute resolution and legal compliance. You may request deletion of your data at any time (see Section 7).

6. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct your personal information through the App.
• Deletion: Delete your account and all associated data directly from the App (Profile > Delete Account).
• Withdraw consent: Revoke location permissions at any time through your device settings.

7. Account Deletion

You can delete your account at any time from within the App. When you delete your account:

• Your profile data is permanently removed from our servers
• Your ride history is deleted
• Your authentication credentials are revoked
• This action cannot be undone

8. Children's Privacy

Our services are not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or by updating the "Last updated" date above. Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact Us