UniLiftPrivacy Policy
Last updated: draft for pilot launch
Draft, requires legal review. This document is a template prepared for UniLift's pilot. It has not been reviewed by a lawyer and must be reviewed and completed by the operator before public launch.
1. Who we are
UniLift ("we", "us") is a campus ride-booking service for universities in Malaysia. The data user responsible for your personal data under the Personal Data Protection Act 2010 (PDPA) is:
[operator legal name: set in Admin → Settings → Legal]. Contact: support@unilift.my.
2. What we collect and why
| Data | Why we need it |
|---|---|
| Sign-in identifiers from Google or Apple, your name and email (Apple may provide a private relay address) | To create and secure your account. We never receive your Google or Apple password. |
| Phone number (not verified by SMS) | So the rider and driver of a ride can contact each other once a ride is agreed. |
| University, campus, student/staff status, optional matric or staff number | To limit rides to your own campus and to verify you. |
| One photo of the front of your student or staff card | Manual identity verification by our team. We do not ask for other documents unless the operator has enabled an extra requirement, which the app will tell you. |
| Drivers: car plate, make, model, colour, year, seats (and optional car photo) | Verification, and so riders can recognise your car. |
| Optional profile photo | Shown to the other party during a ride. |
| Location: riders, while you use the map or request a ride; drivers, only while you are online or on a trip (including in the background when you allow it) | To show nearby drivers, set pickup points, match riders with drivers on the same campus, and show live trip progress. Location sharing stops when a driver goes offline. |
| Ride details, fare proposals and offers, cash confirmation, ratings and reviews, support messages | To run the service, resolve disputes and keep records. |
| Device push token and notification preferences | To send ride and verification notifications. |
| Advertising data (device advertising identifier, if you consent) | Google AdMob may show a limited number of ads in specific places. You can decline personalisation, and you can change your choice in the app settings. |
| Technical logs (IP address, app version, errors) | Security, abuse prevention and troubleshooting. |
3. Lawful basis
We process your data with your consent (given when you register and when you grant location, camera and notification permissions) and where necessary to provide the service you request. You can withdraw consent at any time by changing permissions on your device or deleting your account.
4. Who sees your data
- The other party in a ride: after a ride is agreed, a rider sees the driver's name, photo, rating, car details and plate and phone number, and the driver sees the rider's name, phone number and pickup/drop-off. Before that, drivers see only a rider's first name and rating.
- UniLift administrators: authorised admins review verification photos (through short-lived links, every view is logged) and handle support and disputes. Campus admins see only their own campus.
- Service providers who process data on our behalf: cloud hosting and database (Render), file storage (Cloudflare R2), maps, routing and place search (Google Maps Platform), push delivery (Expo), sign-in (Google, Apple), and advertising (Google AdMob).
- We do not sell your personal data. We may disclose data where required by law or to protect safety.
Some providers may process data outside Malaysia. Where we transfer data abroad we do so only to the extent needed to provide the service and with appropriate safeguards.
5. How long we keep it
| Data | Retention |
|---|---|
| ID card photo | Deleted automatically a short period after an admin approves or rejects it (configurable, 30 days by default). We keep the decision record and, if the admin entered it, the ID number. |
| Location history of trips | Deleted after a limited period (30 days by default). |
| Ride, fare and cash records | Kept for audit and dispute purposes without hard deletion. When you delete your account they are retained without your personal details. |
| Account data | Until you delete your account. |
6. Your rights
You may ask to access or correct your personal data, withdraw consent, or ask us to delete it. Most of this is available directly in the app: edit your profile, change permissions, or choose Account → Delete my account. For anything else, or if you cannot use the app, contact us (see section 1) or see Delete your account.
7. Security
Data is encrypted in transit. Verification images are stored privately and only viewable through short-lived signed links. Access is role-based and logged. No system is perfectly secure; tell us immediately if you suspect misuse of your account.
8. Children
UniLift is intended for university students and staff. It is not directed at children.
9. Changes
We may update this policy. We will post the new version here and, for significant changes, notify you in the app.
10. Contact
[operator legal name: set in Admin → Settings → Legal]. Contact: support@unilift.my.