Privacy Policy
Last updated: April 25, 2026
Plain-language summary: SakayKo collects only what's needed to make a booking happen — your name, phone number, location while a booking is active, and the booking itself. We never sell your data. Payment is cash on arrival, so we do not store any card or bank details. You can delete your account at any time.
1. Who we are
SakayKo ("we", "us", "our") is built and operated by CypherZero.dev. For privacy questions, corrections, or data-access requests, contact our Data Protection team at support@cypherzero.dev.
2. What we collect
| Category | Why we collect it |
|---|---|
| Phone number, name, optional avatar | Account creation + driver/passenger identification |
| SMS verification codes (OTP) | Verify phone ownership during signup & login |
| Driver KYC documents (ID, selfie, vehicle photos & plate) | Driver-only — confirm eligibility to drive under Philippine law |
| Live GPS location (during active bookings only) | Match drivers, show ETA, enable live tracking |
| Booking history (origin, destination, fare, status) | Show your past trips, support disputes, accounting |
| Chat messages (between passenger & driver) | Coordinate active bookings; readable by both parties |
| Ratings given and received | Maintain service quality and flag repeat abuse |
| Device push notification token (FCM) | Send booking, chat, and ride status notifications |
| Diagnostic logs (crashes, error reports) | Improve app stability |
We do not collect: card / bank details (we do not process payments — all fares are paid in cash directly to Drivers), contacts list, photos / files outside what you upload, or location data when you have no active booking and the app is closed.
3. How we use it
- Match passengers and drivers, calculate ETAs, complete bookings.
- Send notifications about your bookings (acceptance, arrival, cancellation, chat, counter-offers).
- Provide customer support and resolve disputes.
- Detect fraud, abuse, and policy violations.
- Improve the app via aggregated, anonymized analytics.
4. Who we share with
- The other party of your booking — drivers see the passenger's name, pickup location, and live location during an active booking; passengers see the driver's name, vehicle plate, and live location.
- Service providers we contract for hosting (cloud servers), push notifications (Firebase), and SMS delivery (our SMS delivery partner). These providers process data on our behalf under their own security commitments.
- Authorities, when legally required (subpoena, court order, or Philippine law).
We do not sell your personal data to advertisers or third parties.
5. Your rights (under RA 10173)
- Right to be informed — see this policy.
- Right to access — request a copy of your data.
- Right to correct — update inaccurate information from your profile, or email us.
- Right to erase / block — delete your account from the app's profile screen, or email us to request erasure.
- Right to data portability — request an export of your data in a common format.
- Right to file a complaint with the National Privacy Commission (privacy.gov.ph) if you believe your rights have been violated.
6. Data retention
We keep account information for as long as your account is active. Booking history is retained for 2 years after the booking for accounting and dispute resolution. Anonymous diagnostic logs are kept for up to 30 days. After account deletion, identifiable data is removed within 30 days; financial records may be kept longer if required by Philippine tax law.
7. Security
We use industry-standard security: HTTPS for all API traffic, password hashing (bcrypt), short-lived JWT access tokens with rotating refresh tokens, and isolated database access. No system is 100% secure — if you suspect your account is compromised, contact us immediately at support@cypherzero.dev.
8. Children
SakayKo is not intended for children under 13. If you believe a child has registered, contact us and we'll remove the account.
9. Changes
We'll notify you in-app and update this page when we change how we handle data, with the "Last updated" date above. Continued use after a change means you accept it.
10. Contact
Privacy questions, access, correction, or erasure requests: support@cypherzero.dev · General support: support page.