This Privacy Policy applies to all users of the GetIn platform, including passengers and captains utilizing our mobile applications, website, contact center, or related services. This policy describes the data GetIn collects, how it is used and shared, and the privacy choices available to you.

When you use our mobile application, GetIn collects information to facilitate seamless peer-to-peer carpooling coordination. We collect information directly from you when you create an account, as well as automatically through your use of the platform.

1. Information We Collect

Account and Verification Information 

We collect information when you create, update, or verify your GetIn account to ensure a secure environment for our community.

• For All Users (Captains and Passengers): We collect your full name, email address, phone number, login credentials, profile image, billing/payment details, and a digitized copy of your National Identity Card (NIC) for identity verification, fraud prevention, platform security, trust and safety purposes, and compliance with applicable operational and legal requirements.

• For Captains (Drivers): To verify your eligibility to offer shared rides, we collect comprehensive vehicle and licensing data. This includes your Driving License, Vehicle Revenue License, and Insurance Certificate, as well as specific vehicle parameters such as the brand, model, vehicle type, and license plate number.

Location Information

GetIn may collect precise location information while the App is actively in use to support ride matching, route coordination, navigation, trip tracking, and safety-related features. In certain cases, limited background location access may be required during an active ride session to ensure uninterrupted trip coordination, live route updates, and passenger safety. GetIn does not collect background location data when no active trip or ride-related activity is in progress.

User Content and Support Data

We collect information when you contact our customer support center, submit feedback, or participate in community ratings.

Device and Usage Information

We automatically collect information about how you interact with our platform. This includes app features used, pages viewed, dates and times of access, browser type, system crashes, and other system activity. We also collect data about the device you use to access our services, including the hardware model, operating system version, preferred languages, and unique device identifiers.

Communication Data

To support coordination between captains and passengers, GetIn may facilitate communication through voice calls, SMS, or notification services. GetIn may collect limited communication-related metadata such as the date, time, duration, and delivery status of communications for operational, safety, dispute resolution, fraud prevention, and customer support purposes.

GetIn does not actively monitor, record, or listen to private voice calls or personal communications unless required by applicable law, regulatory obligations, user-reported incidents, or platform safety investigations.

Platform Permissions

Both iOS and Android operating systems require explicit user consent before granting the GetIn App access to specific device data (such as precise location, camera, or push notifications). The App will prompt you for these permissions upon installation or when the relevant feature is first accessed.

2. How We Use Your Information

GetIn utilizes the data collected to provide a reliable, transparent, and social ride-sharing experience. Specifically, we use your information to:

• Verify user profiles and maintain account security.
• Match passengers with captains heading along the same route.
• Calculate estimated trip costs, track journey progress, and facilitate secure cost-sharing distributions.
• Deliver customer support and resolve user inquiries or safety disputes.
• Optimize our application’s performance, fix software bugs, and conduct internal data analysis.
• Send service updates, operational notifications, and promotional offers that may benefit you.

3. Sharing and Disclosure of Information

To ensure a seamless peer-to-peer carpooling experience, your information is shared in the following scenarios:

Between Captains and Passengers

To facilitate a shared journey, a matching captain or passenger will see your first name, profile photo, user rating, and your designated pickup and drop-off locations.

For Legal and Compliance Purposes

We may share your information if required to do so by applicable laws of Sri Lanka, legal proceedings, government officials, or enforcement authorities, or if necessary to protect the safety, rights, and property of GetIn and its community.

Business Transfers

In the event of a company merger, sale of corporate assets, consolidation, or restructuring, your user data may be transferred as a core business asset.

Anonymized/Aggregated Data

We may share general, aggregated demographic or usage metrics with third-party partners that cannot be used to identify you individually.

4. Cookies and Third-Party Technologies

GetIn and its partners utilize cookies, pixel tags, SDKs, and other device identification technologies on our website, mobile application, and digital advertisements. Cookies are small text files stored on your browser or device that allow us to:

• Authenticate user sessions and remember your preferences.
• Analyze website traffic trends and user behaviors.
• Measure the effectiveness of promotional and advertising campaigns.

Most web and mobile browsers are set to accept cookies automatically. You can modify your device or browser settings to decline or clear cookies, though doing so may prevent you from utilizing the full functionality of the GetIn platform.

5. Account Deletion and Retention

You retain full control over your personal data. You are entitled to terminate your contract with GetIn and rescind your data permissions at any time by permanently deleting your profile within the App settings and removing the software from your device. GetIn retains your core profile information only for as long as your account remains active or as required by statutory financial and legal obligations in Sri Lanka.

6. Third-Party Services and Infrastructure

To operate and improve the GetIn platform, we utilize trusted third-party services, APIs, cloud infrastructure providers, and communication platforms. These providers may process limited user information strictly for purposes related to platform functionality, security, analytics, communication, payments, and operational performance.

Google Services

GetIn utilizes various Google technologies, including:

• Google Maps Platform
• Google Places API
• Google Directions API
• Google Geocoding API

These services are used to support:

• route calculation
• pickup and drop-off coordination
• address search and validation
• ride matching
• navigation-related functionality
• approximate and precise location processing

Your use of these services may also be subject to Google’s own privacy policies and terms.

Firebase Services

GetIn uses Firebase services provided by Google for:

• real-time database synchronization (Firebase Firestore)
• application analytics
• crash reporting and diagnostics
• push notification delivery
• system monitoring and operational improvements

Firebase services may collect certain technical and device-related information, including:

• device identifiers
• operating system information
• application usage events
• crash logs
• notification tokens
• diagnostic data

This information is used to improve platform stability, performance, reliability, and user experience.

Authentication Providers

GetIn supports authentication services provided by:

• Google Sign-In
• Sign in with Apple

When you authenticate using these providers, limited profile information such as your name, email address, and authentication identifiers may be shared with GetIn in accordance with your account settings and the provider’s policies.

Payment Processing

GetIn uses Seylan IPG, a trusted third-party payment gateway, to facilitate secure digital payment processing. Payment card details and related payment credentials are processed directly by Seylan IPG and are not stored by GetIn on its own systems.

GetIn may retain limited transaction-related information, such as payment status, transaction reference numbers, invoice details, and ride payment records, for operational, dispute resolution, accounting, and legal compliance purposes.

SMS and Communication Services

GetIn uses Send.lk SMS services and Firebase Cloud Messaging (FCM) to deliver:

• OTP verification codes
• ride-related notifications
• service alerts
• operational communications
• platform updates

These providers may process limited communication-related information such as phone numbers, notification tokens, and message delivery metadata.

International Data Processing

Certain third-party service providers used by GetIn may process or store information on infrastructure located outside Sri Lanka. By using the platform, you acknowledge that certain data may be transferred, processed, or stored in foreign jurisdictions subject to applicable legal and operational safeguards.

7. Data Protection and Security 

GetIn takes reasonable technical and organizational measures to protect user information from unauthorized access, misuse, disclosure, alteration, or loss.  Access to personal data and verification documents is limited to authorized personnel and service providers who require it for platform operations, safety, compliance, or support purposes. 

Although we take steps to protect your information, no method of electronic storage or internet transmission is completely secure. Users are responsible for keeping their account credentials confidential and should report any suspected unauthorized access to GetIn immediately. 

8. Minimum Age and User Eligibility

GetIn allows users to create an account, but account approval is subject to identity verification, eligibility checks, and GetIn’s review process. Users must be at least 18 years of age and legally eligible to independently use ride-sharing services under applicable laws of Sri Lanka. Accounts that do not meet the required eligibility criteria may be rejected, suspended, or removed during or after the review process. 

GetIn does not knowingly approve users under the age of 18 to use the platform’s ride-sharing services. If we become aware that an approved account belongs to an individual who does not meet the required age or eligibility criteria, GetIn reserves the right to suspend or remove the account and associated data.

• •