Last Updated: July 8, 2026
This Privacy Policy explains how MoveFlex ("we," "us," or "our") collects, uses, and protects your personal information when you use our mobile application and associated services .
1. Information We Collect
To provide our real-time peer-to-peer matching, voice communication, and safety services, we collect and process the following information:
- Account Profile: Your name, phone number, user type (driver or passenger), vehicle category, and profile picture.
- Microphone Access (Mandatory): To facilitate direct voice calling between matched users inside the app, microphone access is a mandatory requirement for all users . We access your device’s microphone strictly during active calls to connect the WebRTC audio stream. We do not record, store, or monitor your conversations or audio data.
- Device and Unique Vendor Identifiers: We collect your device's unique hardware or vendor identifier (such as the iOS Identifier for Vendors [IDFV] or the Android ID). We use this data strictly to secure your account, bind your active session to your physical device (preventing session hijacking and unauthorized simultaneous logins on other devices), and ensure that real-time push notifications are routed to your active device
- GPS Location Data (Platform-Specific):
- For Passengers: We access your device’s foreground GPS location strictly when the App is open and active on your screen to display nearby drivers on your Radar . We do not collect passenger location in the background.
- For Drivers/Hosts: To allow passengers to discover you when you are on the road, we collect and track your device's GPS location in the background (even when the App is closed or not in active use) . Background tracking is strictly limited to users registered as Drivers who have toggled their status to "Online".
- Abuse and Moderation Data: When you Block or Report a user, we collect the ID of the reported user and your safety report solely to perform moderation investigations, filter them out of your radar, and terminate abusive accounts.
2. The Passenger Privacy Shield (Map Access)
to maintain the highest level of community safety and protect passenger privacy, we enforce three strict, hardcoded security rules on our servers and application interface:
- Strict Location Masking: A Passenger's starting GPS coordinates are completely masked and hidden. A Driver is strictly blocked from viewing a Passenger's location, route, or launching map navigation until two conditions are met: (1) the Passenger has explicitly clicked "Lock in Ride" (accepting the match) on their screen, and (2) the Driver is fully verified through our secure identity verification system.
- Asymmetric Voice Calling: To protect riders from unsolicited contact, only Passengers can initiate voice calls. A Driver is completely blocked from initiating phone calls or accessing a passenger's voice connection.
- Driver Interest Requests: A Driver cannot directly call or text a passenger. To connect, a Driver is strictly limited to sending a secure, automated "Request Interest" signal through the app to indicate their availability.
3. Third-Party Data Processing
We integrate secure, enterprise-grade third-party services to handle critical communication, authentication, and alerts:
- Amazon Web Services (AWS) Rekognition: Used strictly to verify the identity of users who choose to undergo verification by comparing their live selfie face with the face from the gallery photo.
- Twilio Inc.: Used to facilitate secure VoIP voice calling between matched users. Your real phone numbers are masked and never exposed to the other party.
- Google Firebase Cloud Messaging (FCM): Used to send push notifications to wake up your phone for incoming matches.
4. Instant Account and Data Deletion