AROUTE (the "App") is operated by AROUTE GROUP PTY LTD ("AROUTE", "we", "us", or "our"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what information we collect, how and why we use it, when it may be disclosed, how long it is retained, and the choices and rights available to you.

Please read this Privacy Policy before using the App. If you do not agree with it, do not use the App or provide personal information to us.

1. Scope

This Privacy Policy applies to information processed through the AROUTE mobile application, our related APIs and support services, and the AROUTE account deletion process. It does not apply to third-party websites, applications, or services that have their own privacy policies.

2. Information We Collect

Depending on the features you use, we may collect the following categories of information.

2.1 Account and identity information

• Mobile phone number and SMS verification information used to register, sign in, secure your account, and verify an account deletion request.
• Name, date of birth, email address, residential address, passport or other identification details, and information required to administer a rental relationship.
• Authentication tokens and account identifiers used to maintain your signed-in session.

2.2 Precise location information, including background location

AROUTE collects precise location data while you use map and location features. When you set your rider status to Enable, AROUTE may also collect and transmit your precise location while the App is running in the background, when the screen is off, or when the App is closed or not actively in use.

We use location information to:

• keep your rider and assigned vehicle position up to date;
• provide real-time trip monitoring and rider safety features;
• display your position and nearby vehicles, incidents, operational zones, and safety alerts on the map;
• determine whether you enter or leave a designated operational or safety zone;
• provide address search, geocoding, navigation, and route-related services; and
• investigate service, safety, fraud, and support issues.

Background location collection is linked to the Enable feature. You can stop background updates by changing your status from Enable or by disabling location permission in your device settings. Some map, navigation, trip-monitoring, vehicle, and safety features will not work correctly without location access.

2.3 Vehicle, rental, and connected-device information

We may process information about your rented, assigned, or owned vehicle, including vehicle identifiers, IMEI or connected-device identifiers, brand, model, manufacture year, vehicle and battery photographs, GPS position, route or trajectory, battery level, mileage, lock status, speed mode, command history, and related operation records.

2.4 Photos, reports, comments, and other content

When you choose to use these features, we collect photographs selected from your library or taken with your camera, incident or theft-alert descriptions, report locations and addresses, comments, confirmations, feedback, and other content you submit.

Incident reports, comments, a display name, and related report information may be shown to other authorised AROUTE users as part of the map and safety features. Do not submit content that you do not have the right to share.

AROUTE accesses only the photos you select or create for upload. You can deny camera or photo access, but photo-upload features will then be unavailable.

2.5 Device, application, and network information

We may collect app version, operating system and device information, push-notification tokens, IP address, request timestamps, network status, server logs, and diagnostic or security information. We use this information to deliver notifications, maintain compatibility, secure the service, prevent abuse, and diagnose technical problems.

2.6 Communications and support information

If you contact us, report a comment, submit feedback, or request support, we collect the information contained in your request and any contact details required to respond.

3. Device Permissions

The App may request the following permissions only when needed for a feature:

• Precise and background location: map, trip-monitoring, rider safety, operational-zone, and assigned-vehicle location features.
• Camera and photos: taking or selecting vehicle, battery, incident, or theft-alert images for upload.
• Notifications: service messages, safety alerts, and account or vehicle notifications.
• Telephone: initiating a call to a displayed contact. AROUTE does not access your call history through this feature.

You can manage these permissions in your device settings. Withdrawing a permission does not affect processing that occurred before it was withdrawn, but the relevant feature may stop working.

4. How We Use Information

We use personal information to:

• create, authenticate, administer, and secure your account;
• provide rental, vehicle, map, navigation, incident-reporting, safety, and support functions;
• send service and push notifications;
• upload and display content you choose to submit;
• process vehicle commands and maintain operation records;
• monitor service performance, troubleshoot errors, and improve reliability;
• prevent fraud, misuse, unauthorised access, and threats to users or vehicles;
• enforce our agreements and protect our legal rights; and
• comply with applicable legal, regulatory, insurance, accounting, and safety obligations.

We do not use precise location data for unrelated advertising, and we do not sell personal information or precise location data.

5. How We Disclose Information

We disclose personal information only where reasonably necessary for the purposes described in this Privacy Policy.

5.1 Service providers

Our service providers may process information on our behalf, including cloud hosting, data storage, SMS delivery, image storage, customer support, security, mapping, geocoding, navigation, and push notifications. These providers are permitted to process information only for the services they provide to us and subject to appropriate contractual or legal safeguards.

The App currently uses services that include:

• Mapbox, for map rendering, map interactions, and related map services. Mapbox may process device, map-usage, and location-related information under its privacy policy: https://www.mapbox.com/legal/privacy
• Google Firebase Cloud Messaging, for push-notification delivery and notification tokens. Google's privacy policy is available at: https://policies.google.com/privacy
• External map applications, such as Apple Maps or Google Maps, when you choose to open navigation in an installed application. The selected provider processes information under its own privacy policy.

5.2 Other authorised users

Information intended for shared map or safety features, such as incident reports, comments, report locations, photographs, and display names, may be visible to other authorised AROUTE users.

5.3 Legal, safety, and business requirements

We may disclose information when required by law or where reasonably necessary to respond to lawful requests, protect users or vehicles, investigate fraud or security incidents, enforce our terms, establish or defend legal claims, or complete a corporate transaction subject to appropriate safeguards.

6. Data Retention and Account Deletion

We retain personal information only for as long as reasonably necessary to provide the App and rental services, maintain security and business records, resolve disputes, enforce agreements, and meet legal, insurance, tax, accounting, and regulatory requirements. Retention periods vary depending on the type of information and the reason it was collected.

When information is no longer required, we delete it or de-identify it. Backup copies may remain for a limited period until they are overwritten through our normal backup cycle. We may retain information where required by law, needed to prevent fraud or abuse, or necessary for an unresolved dispute or legal claim.

You can request deletion from within the App:

1. Open AROUTE and sign in.
2. Go to User > Settings > Delete Account.
3. Review the deletion notice, select the confirmation, and tap Next.
4. Enter the four-digit verification code sent to your registered mobile number.

After verification, the account deletion request is submitted and access to the account is removed. Personal information linked to the account will be deleted or de-identified, except for information that we must or are permitted to retain for the reasons stated above. Account deletion is irreversible.

You may also request account or data deletion by contacting us using the details in Section 13.

7. Data Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal information, including access controls and encryption in transit where appropriate. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security. We will respond to suspected data incidents in accordance with applicable law.

8. International Data Transfers

Some service providers may process or store information outside your country or region, including in countries with different data-protection laws. Where required, we use contractual, organisational, or other lawful safeguards for these transfers.

9. Your Choices and Rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, object to or restrict certain processing, or withdraw consent where processing is based on consent. You may also disable permissions, background location, and notifications through your device settings.

To exercise a privacy right, contact us using the details in Section 13. We may need to verify your identity before completing a request.

10. Children's Privacy

AROUTE is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us so that we can investigate and take appropriate action.

11. Third-Party Services

The App may contain links to or open third-party services. We are not responsible for the privacy practices of independent third parties. Review their privacy policies before providing information to them.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the App, our data practices, or legal requirements. We will publish the updated policy with a revised "Last updated" date and, where required, provide additional notice or request consent. Material changes will not be applied retroactively without a lawful basis.