Last updated: 19 August 2026
Mahmud (“we”, “us”, the “app”) is a ride-hailing application. This policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices you have. By using the app you agree to this policy.
Information we collect
- Account & identity (eKYC): your phone number (MSISDN) and email address, and your name when you sign in with Apple or Google.
- Precise location: your device location, used to set your pickup point, show nearby context, calculate routes and fares, and track a trip in progress.
- Trip data: pickup and destination, chosen vehicle and fare, payment method (Cash or QRIS), trip history, and any rating or comment you leave for a driver.
- Messages: chat messages you exchange with a driver during a trip.
- Device & integrity signals: data used by App Attest / Firebase App Check to verify requests come from a genuine, unmodified app.
How we use your information
- To create and verify your account (eKYC) and sign you in.
- To provide the core service: matching you with a driver, routing, pricing, payment, and in-trip communication.
- To maintain your trip history and driver ratings.
- To protect the service against fraud and abuse.
We do not use your data for tracking across other companies’ apps or websites, and we do not sell your personal data.
Third-party services
We share the minimum data necessary with service providers that process it on our behalf:
- Google Maps Platform (Maps, Places, Routes) — map display, place search, and route/fare calculation.
- Google Firebase (Cloud Functions, Cloud Firestore, App Check) — backend, data storage, and app-integrity verification.
- Sign in with Apple and Google Sign-In — optional single sign-on. We receive a verified email and, on first sign-in, your name.
These providers process data under their own privacy policies.
Data retention
We keep your account and trip data while your account is active. When you delete your account, we remove your customer record and associated data (including favorites, verification records, and trip history) from our database.
Your choices & rights
- Delete your account: in the app, open the profile menu → Delete account. This permanently deletes your account and associated data.
- Location: you can control location access in iOS Settings; some features require location to work.
- Access or correction: contact us at the address below to request access to or correction of your data.
Children
The app is not directed to children under 13, and we do not knowingly collect their personal data.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected here with a new “Last updated” date.
Contact us
Questions about this policy or your data? Email privacy@hai-app.id, or visit our Support page.
Mahmud is operated in Indonesia by PT HAI Aplikasi Indonesia. If there is any conflict between the English and Indonesian versions, the Indonesian version prevails.