BDrive Privacy Policy
Last updated: v3.0
Version 3.0 — effective 23 August 2026
This Privacy Policy explains how B Drive for App Based Transport (Commercial Registration No. 239801, 11th Floor, Al Owaina Tower, Museum Park Street, Doha, State of Qatar — "BDrive", "we", "us") collects, uses, shares and protects personal data when you use the BDrive rider app, the BDrive driver app, the website bdrive.qa and our support channels (together, the "Platform"). It is written to comply with Qatar's Law No. 13 of 2016 Concerning Personal Data Privacy Protection (the "PDPPL") and its implementing regulations.
BDrive is the controller of your personal data. If you have any question about this Policy or about your data, contact us at [email protected] (subject: "Privacy") or write to the address above.
1. Who this Policy covers
This Policy applies to Riders, Drivers and driver applicants, website visitors, people who contact our support team, and anyone whose data reaches us through the Platform (for example a contact you share a trip link with). Where this Policy says "you", it means the person whose data we are processing.
2. Data we collect
2.1 Data you give us • Account details: name, mobile number, e-mail address, profile photo, preferred language, password or biometric unlock preference (biometric data never leaves your device). • Rider booking details: pickup and destination addresses, saved places (Home, Work and others), vehicle category, payment method, scheduled-trip times, passenger notes, ratings and feedback you give. • Driver application and compliance details: full name, date of birth, nationality, Qatar ID number and copy, driving licence number and copy, vehicle registration (istimara) and insurance documents, vehicle photographs and plate number, profile photo, and the payout details you choose to give us (bank name, IBAN or other payout identifier). Nationality may be derived from your Qatar ID number for compliance reporting. • Payment data: when you pay by card, Apple Pay or Google Pay, your card details are entered directly into the secure fields of our payment provider, Tap Payments. We receive only a token, the card brand, the last four digits and the expiry date. We never receive or store your full card number or security code. Wallet top-ups and balances are recorded by us. • Communications: messages you exchange with a Driver or Rider through in-app chat; messages, attachments and call notes from your conversations with our support team, including our automated support assistant; e-mails and SMS you send us; responses to surveys. • Promotions and referrals: promo codes you redeem, referral codes you share or use, loyalty activity.
2.2 Data we collect automatically • Location data. Riders: we collect your device's precise location when the rider app is open on screen and you have granted permission, to set your pickup point, show nearby Drivers, track your Trip and calculate fares. We do not collect Riders' location in the background. Drivers: while you are online in the driver app we collect your precise location continuously, including in the background and while the screen is off, to dispatch requests, navigate, calculate fares, monitor progress to pickup, protect Riders and detect fraud. You can stop this at any time by going offline or disabling the permission; you cannot receive requests without it. • Trip data: the route actually driven (GPS breadcrumbs), timestamps of each Trip event (request, assignment, arrival, start, completion, cancellation), waiting time, distance, fare and fee breakdown, tips, destination changes, ratings and the cancellation reasons given by either party. • Device and app data: device model, operating system version, app version, language, unique device and push-notification identifiers, IP address, network type, time zone, crash reports and performance logs. • Usage data: screens viewed, features used, searches, and the timing of your interactions with the Platform. • Website data: pages visited, referring site, browser type, approximate location from IP address, and — with your consent — cookies and similar technologies used by Google Analytics, Meta (Facebook) Pixel and TikTok Pixel to measure our marketing. See Section 10. • Install attribution: when the app is installed from a referral link or campaign, the app store may pass us the referral identifier so that we can attribute the install.
2.3 Data we receive from others • From Tap Payments: payment confirmations, authorisation and refund status, and fraud signals. • From Apple and Google: confirmation of Apple Pay / Google Pay transactions, app-store install data, push-notification tokens and authentication signals. • From other users: the rating and feedback a Driver gives a Rider or a Rider gives a Driver, safety reports, lost-item reports. • From public sources and authorities: validity checks of licences, vehicle registration and identity documents as permitted by law.
3. Why we use your data and our legal basis
Under the PDPPL we process your data only for the lawful, specific purposes listed here, with your consent where the law requires it, and otherwise where processing is necessary to perform our contract with you, to comply with a legal obligation, or for a legitimate purpose that does not override your rights.
• To provide the service you ask for (contract): create and manage your account; match Riders with Drivers; show Drivers your pickup point and destination; calculate quotes, fares, waiting time and fees; process payments, holds, refunds and Wallet transactions; pay Drivers; send receipts; enable in-app chat and masked calls; provide trip sharing, scheduled trips, lost-item help and ratings. • Safety and security (legitimate purpose and legal obligation): verify identity; screen and re-verify Drivers and their documents; detect and prevent fraud, fake accounts, promo abuse, unsafe driving patterns and payment abuse; operate the SOS feature; investigate accidents, complaints and disputes using trip records, locations, timestamps and messages. • Customer support (contract and legitimate purpose): answer your questions, handle complaints and refund requests, and improve our support, including by using an automated assistant that reads the live Platform rules and your trip records to answer you. • Legal compliance (legal obligation): keep commercial, tax and transport records required by Qatari law; respond to lawful requests from the Ministry of Transport, the Ministry of Interior, courts and other competent authorities; enforce our Terms of Service. • Improvement and analytics (legitimate purpose): understand how the Platform is used, fix crashes, test features, measure demand and Driver supply, set surge zones, and develop new services. Where possible we use aggregated or de-identified data for this. • Marketing (consent): send you offers, promotions and news by push notification, SMS, e-mail or in-app message only if you have agreed; measure the effectiveness of our advertising through cookies and pixels on the website only if you have accepted them. You can withdraw consent at any time (Section 8). • Service messages (contract): notify you about your Trips, payments, account, document expiry (Drivers) and changes to our Terms or this Policy. These messages are not marketing and are sent to every account holder.
4. Who we share your data with
We never sell your personal data. We share it only as described below.
4.1 Between Riders and Drivers. When a Driver is assigned, the Rider sees the Driver's first name, photo, rating, vehicle make, model, colour and plate number and live location. The Driver sees the Rider's first name, rating, pickup point, destination and any note. In-app calls are routed through a masked number so that neither party sees the other's real number; where masked calling is unavailable, the Driver may be shown your number to call you directly for that Trip. After a Trip each party sees the other's rating only as part of an average.
4.2 People you choose. If you share a trip link, the recipient can see the Driver's details, vehicle and live location for that Trip.
4.3 Service providers acting on our instructions, bound by contract to protect your data: • Tap Payments (card, Apple Pay and Google Pay processing, Wallet top-ups) — GCC region; • Google Cloud and Firebase (hosting of our servers and database in Doha, Qatar; realtime tracking and chat database; authentication; push notifications; file storage; crash reporting; analytics) — Qatar, European Union and United States; • Google Maps Platform (maps, routes, distances, address search) — Google; • Google Gemini (the language model behind our automated support assistant — support messages and relevant trip details are sent to it to generate a reply); • Twilio (masked calls and, where selected, SMS) — United States; • LGS / Vodafone Qatar (SMS verification codes and notifications) — Qatar; • Resend (transactional e-mail) — United States; • Apple and Google (app distribution, Apple Pay / Google Pay, push delivery).
4.4 Authorities and legal requirements. We disclose data to the Ministry of Transport, the Ministry of Interior and police, courts, regulators and other competent authorities in Qatar where the law requires it, where we receive a valid legal request, or where it is necessary to protect the life or safety of a person, to investigate fraud, or to defend our legal rights. Where a road accident or safety incident is investigated we may share trip records with the parties involved and their insurers.
4.5 Business changes. If BDrive is involved in a merger, acquisition, financing or sale of assets, your data may be transferred to the successor under the same protections as this Policy, and we will notify you.
4.6 Professional advisers, auditors and insurers, under confidentiality.
5. Where your data is stored and international transfers
Our main application servers and main database run on Google Cloud in Doha, Qatar (region me-central1). Some services we rely on process data outside Qatar: the Firebase realtime database used for live tracking and chat is located in the European Union; Firebase authentication, push notifications, crash reporting and analytics, Twilio, Resend and Google Gemini operate from the European Union and the United States; Tap Payments operates from the GCC. We transfer data outside Qatar only to providers that give adequate protection through contractual commitments, certifications and security measures consistent with the PDPPL, and we transfer only what each provider needs.
6. How long we keep your data
• Account and profile data: for as long as your account is active. • Trip, fare, payment, Wallet, refund and receipt records: up to 10 years, because Qatari commercial and tax law requires us to keep financial records for that period, and to resolve disputes and claims. • Driver compliance documents (Qatar ID, licence, istimara, insurance): for the duration of your approval and for the period required by transport regulations and our legal obligations after it ends. • Location breadcrumbs, chat messages, call metadata and safety records: for as long as needed to calculate fares, resolve disputes, investigate incidents and comply with the law, and in any event no longer than the Trip records they belong to. • Support conversations: up to 3 years after the case is closed. • Marketing consent and preferences: until you withdraw consent, plus a record of the withdrawal. • Crash and analytics logs: up to 18 months in identifiable form.
When you delete your account we deactivate it immediately, stop all marketing and revoke app access. We then keep only the records that the law or an unresolved claim requires, and delete or anonymise the rest when the applicable period ends. Anonymised or aggregated data that can no longer identify you may be kept indefinitely.
7. How we protect your data
We use encryption in transit (TLS) for every connection, encrypted storage, role-based access for our staff, audit logging of staff access to personal data, secure tokenisation of card data through Tap Payments, masked calling, and periodic security reviews. Access to Driver documents and payout details is restricted to the staff who need it. No system is completely secure; if we become aware of a breach that affects your data we will notify you and the competent authority as the PDPPL requires.
8. Your rights
Under the PDPPL you have the right to: • access the personal data we hold about you and receive a copy; • correct data that is inaccurate or incomplete (most profile data can be edited in the app); • ask us to erase your data, subject to the retention obligations in Section 6, and delete your account from the app settings; • withdraw consent to marketing at any time in the app settings or by using the opt-out in any marketing message, without affecting your ability to use the Platform; • object to processing, including profiling, that is not necessary for the service or required by law; • be told if your data is lost or accessed without authorisation in a way that could seriously harm you; • lodge a complaint with the competent data-protection authority in Qatar, the National Cyber Security Agency (Compliance and Data Protection Department), if you believe we have not handled your data lawfully.
To exercise a right, use the options in the app or e-mail [email protected] with "Privacy" in the subject. We may ask you to verify your identity. We respond within 30 days, or tell you if we need longer.
9. Children
The Platform is for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18, except that a Rider may carry a child as a passenger. If you believe a child has created an account, contact us and we will delete it.
10. Cookies and website tracking
The website bdrive.qa uses strictly necessary cookies to operate, and — only after you accept them in the cookie banner — analytics and marketing cookies and pixels from Google Analytics, Meta and TikTok to measure visits and advertising. You can decline or withdraw consent in the banner at any time and control cookies in your browser. The apps do not use cookies; they use Firebase Analytics and Crashlytics to measure use and stability, which you can limit through your device's advertising and analytics settings.
11. Automated decisions
The Platform uses automated rules to match Riders with Drivers, to calculate fares and surge, to decide whether a cancellation or no-show fee applies (based on timestamps, locations and contact attempts recorded during the Trip), to flag suspicious activity for review, and to temporarily pause Driver requests after repeated cancellations. Decisions that significantly affect you — such as removing a Driver from the Platform or suspending an account — are reviewed by a person, and you can ask us to reconsider any decision by contacting support.
12. Changes to this Policy
We may update this Policy from time to time. The version number and effective date at the top identify the current version. For material changes we will notify you in the app, by e-mail or SMS, or on the website before they take effect. Continuing to use the Platform after the effective date means you accept the updated Policy.
13. Contact
B Drive for App Based Transport Commercial Registration No. 239801 11th Floor, Al Owaina Tower, Museum Park Street, Doha, State of Qatar Privacy requests: [email protected] (subject: "Privacy") Support: [email protected] · Phone: +974 7140 1008 Website: https://bdrive.qa