Privacy Policy

Last updated: 22 July 2026

This Privacy Policy explains how DriveWave, operated by BNM (“DriveWave”, “we”, “us”), collects, uses, protects and shares your personal data when you use the DriveWave mobile app and website at dwave.app. By using DriveWave, you agree to the practices described here.

1. Who this policy covers

DriveWave is a ride-sharing marketplace that connects riders with independent drivers. This policy applies to both riders and drivers who use our app or website, and to anyone who contacts us through the site.

2. Information we collect

Information you give us

Account details — your name, phone number, email address, and profile photo (if you add one).
Driver verification documents (drivers only) — driver’s licence, vehicle registration, insurance and identity documents you upload so we can verify you before your first trip.
Trip information — pickup and drop-off locations, the fare you propose or agree to, and your trip history.
Messages — in-app chat between riders and drivers, and any message you send us for support.
Payment records — a record of your trips and how they were paid (cash or card). Card payments are handled by our payment processor; we do not store full card numbers on our servers.

Information collected automatically

Location data — with your permission, we use your device’s precise location to match you with nearby drivers, show live trip progress, and support safety features. Location is used while you are arranging or taking a trip. You can turn location access off in your device settings, though core features will not work without it.
Device & usage data — device model, operating system, app version, language, and diagnostic/log data used to keep the service running and to fix problems.

3. How we use your information

To create and manage your account and verify drivers.
To match riders and drivers and enable the price-negotiation flow.
To provide live trip tracking, in-app chat, receipts and history.
To process and record payments for trips.
To support safety features, including the in-app emergency button.
To respond to support requests and communicate with you about the service.
To detect, prevent and address fraud, abuse and technical issues.
To comply with legal obligations.

4. How we share information

We share personal data only as needed to run the service:

Who	What & why
Riders & drivers	To complete a trip, a rider and their matched driver see the information needed to find each other and communicate (such as first name, pickup/drop-off and in-app chat). In-app chat lets you coordinate without sharing your real phone number.
Service providers	We use Google Firebase / Google Cloud (bnm-ride project) for hosting, database, authentication and file storage; a maps/location provider for routing; a payment processor for card payments; and Amazon Web Services (SES) to send email. These providers process data on our behalf under their own security and privacy terms.
Safety & legal	If you use the emergency button, relevant information may be shared to help get you assistance. We may also disclose information where required by law, or to protect the rights, safety and property of users, the public, or DriveWave.

We do not sell your personal data, and we do not share it with third parties for their own advertising.

5. Data security

Your data is encrypted in transit (HTTPS/TLS) and at rest on Google Cloud infrastructure. Access to personal data is restricted to authorised personnel and systems that need it to operate the service. No method of transmission or storage is ever completely secure, but we work to protect your information using industry-standard safeguards.

6. Data retention

We keep your personal data for as long as your account is active or as needed to provide the service, meet legal, tax and safety obligations, resolve disputes and enforce our agreements. When data is no longer needed, we delete or anonymise it.

7. Your rights and choices

Depending on where you live, you may have the right to access, correct, or delete your personal data, and to object to or restrict certain processing. You can:

Update most account details directly in the app.
Control location and notification permissions in your device settings.
Request a copy or deletion of your data by contacting us (see below).

Deleting your account. To delete your DriveWave account and associated personal data, use the account-deletion option in the app, or email firm.bnm@gmail.com from your registered email with the subject “Delete my account”. We will process your request and delete your data, except where we are required to retain certain records by law.

8. Children’s privacy

DriveWave is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will remove it.

9. Where your data is processed

DriveWave operates across multiple regions and relies on Google Cloud and other providers whose infrastructure may process and store data in countries other than your own. Where we transfer data internationally, we rely on providers that apply appropriate safeguards.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you in the app. Your continued use of DriveWave after changes take effect means you accept the updated policy.

11. Contact us

Questions about this policy or your data? Email us at firm.bnm@gmail.com.