Privacy policy

Last updated 7 November 2026

Vaanga is an app for rides, parcels, goods by mini lorry and self-drive car rentals in Kinniya, Sri Lanka. This policy explains what we collect when you use the Vaanga customer app, the Vaanga driver app, the web app or the hotline, why we need it, who can see it, and how to delete it.

What we collect

Everyone

  • Mobile number. You sign in with your number and a code we send by SMS. Your number is your account.
  • Name and preferences you choose to add: the name drivers see and your language.
  • Emergency contact, if you add one, so you can share a trip with them.
  • Location. Customers: your pickup and drop, and your position while you use the app to set a pickup. We don't track customers in the background.
  • Bookings. Pickups and drops, times, the vehicle, fares, cancellations, ratings you give and receive, and reports or complaints you send us.
  • Parcels and goods. What you send or move, and for parcels the name and mobile number of the person who receives it.
  • Car rentals. The vehicle, dates, notes you write and the status of your request.
  • Technical data. Our servers log requests (time, address, what was asked) to keep the service running and safe. We don't use advertising IDs.

Drivers and vehicle owners

  • Your NIC number, home area, the documents you upload (such as your licence and vehicle papers) and your vehicle's details and plate.
  • Your live location while you are online or on a trip, so we can offer you nearby rides and show customers where you are. When you go offline, the driver app stops sending it.
  • Your plan, the fees you owe and the payments you make.

Rental shops

  • The shop's name, phone, address, location, opening hours, vehicles, prices and the requests it receives.

Why we use it

  • To run the service: sign you in, show prices, match you with a nearby driver, show the route and arrival time, and let rental shops answer requests.
  • For safety: sharing a trip, the safety button, checking reports and complaints, and blocking accounts that break the rules.
  • To manage drivers' plans and fees, and to keep records of trips and payments.
  • To contact you about your bookings by SMS or phone, and to send service messages (for example a change in prices). We don't send advertising for other companies.

Who can see it

  • Your driver sees your name, pickup and drop, and your number while the trip is on. For a parcel, the driver also sees the receiver's name and number to deliver it.
  • Customers see their driver's name, vehicle, plate, rating and live position, and the driver's number while the trip is on.
  • Rental shops see the name and number of people who ask to rent their vehicles.
  • People you share a trip with see its progress through the link you send them.
  • Vaanga staff (the hotline and administrators) see what they need to book rides, help you and handle reports.
  • Service providers that run parts of Vaanga for us: Google Cloud (servers), Supabase (database), Vercel (websites), a Sri Lankan SMS gateway (sign-in codes and messages), and OpenStreetMap-based services for maps, place search and routes. They only use the data to provide their service to us.
  • Authorities, when Sri Lankan law requires it or to protect someone's safety.

We don't sell your data and we don't show ads.

How long we keep it

We keep your account while you use Vaanga. When you delete your account, your name, number and driver details are removed straight away. Records of past trips, hires, rentals and payments are kept without your details, as “Deleted user”, because we need them for accounts, disputes and safety. Server logs are kept for a short time only.

Your choices

  • Change your name, language and preferences in the app's Account screen.
  • Turn location off in your phone's settings; you can still pick your pickup on the map or from a list.
  • Delete your account in the app (Account → Delete account) or as described on the account deletion page.
  • Ask us for a copy of your data or to correct it by emailing umahfoosahamed@gmail.com.

Security

The apps talk to our servers only over encrypted connections (HTTPS). Sign-in codes are stored hashed and expire after a few minutes. Only staff who need it can see account details.

Children

Vaanga accounts are for people aged 18 and over.

Changes

If we change this policy we'll update this page and the date at the top, and tell you in the app when the change matters.