Privacy Policy

Welcome to Cango's Privacy Policy. We value your privacy and are committed to protecting your personal information. This policy explains how we collect, use, share, and protect information in our passenger app, "Cango," and our driver app, "Cango Driver." By using our services, you agree to the collection and use of information in accordance with this policy.

Last updated: June 26, 2024

General Provisions

Scope of the Policy

This policy applies to all users of the Cango and Cango Driver apps, including passengers and drivers. It covers all the data we collect through the apps and explains how we use, share, and protect that data.

Changes to the Policy

We may update this policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by posting the new policy on our website and within our apps. You are advised to review this policy periodically for any changes. Your continued use of our services after the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions about this policy, please contact us at info@cango.lk.

Information We Collect

Personal Information

  • Cango collects and stores your name, email address, phone number, and address during registration to create your account and provide ride services.
  • Cango Driver additionally collects and stores your vehicle details and documents (driver's license and insurance) during registration to verify your identity and enable driver services.

Location Information

  • Cango collects precise location data (GPS, Wi-Fi, Mobile Data) in both the foreground (when the app is open and on-screen) and background (when the app is open but not on-screen) to enable real-time ride tracking and provide an optimal experience for both passengers and drivers.
    • Foreground: When the app is open and on-screen, we collect location data to match passengers with nearby drivers efficiently.
    • Background: When the app is open but not on-screen, we collect location data to ensure continuous ride tracking and real-time updates. This is particularly crucial for drivers, as it allows their location to be shared with passengers even when using other apps during a ride.
  • The main purpose of the Cango app is to connect passengers with nearby taxi drivers efficiently and safely. Without the location access, both driver and passenger apps won't work correctly.
    • Matching Passengers with Drivers: When a passenger requests a ride, the app continuously monitors their location in the background to identify the nearest available drivers. This enables us to promptly match passengers with the most suitable driver, minimizing wait times and ensuring efficient service.
    • Providing Accurate ETAs: Even when the app is not in the foreground, background location access allows us to continuously track the passenger's location. This is crucial for providing accurate estimated arrival times (ETAs) to both the passenger and the driver, enhancing the overall user experience and security of the ride.

Payment Information

  • Cango collects and securely stores your payment information (passengers: credit card details, drivers: bank account details) to process transactions for ride payments.

Usage Data

  • Cango collects and analyzes your app interaction data (features used, activity) to understand user behavior and improve our services.

Messages

  • Cango stores in-app messages to facilitate communication regarding rides and customer support interactions.

Photos and Videos (with permission)

  • Cango collects photos and videos with your explicit permission for functionalities such as profile pictures.

Contacts (with consent)

  • Cango accesses your contact list with your consent to allow you to build an emergency contact list within the app.

App Info & Performance

  • Cango collects crash logs and diagnostics to improve app performance and identify technical issues.

Device or Other IDs

  • Cango collects device identifiers to track app usage and enhance security.

How We Use Your Information

We use your information for various purposes to ensure you have the best possible experience with Cango and Cango Driver.

General Purposes

  • Providing ride services:Matching you with drivers, managing ride logistics, tracking ride location in realtime, and ensuring smooth operations.
  • Improving user experience:Enhancing app functionality and making improvements based on user behavior.
  • Payment processing:Processing payments for rides and ensuring secure transactions.
  • Communication: Sending notifications, updates, and important service-related messages.
  • Maintaining services:Providing and maintaining our services, notifying you about any changes, and ensuring app functionality.
  • Customer support:Assisting with inquiries and resolving issues.
  • Analytics: Analyzing app usage data to gather insights and improve services.
  • Technical issues:Detecting, preventing, and addressing technical issues.

Information Sharing and Disclosure

With Drivers (Passengers Only)

  • Ride details and passenger details:Sharing necessary ride details for providing the ride.

With Passengers (Drivers Only)

  • Ride details and driver profiles:Sharing necessary details for providing the ride.

Legal Requirements

  • Compliance: Disclosing information to comply with legal obligations or respond to valid legal requests.

Data Security

We take various measures to protect your information:

  • Measures to protect data:Implementing robust security measures to protect data from unauthorized access and breaches.
  • Data encryption:Encrypting sensitive data to enhance security during transmission and storage.
  • Secure storage practices:Ensuring data is stored securely using industry-standard practices.

Data Breach Notification

In the event of a data breach, we will promptly notify affected users and take appropriate measures to mitigate the breach. We will strive to communicate the following information in a timely manner:

  • Nature of the breach: A description of the data that was compromised, such as names, email addresses, or financial information.
  • When the breach occurred: The timeframe during which the breach is suspected to have occurred.
  • Steps taken in response: The actions we are taking to address the breach and prevent future incidents.
  • Recommendations for users:Precautions users can take to protect themselves, such as changing passwords or monitoring accounts for suspicious activity.

We will use various methods to notify users depending on the severity of the breach and the contact information available. These methods may include:

  • Email: Sending an email notification to the address on file.
  • In-app notification:Displaying a notification within the Cango and Cango Driver apps.
  • Website notice: Posting a notice on our website with details about the breach.

Your Rights and Choices

Access and Update Personal Information

  • Access and update:Access and update your personal information directly through the app.

Opt-Out Options

  • Promotional communications:Opt-out of certain uses of your data, such as receiving promotional communications.

Deleting Your Account and Data

  • Account deletion:Request to delete your account and personal data at any time, resulting in the removal of your information from our active databases.

Retention of Data

How Long Data is Stored

  • Retention period:Retaining data for as long as necessary to fulfill the purposes outlined in this policy.

Criteria for Data Retention

  • Legal requirements:Data retention periods are based on legal requirements, business needs, and user requests.

Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.

Additional Provisions

Permissions and APIs That Access Sensitive Information

Our apps may request access to certain sensitive permissions and APIs, such as location data, camera access, and contact information. These permissions are essential to provide our services. When first requested by the app, you will be prompted to grant or deny them. You will receive a notification whenever we access sensitive information, like location, even when the app isn't in use. You can manage these permissions through your device settings at any time.

Location Information: Cango collects precise location data (GPS, Wi-Fi, Mobile Data) in both the foreground (when the app is open and on-screen) and background (when the app is open but not on-screen) to enable real-time ride tracking and provide an optimal experience for both passengers and drivers.

Foreground: When the app is open and on-screen, we collect location data to match passengers with nearby drivers efficiently.

Background: When the app is open but not on-screen, we collect location data to ensure continuous ride tracking and real-time updates. This is particularly crucial for drivers, as it allows their location to be shared with passengers even when using other apps during a ride.

Purpose of Location Data Collection: The main purpose of the Cango app is to connect passengers with nearby taxi drivers efficiently and safely. Without the location access, both driver and passenger apps won't work correctly.

Matching Passengers with Drivers: When a passenger requests a ride, the app continuously monitors their location in the background to identify the nearest available drivers. This enables us to promptly match passengers with the most suitable driver, minimizing wait times and ensuring efficient service.

Providing Accurate ETAs: Even when the app is not in the foreground, background location access allows us to continuously track the passenger's location. This is crucial for providing accurate estimated arrival times (ETAs) to both the passenger and the driver, enhancing the overall user experience and security of the ride.

Cookies and Tracking Technologies

We use cookies and similar technologies to track app usage and improve services. These technologies help us understand user interactions and enhance user experience.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that any international transfers comply with applicable data protection laws and regulations.

GDPR Provisions

Data Controller

For the purposes of the General Data Protection Regulation (GDPR), the data controller is Cango Micro Services (Pvt) Ltd located at No 1, Mahindarama Road, Ethul Kotte, Sri Jayawardhanapura, Sri Lanka.

Legal Basis for Processing

We process your personal data based on the following legal bases:

  • Contractual necessity: To fulfill our contract with you and provide our services.
  • Legitimate interests: For our legitimate interests in improving our services, ensuring security, and providing customer support.
  • Legal obligations: To comply with legal and regulatory requirements.
  • Consent: Where we have obtained your consent to process your data for specific purposes.

Data Subject Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right to access: You have the right to request access to the personal data we hold about you.
  • Right to rectification: You have the right to request the correction of inaccurate or incomplete data.
  • Right to erasure: You have the right to request the deletion of your personal data, subject to certain conditions.
  • Right to restrict processing: You have the right to request the restriction of processing of your personal data under certain circumstances.
  • Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have it transferred to another controller.
  • Right to object: You have the right to object to the processing of your personal data based on legitimate interests, direct marketing, and processing for research or statistical purposes.
  • Right to withdraw consent: Where processing is based on consent, you have the right to withdraw your consent at any time.

Exercising Your Rights

To exercise any of your rights under the GDPR, please contact us at info@cango.lk. We will respond to your request in accordance with applicable data protection laws.

Contact Us

If you have any questions or concerns about this privacy policy, please contact us at:

Cango Micro Services (Pvt) Ltd
No 1, Mahindarama Road,
Ethul Kotte,
Sri Jayawardhanapura,
Sri Lanka
Email: info@cango.lk

Thank you for choosing CANGO. We are committed to protecting your privacy and ensuring a safe and enjoyable experience with our app.