Motar Privacy Policy

Operator: MJS Technologies, Omar Street, Rishkhor, Kabul, Afghanistan Contact: support@getmotar.com Applies to: the Motar rider app, the Motar driver app, and admin.getmotar.com Version 1 — effective on publication

MJS Technologies ("we") operates Motar, an app that connects riders with drivers. This policy explains what we hold about you, why, who else sees it, and how long we keep it. It describes what the system actually does.

Afghanistan has no general data protection law. We have written this policy to the standard we would have to meet if it did, because you should be able to find out what happens to your data regardless of what the law compels.

1. What we collect

Everyone with an account

Name, phone number, email address. Your phone number identifies your account and is verified by a code we send by SMS.
Preferred language and the province you selected.
Your device: a notification token, the device type and platform, and when the app last contacted us. This is how a ride notification reaches your phone.
Sign-in records: the IP address, the browser or app version, whether the attempt succeeded, and why it failed if it did. We keep these to detect someone trying to break into your account.

Riders

Trips: pickup and destination coordinates and addresses, the time, the fare offered and agreed, and the ride's outcome.
Messages exchanged with your driver during a ride.
Ratings you give and receive.
Payment records: amounts, method, and whether the fare was paid in cash or online. We do not store card numbers.
Identity verification, if you complete it: your name, date and place of birth, gender, nationality, e-Tazkira number, photographs of both sides of the document, and a selfie.

Drivers

Everything above, and:

Driving licence number and expiry date.
Photographs of your identity and licence documents, and your taxi permit where one applies.
An emergency contact you provide: their name, relationship to you, and phone number.
Your location while you are online. We record your position, heading and speed so riders near you can be offered your car and so a rider can watch you approach. We stop when you go offline. We do not track drivers who are not working.
Earnings and payouts, including the bank or wallet account you nominate.

What we do not collect

We do not collect your contacts, your photo library, your call or message history, or your browsing. We do not track riders' locations in the background — only the pickup and destination you enter for a trip.

2. Why we hold it

What	Why
Phone number, name	To identify your account and let a driver and rider recognise each other
Trip locations	To match you with a nearby driver, calculate the route and the fare, and support you if something goes wrong
Driver location while online	To offer nearby trips and show a rider where their car is
Identity documents	To verify that a driver is who they claim to be before they carry passengers, and to meet the checks expected of a transport platform
Payment and earnings records	To pay drivers, account for our commission, and meet our tax obligations
Messages and ratings	To resolve disputes and act on complaints about safety or conduct
Sign-in records	To detect and stop attacks on accounts

We do not sell your data. We do not use it for advertising. We do not profile you for anything other than matching you with a trip.

3. Who else sees it

Your driver or rider. When a trip is matched, each of you sees the other's first name, photograph where provided, rating, and — for the driver — the vehicle. Your phone number is shared so you can be reached about the trip. The driver sees the pickup and destination.

Fleet partners. If a driver works for a fleet company registered on Motar, that company sees that driver's trips, earnings and documents. It sees nothing about drivers outside its own fleet, and nothing about riders beyond what a trip record contains.

Service providers we use. Each receives only what it needs to do its job:

Ghoncha (sms.ghoncha.com) — receives your phone number and the verification code, in order to send it.
Google Maps Platform — receives trip coordinates in order to calculate routes and travel times. It does not receive your name or account.
Our email provider — receives your email address to deliver account mail.

Photographs, documents and all other records are stored on our own servers in our own infrastructure. They are not handed to a third-party storage service.

Authorities. We disclose data when we are legally required to, and where we believe in good faith that it is necessary to prevent serious harm to someone. We do not volunteer data otherwise.

4. How it is protected

Identity numbers are encrypted in our database, so a copy of the database alone does not reveal them.
Passwords are hashed, never stored in a readable form. Neither are the verification codes we send.
Repeated failed sign-ins lock an account for a period, which stops someone guessing a password.
Access is limited by role. Support staff, finance staff and fleet partners each see only what their work requires, and administrative actions are recorded in an audit log.
Traffic is encrypted between the apps and our servers.

No system is perfectly secure, and we will not claim otherwise. If a breach affects you, we will tell you what happened and what we are doing about it.

5. How long we keep it

Sign-in records: 90 days.
Your account and profile: while your account exists.
Identity documents: while your account exists, and afterwards only where the law requires us to keep them.
Trip and payment records: we keep these after an account closes, because we are required to account for money that changed hands. Personal details are removed from them, leaving the financial record.
Verification codes: minutes. They expire and are then useless.

When you ask us to delete your account, we remove your personal details and your documents. We keep the financial record of trips already taken, stripped of what identifies you.

6. Your choices

See what we hold. Ask us and we will tell you.
Correct it. Most details you can change in the app; write to us for the rest.
Delete your account. Ask us and we will do it, subject to section 5.
Turn off notifications in your phone's settings. The app still works.
Stop location sharing by going offline (drivers) or by not requesting a trip (riders). A driver cannot receive trips while offline, and a rider cannot be matched without a pickup point — location is what the service is made of.

Write to support@getmotar.com for any of these. We answer within 30 days.

7. Children

Motar is not for people under 18. We do not knowingly hold data about children. If you believe a child has an account, tell us and we will remove it.

8. Changes

If we change this policy in a way that affects you, we will tell you in the app and ask you to read the new version before you continue. Old versions remain available on request.

9. Contact

MJS Technologies Omar Street, Rishkhor, Kabul, Afghanistan support@getmotar.com