Wheee Driver — Privacy Policy

Effective date: 31 May 2026 Last updated: 31 May 2026

This policy explains what information the Wheee Driver app collects, why we collect it, how we use it, who we share it with, and the choices you have. We've written it in plain English. If anything's unclear, email us at contact@automateworkflow.co.nz.

This policy applies to the Wheee Driver Android app (com.automateworkflow.wheeedriver) operated by Automate Workflow ("we", "us"). It does NOT apply to the separate Wheee passenger app, which has its own policy.

1. Who we are

Automate Workflow, a sole trader based in New Zealand. We operate the Wheee ride-hailing service. Wheee Driver is the app drivers use to receive ride requests, navigate to riders, and get paid. The companion passenger app, Wheee, is a separate product with its own privacy policy.

2. What we collect

We collect only what we need to run the service. There are five categories.

2.1 Account & identity

Name, email address, phone number — required to create an account
Profile photo (optional)
Driver's licence number, vehicle registration, insurance certificate, and supporting documents — required for legal compliance and rider safety
Bank account details — required to pay you for completed trips

2.2 Location

Precise GPS location (latitude, longitude, accuracy, speed, heading)
We collect it while you are online in the app (i.e. you've toggled "go online" to receive ride requests). Going offline stops collection immediately.
We collect it in the background — meaning while you're using another app, while your screen is off, or while the phone is locked. This is necessary so we can match you to nearby ride requests when you're not actively looking at the screen. Without background location, the app would only work while it's the foreground app.
We collect a continuous stream (one point every ~30 seconds) for the duration of each trip, plus while you are online and available.

2.3 Trip data

Pickup and drop-off locations, route taken, time, distance, fare amount, rider rating
Earnings and payout records

2.4 Device & app data

Firebase Cloud Messaging push token — required so we can notify you of ride offers
App version, OS version, device model — used for crash diagnostics and troubleshooting
Crash reports and error logs (via Firebase Crashlytics for native crashes; Sentry for JavaScript errors, when enabled) — used to fix bugs

2.5 Communications

Messages you exchange with riders during a trip
Messages you exchange with our support team

3. How we use what we collect

What	Used for
Account & identity	Creating and authenticating your account; legal verification of your right to drive; rider safety
Location	Matching you to ride requests near you; navigation; calculating fares accurately; resolving disputes about trip routes
Trip data	Paying you; producing your earnings statements; rider receipts; tax records; dispute resolution
Device & app data	Sending you ride offer notifications; diagnosing crashes; deciding when to prompt for app updates
Communications	Letting you communicate with riders; helping our support team assist you

We do not use your location, trip data, or messages for advertising. We don't sell your data.

4. How long we keep it

Category	Retention
Per-trip GPS history	90 days after the trip ends, then deleted. This window is for dispute resolution.
Driver heartbeat location (while online but no active trip)	30 days, then deleted automatically
Account info (name, email, documents)	For the life of your account. We delete it when you close your account, except where we must keep it longer for legal reasons.
Trip records and earnings	7 years — required by New Zealand tax law for financial record-keeping
Bank account / payout details	Same as trip records (7 years), or until you close your account, whichever is longer
Crash and error reports	90 days

When you close your account, we delete everything we're not legally required to retain. Tax-mandated records are kept in cold storage and accessed only when required by the IRD.

5. Who we share it with

We do not sell or rent your information to anyone, ever.

We share data only with the following parties, only for the purposes listed:

Recipient	What	Why
Riders you're matched with	Your first name, profile photo, vehicle details, real-time location while en route to and during the trip	They need to find you, recognise you, and confirm the trip is in progress
Google Maps (via our backend proxy)	Trip origin and destination coordinates only — never the full route, never your name or device ID	Required to compute the recommended driving route. We send these via our own backend so Google does not see your IP address or any identifier.
Firebase Cloud Messaging (Google)	Your FCM push token	Required to deliver push notifications. Google's processing is governed by their own terms.
Firebase Crashlytics (Google)	Anonymised crash stack traces (no personal info)	Bug diagnostics
Sentry (Functional Software, Inc.) — when enabled	Anonymised JavaScript error stack traces (no personal info)	Bug diagnostics
Banking / payment partners	Your bank account details and earnings amounts	To pay you
Tax authorities (New Zealand IRD)	Earnings records, on request	Legal compliance
Law enforcement	Whatever is required by a valid legal order	Legal compliance only — never voluntarily

That's the complete list. There are no advertising networks, no analytics resellers, no data brokers.

6. Your rights

You can, at any time:

See your data: email us and we'll send you a copy of everything we hold about you, in machine-readable format
Correct your data: edit account fields in Settings, or email us for anything you can't edit yourself
Delete your account and data: in Settings → Account → Delete Account. Tax-mandated records (§4) cannot be deleted; everything else will be wiped within 30 days
Withdraw location consent: revoke location permission in your phone's Settings app. The driver app will only function for non-trip tasks (viewing earnings, messaging support) after that — you cannot receive ride offers without location access
Ask questions: email contact@automateworkflow.co.nz

We respond to data requests within 7 working days.

7. Security

All traffic between the app and our servers is encrypted with TLS. The app pins our certificate authority's root keys and refuses to communicate with any other certificate — this protects against attackers intercepting traffic on hostile WiFi networks.
Your authentication token is stored in your device's hardware-backed secure storage (Android Keystore), not as plain text.
Our backend stores passwords using industry-standard hashing (bcrypt). We never see your password.
We follow security best practices and run periodic security audits. The most recent audit (May 2026) is summarised internally; ask if you want a redacted version.

No system is perfectly secure. If we ever experience a breach affecting your data, we will notify you within 72 hours of discovery.

8. Children

Wheee Driver is for adults (18+) only. We do not knowingly accept registrations from anyone under 18. If you believe a minor has registered, contact us and we will close the account immediately.

9. Where your data lives

Our servers are hosted in Auckland, New Zealand. Some third-party services (Firebase, Sentry) process data in the United States and other regions. By using the app you consent to this transfer; we have contractual protections in place with those providers.

10. Changes to this policy

If we change this policy in a way that materially affects you, we will: - Update the "Last updated" date at the top - Show you an in-app notice on next launch - Email you a summary of what changed

You can always read the current version at this URL. We keep older versions on request.

11. Contact

Privacy questions: contact@automateworkflow.co.nz Postal: Automate Workflow, [postal address — fill in before publishing]