NumKhor Privacy Policy

NumKhor (“the app,” “we,” “us”) is a taxi-matching app for Bhutan. This policy explains what we collect, why, and how you can control or delete it. NumKhor is operated by Kinzang Dorji, Bhutan — contact: numkhorlo@gmail.com.

What we collect

Account information — When you sign in with Google or Apple, we receive your name and email address from that provider. We do not support anonymous or guest accounts: a persistent identity is required so that warnings and bans can be attached to an account, protecting other users.

Location — With your permission, we collect your device's precise location while you're actively using the app to request or fulfill a ride (foreground only — we do not track your location when the app is closed or backgrounded). A passenger's pickup location is shared with nearby drivers so they can respond; a driver's live location is shared with a passenger whose ride they've responded to.

Camera and photos (drivers only) — To verify you're eligible to drive commercially in Bhutan, we require a photo of your driving license, which is manually reviewed. You can either take this photo with your device camera from within the app or choose an existing photo from your gallery; camera access is only used for this and is requested at the moment you choose to take a photo. If you subscribe after your free trial period, you may also upload a payment screenshot for manual verification.

Driver and vehicle details (drivers only) — License number, CID (Citizenship Identity Card) number, vehicle make/model/plate. These are read from your license photo and entered by our admin during manual review — you don't need to type them yourself.

Ride activity — Ride requests, pickup locations/addresses, timestamps, and outcomes (completed, cancelled, expired). If a driver reports that a passenger wasn't at the pickup location, that's recorded against the passenger's account; repeated reports may lead to a warning or ban.

Payment information (drivers only, after the free trial) — A bank transfer screenshot and optional bank journal number, submitted for manual verification against our bank statement. We do not collect card numbers or bank credentials directly — payment happens through your own banking app, and you only send us proof of that transfer.

Crash and diagnostic data — If enabled, we use Sentry to collect crash reports and basic device/app diagnostics when something goes wrong, so we can fix it. This does not include your ride content or documents.

Why we collect it

• To match passengers with nearby, verified drivers.
• To verify that drivers hold a valid Bhutanese driving license (commercial driving in Bhutan requires citizenship in practice, which the license/CID verification confirms).
• To prevent abuse — no-show reports, warnings, and bans exist to protect other users, not to build a public reputation score (report counts are never shown to other users).
• To verify subscription payments once the free trial period ends.
• To keep the app working reliably (crash reporting).

Who can see your data

• Nearby drivers/passengers see only what's needed to complete a ride: pickup location, live location during an active ride, vehicle details (for drivers), and name.
• NumKhor's admin (the app operator) can see driver verification documents, no-show reports, warnings/bans, and subscription receipts, for manual review purposes only.
• Service providers: Supabase (our backend host — database, authentication, file storage) and, for driver license photos, Google Cloud Vision (best-effort OCR text suggestion only, not an automatic decision — a human always reviews the actual photo). Sentry, if crash reporting is enabled.
• We do not sell your data, and we do not use it for advertising.

How long we keep it

Your data is retained while your account is active. If you delete your account (see below), your profile, ride history, and uploaded documents are permanently deleted, aside from anything we're required to retain for fraud prevention or legal compliance.

Your rights

• Access/correction: contact us at numkhorlo@gmail.com if you need to see or correct what we hold about you.
• Deletion: you can permanently delete your account and all associated data directly from the app — open the Profile tab and tap Delete account. This is immediate and cannot be undone. See our account deletion page for details, or if you're unable to access the app, email numkhorlo@gmail.com and we'll delete it manually.

Children

NumKhor is not intended for use by anyone under 18.

Security

Your session is stored using your device's secure keychain (iOS Keychain / Android Keystore), not plain storage. Driver documents and payment screenshots are stored in access-controlled storage, viewable only by you and admin reviewers via time-limited signed links — never publicly accessible.

Changes to this policy

We'll update the “Last updated” date above when this policy changes. Continued use of the app after a change means you accept the update.

Contact

Questions about this policy or your data: numkhorlo@gmail.com