Privacy Policy

Oppa Ride and Oppa Driver

Operated by Fastpoint Enterprises Inc.

Fastpoint Enterprises Inc. (“Fastpoint,” “Oppa Ride,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data.

Fastpoint is a Philippine corporation that operates Oppa Ride, including the Oppa Ride passenger application, Oppa Driver application, Oppa Ride website, and related transportation network and digital services (collectively, the “Services”).

This Privacy Policy explains the personal data we collect, how and why we process it, when it may be disclosed, how long it may be retained, and the rights and choices available to you.

We process personal data in accordance with Republic Act No. 10173, or the Data Privacy Act of 2012 (“DPA”), its Implementing Rules and Regulations, applicable issuances of the National Privacy Commission (“NPC”), and other applicable Philippine laws and regulations.

The personal data we collect depends on whether you use the Services as a passenger, driver, TNVS applicant, vehicle owner or operator, or other user.

1.1 Account and Profile Information

We may collect information necessary to create, authenticate, maintain, and administer your account, including:

• full name;
• mobile number;
• email address;
• profile photograph;
• date of birth, where required;
• account credentials and authentication information;
• emergency contact information, where provided;
• account preferences; and
• communications relating to your account.

1.2 Driver, Vehicle, and Regulatory Information

For drivers, TNVS applicants, vehicle owners or operators, we may collect information necessary to verify eligibility, comply with transportation and regulatory requirements, administer the platform, and promote passenger and driver safety.

This may include:

• driver’s license and related information;
• government-issued identification;
• driver photograph;
• vehicle registration and identifying information;
• vehicle make, model, color, and plate number;
• franchise, provisional authority, accreditation, permit, and related regulatory information;
• insurance information;
• driver application and onboarding documents;
• training and compliance information;
• account status;
• trip and service-performance information; and
• other information reasonably required by applicable law, regulation, government authorities, or participation in the Oppa Ride platform.

1.3 Location and Trip Information

Subject to applicable device permissions, we may collect precise or approximate location information from passenger and driver devices.

This may include:

• current device location;
• pickup and destination locations;
• driver location while online or available for bookings;
• location while traveling to a passenger;
• location during a trip;
• route and navigation information;
• trip distance and duration;
• booking, dispatch, arrival, pickup, and drop-off timestamps; and
• trip history.

We use location information to provide the core functions of a ride-hailing and transportation service, including locating available drivers, matching passengers and drivers, identifying pickup locations, dispatching vehicles, navigation and routing, estimating and calculating fares, determining trip distance and duration, supporting safety functions, resolving trip-related complaints, preventing or investigating fraud and misuse, and complying with lawful regulatory requirements.

For drivers, location information may need to be processed while the Oppa Driver App is operating in the background when the driver is online, available for bookings, proceeding to a passenger, or performing a trip, where necessary for dispatch, navigation, trip tracking, safety, and other core functions.

Users may manage applicable location permissions through their device settings. Some core functions of the Services may not operate correctly if required location permissions are disabled.

Oppa Ride does not sell precise location data.

1.4 Face Data and Identity Verification

When identity verification is enabled, the Oppa Driver App uses face data, with your in-app consent, to verify that the person using the driver account is the registered driver.

A liveness check is performed first. Images of your face and, on supported devices, depth data are processed on your device. Depth data is not stored or transmitted and is discarded when the liveness check is completed.

A verification selfie is then securely transmitted to our identity-verification technology service provider and compared with the reference photograph associated with your driver account using Amazon Web Services (AWS) Rekognition.

The verification selfie is deleted automatically upon completion or interruption of the verification session after capture. Your reference photograph is retained while your driver account remains active because it is required for subsequent identity-verification checks and is deleted within 30 days after your account is closed, except to the extent retention is required by applicable law or a lawful government order.

After each verification, only the verification result, such as pass or fail, and the date of verification are retained. These records do not contain the verification selfie or face data used to perform the comparison.

Face data is processed and shared only as necessary to perform identity verification. Our identity-verification technology provider represents that AWS processes the images transiently for the verification request, does not retain them after the request is completed, and does not use them to train or improve its services.

Face data is not used for advertising, marketing, profiling, or analytics and is never sold.

Identity verification is subject to a separate in-app disclosure and consent presented before face data is captured or transmitted.

1.5 Payment and Transaction Information

Depending on the payment method selected, we may process information relating to:

• fares and other charges;
• payment method;
• electronic payment transactions;
• refunds;
• driver earnings;
• commissions;
• incentives and adjustments;
• wallet or account balances, where applicable;
• settlement and disbursement information;
• transaction identifiers; and
• billing, invoice, receipt, and tax information.

Payments may be processed through banks, payment gateways, electronic-money issuers, QR payment providers, card networks, or other authorized payment service providers.

Where payment credentials are entered directly into a payment provider’s secure environment, Oppa Ride may receive only information such as a payment token, transaction reference, masked payment information, and transaction status rather than complete payment credentials.

1.6 Device, Application, and Technical Information

We may automatically receive technical information reasonably necessary to operate, secure, troubleshoot, and improve the Services, including:

• device type and model;
• operating system and version;
• application version;
• device and application identifiers;
• IP address;
• network information;
• language and regional settings;
• application activity;
• crash and diagnostic information;
• authentication and security events; and
• technical logs.

1.7 Communications, Customer Support, and Safety

When you communicate with Oppa Ride or use our support or safety functions, we may process the contents and details of those communications, including:

• customer-support requests;
• complaints and feedback;
• incident and accident reports;
• lost-item reports;
• safety reports;
• trip disputes;
• payment disputes; and
• communications relating to passengers, drivers, trips, or accounts.

1.8 Camera, Photographs, and Uploaded Documents

With appropriate permission or user action, the Apps may access the camera, photographs, or uploaded files for functions such as:

• profile photographs;
• driver identity verification;
• driver and vehicle documentation;
• regulatory documentation;
• incident documentation; and
• other functions where the purpose is presented to the user.

We do not access the camera or photo library for purposes unrelated to the feature for which access was requested.

We process personal data where there is an appropriate lawful basis under applicable law, including consent, performance of our agreement with you, compliance with legal obligations, protection of vital interests where applicable, or legitimate interests permitted by law.

We may use personal data to:

• create, authenticate, maintain, and secure accounts;
• provide ride-booking and transportation network services;
• match passengers with drivers and vehicles;
• dispatch drivers and facilitate navigation;
• provide pickup, trip, and destination functionality;
• calculate fares, fees, commissions, incentives, and payments;
• process transactions, settlements, refunds, and driver earnings;
• verify drivers, vehicles, and regulatory qualifications;
• conduct driver identity and liveness verification;
• provide customer support;
• communicate about bookings, trips, transactions, accounts, and safety;
• provide operational and service notifications;
• prevent, detect, and investigate fraud, account sharing, misuse, and security incidents;
• protect passengers, drivers, personnel, and the public;
• investigate accidents, complaints, disputes, insurance matters, and safety incidents;
• maintain, troubleshoot, secure, and improve the functionality and reliability of the Services;
• comply with transportation, tax, accounting, insurance, law-enforcement, judicial, and regulatory requirements;
• establish, exercise, or defend legal claims; and
• carry out other purposes disclosed to you at or before collection where required by law.

Where processing is based specifically on consent, you may withdraw that consent subject to applicable law and the consequences explained to you. Withdrawal does not affect processing lawfully performed before withdrawal.

We do not sell personal data.

We may share or disclose personal data only where reasonably necessary for the purposes described in this Privacy Policy.

3.1 Passengers and Drivers

Information necessary to arrange and complete a trip may be shared between passengers and drivers.

Depending on the circumstances, this may include names, profile photographs, vehicle information, pickup or destination information, location necessary for the trip, and communications facilitated through the platform.

3.2 Service Providers and Data Processors

We engage service providers to perform technical and operational functions on our behalf. These may include providers of:

• cloud infrastructure and hosting;
• mapping, geocoding, routing, and navigation;
• communications and notifications;
• application infrastructure;
• identity verification;
• payment processing;
• security and fraud prevention;
• customer support; and
• application diagnostics and technical services.

These providers may process personal data only to the extent reasonably necessary to provide the relevant services and subject to applicable contractual and data-protection requirements.

Identity-Verification Processors

For driver identity verification, Ondemand Apps OU provides technology and data-processing services for the Oppa Driver App and uses Amazon Web Services (AWS) Rekognition as a sub-processor for facial comparison.

These providers process face data on our behalf solely for the purpose of identity verification, subject to applicable contractual and data-protection requirements.

3.3 Payment and Financial Service Providers

Transaction information may be shared with payment processors, banks, card networks, electronic-money issuers, QR payment providers, and other financial institutions where necessary to process, settle, reconcile, refund, or investigate transactions.

3.4 Government, Regulatory, and Legal Authorities

We may disclose information where required or permitted by applicable law or valid legal process, including to transportation regulators, law-enforcement agencies, tax authorities, courts, and other competent government authorities.

These may include, where applicable, the Land Transportation Franchising and Regulatory Board (LTFRB), Department of Transportation (DOTr), Land Transportation Office (LTO), Bureau of Internal Revenue (BIR), and National Privacy Commission (NPC).

3.5 Safety, Fraud, Insurance, and Legal Matters

We may disclose information where reasonably necessary and legally permitted to protect the safety, rights, or property of passengers, drivers, Fastpoint, or other persons; investigate fraud or unlawful activity; respond to emergencies; process or investigate insurance matters; or establish, exercise, or defend legal claims.

3.6 Corporate Transactions

If Fastpoint undergoes a merger, acquisition, restructuring, financing, sale of assets, or similar corporate transaction, personal data may be disclosed where reasonably necessary, subject to applicable confidentiality and data-protection requirements.

Some technology and service providers used by Oppa Ride may process or store information using infrastructure located outside the Philippines.

Where personal data is transferred or processed internationally, we take reasonable and appropriate steps to ensure that it remains protected in accordance with applicable Philippine data-protection requirements and our contractual arrangements.

We retain personal data only for as long as reasonably necessary to fulfill the purposes for which it was collected or processed, including to provide the Services and satisfy legitimate operational, contractual, accounting, tax, insurance, regulatory, safety, fraud-prevention, dispute-resolution, and legal requirements.

Different categories of information may therefore have different retention periods.

When information is no longer reasonably necessary and there is no lawful basis requiring or permitting its continued retention, it will be securely deleted, anonymized, or otherwise disposed of in accordance with applicable requirements.

Specific retention and deletion practices for face data are described in Section 1.4.

Account deletion does not require us to erase information that applicable law requires or permits us to retain, including records reasonably necessary for tax, accounting, regulatory compliance, fraud prevention, safety investigations, disputes, or the establishment, exercise, or defense of legal claims.

Where information must be retained after account deletion, its further use will be limited to the applicable retention purpose.

Users may request deletion of their Oppa Ride or Oppa Driver account and associated personal data.

A readily accessible Delete Account or equivalent account-deletion function is available through the applicable App. Users may also request account and associated data deletion through our web-based account-deletion facility:

https://opparide.ph/account-deletion

Privacy-related deletion requests or questions may also be directed to privacyofficer@opparide.ph.

We may take reasonable steps to verify the identity of the person requesting deletion and to prevent unauthorized or fraudulent deletion.

Following a valid deletion request, we will delete or anonymize the account and associated personal data that we are not legally required or otherwise lawfully permitted to retain.

If particular information must be retained for legal, regulatory, tax, accounting, safety, fraud-prevention, dispute-resolution, or legal-claims purposes, it will be retained only for the applicable purpose and period and thereafter deleted or anonymized as appropriate.

Temporary suspension, deactivation, or logging out of an account is not account deletion.

We implement reasonable and appropriate organizational, physical, and technical measures designed to protect personal data against accidental or unlawful destruction, alteration, loss, misuse, unauthorized disclosure, access, or processing.

Depending on the nature of the information and processing, these measures may include:

• encryption of data in transit;
• access controls and authentication;
• role-based access restrictions;
• secure infrastructure;
• logging and monitoring;
• security testing and maintenance;
• personnel confidentiality requirements; and
• procedures for responding to security incidents and personal-data breaches.

No electronic transmission or storage system can be guaranteed to be completely secure. We nevertheless maintain safeguards appropriate to the nature of the personal data and the risks associated with its processing.

Subject to the Data Privacy Act, its Implementing Rules and Regulations, NPC issuances, and other applicable law, you may have the right to:

• be informed about the processing of your personal data;
• access personal data concerning you;
• object to certain processing;
• correct or rectify inaccurate or incomplete personal data;
• request erasure or blocking where legally applicable;
• withdraw consent where processing is based on consent;
• obtain data portability where applicable;
• seek damages where provided by law; and
• lodge a complaint with the National Privacy Commission.

These rights may be subject to lawful exceptions. For example, we may be required or permitted to retain particular records despite a deletion request where necessary for regulatory compliance or the establishment, exercise, or defense of legal claims.

To exercise your rights or raise a privacy concern, contact our Data Protection Officer / Privacy Office at privacyofficer@opparide.ph or (02) 7379 9175.

Depending on the features used and your device operating system, the Apps may request permission to access:

• precise or approximate location;
• background location, where required for driver functionality;
• camera;
• photographs or media;
• notifications; and
• other device capabilities necessary for a requested feature.

Permissions are requested through the applicable operating-system or in-app mechanism.

You may change certain permissions through your device settings. Disabling a permission may prevent features dependent upon that permission from functioning correctly.

Obtaining a device permission does not authorize us to use the resulting information for unrelated purposes.

Where permitted by law and, where required, with your consent, we may send information about Oppa Ride promotions, offers, features, and services.

You may opt out of promotional communications through the unsubscribe or preference controls provided.

Operational communications concerning bookings, trips, payments, safety, account security, regulatory matters, and service administration are not marketing communications and may continue where necessary to provide the Services or administer your account.

Face data and precise location data are not sold or used for advertising or marketing profiling.

The Oppa Driver App is not intended for use by minors as registered drivers.

Passenger account eligibility and transportation services involving minors are subject to applicable Oppa Ride terms, operational policies, and Philippine law.

We do not knowingly collect or process children’s personal data in a manner prohibited by applicable law. If we become aware that such information has been collected without an appropriate lawful basis or required authorization, we will take appropriate steps in accordance with applicable law.

We may update this Privacy Policy from time to time to reflect changes in the Services, technology, legal or regulatory requirements, or our data-processing practices.

The current version will display its effective or last-updated date.

Where required by applicable law, or where a change materially affects how we process personal data, we will provide appropriate notice and obtain consent where legally required.

The Personal Information Controller responsible for the Oppa Ride and Oppa Driver Services is:

FASTPOINT ENTERPRISES INC.
Operator of Oppa Ride

5/F CTTM Square
68 Timog Avenue
Quezon City, Philippines

Telephone: (02) 7379 9175
Website: https://opparide.ph

Data Protection Officer / Privacy Office

Email: privacyofficer@opparide.ph
Telephone: (02) 7379 9175

For requests concerning your personal data, exercise of data-subject rights, access, correction or deletion of personal data, withdrawal of consent, privacy complaints, or other data-protection concerns, please contact our Data Protection Officer / Privacy Office.

Customer Support

Email: support@opparide.ph
Telephone: (02) 7379 9175

For assistance concerning bookings, trips, payments, passenger or driver accounts, or other service-related matters, please contact Customer Support.

General Inquiries

Email: info@opparide.ph
Telephone: (02) 7379 9175

You may also lodge a complaint with the National Privacy Commission of the Philippines, subject to its applicable procedures.

Where consent is the appropriate legal basis for a particular processing activity, we will obtain consent in a manner appropriate to the nature of the personal data and processing involved.

Use of the Services is also subject to the applicable Oppa Ride Terms and Conditions.

Where separate or express consent is appropriate or required — including the processing and off-device transmission of face data for driver identity verification — the relevant disclosure and consent will be presented separately before that processing occurs.

Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal and may affect our ability to provide a feature or service that necessarily depends upon the relevant information.