PinkDrive Privacy Policy

Version 2.0 — Effective and Last Updated: 29 August 2026

Introduction

PinkDrive respects your privacy. This Policy explains how we collect, use, store, share, transfer and protect personal information when you use our website, mobile application and technology platform connecting passengers with independent drivers.

By using PinkDrive, you acknowledge that you have read and understood this Policy. Where consent is legally required, including for certain identity, biometric or international-transfer processing, PinkDrive requests that consent separately and explicitly.

1. Who We Are and Data Controller

PinkDrive is owned and operated by Kyrenia Global Holdings LLC, a Virginia limited liability company. Kyrenia Global Holdings LLC is the data controller for the PinkDrive technology platform. Controller address: 692 Poquoson Avenue, Poquoson, Virginia 23662, United States.

PinkDrive provides a technology marketplace through which passengers can connect with independent drivers and request rides. PinkDrive does not itself provide passenger transportation services; independent drivers provide those services subject to applicable law and PinkDrive platform requirements.

2. Information We Collect

Account and Contact Information

We may collect your full name, date of birth where required, gender where relevant to the service, email address, telephone number, postal address where provided or required, and emergency contact details where provided.

Driver and Vehicle Information

Drivers may be required to provide driver licence or professional permit information, vehicle identification or registration information, insurance documentation and a profile photograph for eligibility, safety and account verification.

Driver Identity and Biometric Verification

For driver identity and safety verification, PinkDrive uses Didit Identity, Inc. (“Didit”), an identity-verification provider acting on PinkDrive’s behalf. A driver may be asked to provide a government-issued identity document and a selfie or facial image. Didit may process identity-document information and biometric data generated for facial matching and liveness verification to confirm identity and help prevent fraud.

This driver verification is separate from ordinary passenger registration. PinkDrive does not require passengers to provide a verification selfie as part of standard passenger registration.

Location, Trip and Technical Information

We may collect pickup and destination locations, GPS location during active trips, driver location while available for requests, trip records, device type, operating system, browser or app version, IP address, device identifiers, crash reports, diagnostics and security or fraud-prevention information.

Payments and Transactions

For the current PinkDrive service in Morocco, passenger rides are paid in cash and PinkDrive does not collect passenger payment-card details for those rides. PinkDrive may maintain fare, transaction, commission and driver-account records necessary to operate the platform. Where a third-party provider handles driver-related payments or payouts, PinkDrive does not store complete card details processed by that provider.

3. How We Use Personal Information

We use personal information to create and manage accounts; verify driver identity and eligibility; connect passengers with independent drivers; manage ride requests, location, routing and trips; maintain transaction and driver-account records; provide support and service communications; detect fraud, misuse and safety threats; protect users and the platform; improve reliability and performance; and comply with applicable legal and regulatory obligations.

4. Legal Basis and Consent

PinkDrive processes personal information as permitted by applicable law, including where necessary to provide the platform or perform contractual obligations, comply with legal obligations, protect users and platform security, prevent fraud, pursue legitimate interests that do not override individual rights, or where consent has been provided.

Where explicit consent is required for driver identity or biometric verification or an international transfer, relevant information is presented before verification and consent is requested separately. Where applicable, consent may be withdrawn without affecting processing lawfully carried out before withdrawal; withdrawal may prevent completion of verification or use of features requiring verified identity.

5. Sharing Personal Information

PinkDrive does not sell personal information. We may disclose only information reasonably necessary to providers supporting identity verification, mapping and navigation, cloud infrastructure, communications, payments or payouts, analytics, security and customer support. Information may also be disclosed to professional advisers, insurers or competent authorities where permitted or required by law.

6. Didit Identity Verification

Didit processes driver verification information on PinkDrive’s behalf for identity confirmation, document verification, facial matching, liveness verification and fraud prevention. This may include identity-document information and images, selfie or facial images, biometric verification data and technical information associated with the verification session. PinkDrive receives verification results and information necessary to support platform eligibility and safety decisions.

7. International Data Transfers

Kyrenia Global Holdings LLC is based in the United States and PinkDrive uses service providers that may process personal information outside Morocco. Driver identity-verification information submitted to Didit may therefore be transferred or processed outside Morocco through infrastructure and authorised providers used for the verification service.

PinkDrive applies contractual, technical and organisational safeguards to international processing and transfers and seeks or obtains regulatory authorisation where required by applicable Moroccan law. Where consent is the applicable basis, explicit informed consent is requested before the relevant verification or transfer.

8. Data Retention

PinkDrive retains personal information only as long as necessary for the purpose for which it was collected and for legitimate operational, safety, legal, regulatory, dispute-resolution and fraud-prevention requirements. Different categories may have different retention periods. Identity-verification information processed by Didit is subject to retention and deletion controls applicable to the verification service and PinkDrive’s instructions. PinkDrive seeks to minimise retention of identity and biometric verification information and will update this Policy when a specific verification-data retention period becomes applicable to the PinkDrive service.

9. Information Security

PinkDrive uses reasonable administrative, technical and organisational safeguards designed to protect personal information against unauthorised access, disclosure, alteration, misuse, loss or destruction. Providers handling sensitive information are expected to maintain appropriate security and confidentiality. No internet-based service can guarantee absolute security.

10. Your Privacy Rights

Subject to applicable law, you may request access to personal information, correction of inaccurate or incomplete information, deletion where applicable, or object to certain processing. You may withdraw consent where processing is based on consent, subject to applicable legal limitations.

For users in Morocco, PinkDrive processes personal data subject to applicable Moroccan data-protection requirements, including Law No. 09-08. Requests concerning rights of access, rectification or opposition may be submitted to the PinkDrive data-protection contact below. The competent Moroccan authority is the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).

11. Account Deletion

Users may request deletion of their PinkDrive account. After verification, PinkDrive will delete or anonymise information no longer required, subject to information that must or may lawfully be retained for legal obligations, disputes, fraud prevention, enforcement of agreements or safety. Account deletion may permanently remove access to trip history and other account information.

12. Cookies and Similar Technologies

PinkDrive may use cookies and similar technologies to maintain secure sessions, remember preferences, understand service performance, improve user experience and support security and fraud prevention. Browser settings may allow you to control cookies, although disabling them may affect functionality.

13. Children’s Privacy

PinkDrive services are intended for adults. Passenger accounts may only be created by persons meeting applicable minimum-age requirements. PinkDrive does not knowingly collect personal information directly from children contrary to applicable law and will take reasonable steps to remove information collected inappropriately.

14. Third-Party Services

PinkDrive may integrate or rely on third-party mapping, navigation, communications, identity verification, hosting, payment and analytics services. Providers acting on PinkDrive’s behalf are required or expected to process information only as necessary for their services and maintain appropriate confidentiality and security. Independent third-party services may have their own privacy policies.

15. Changes to This Privacy Policy

PinkDrive may update this Policy for changes in law, regulation, technology, providers or services. The current version will be published on the PinkDrive website and material changes may be communicated through the app, website or other appropriate means. Where a change requires new consent under applicable law, PinkDrive will request that consent rather than relying solely on continued use.

16. Contact Us

For privacy questions or to exercise your rights: Kyrenia Global Holdings LLC / PinkDrive – Data Protection Service / CNDP Contact. Email: privacy@pinkdrive.global. Website: www.pinkdrive.global.

Morocco representative / CNDP contact: Julia Bellucci, Tarik al Kheir 5A, Bloc 4, Apt 111, Hay Esalam, Agadir 80070, Morocco.

Data Controller: Kyrenia Global Holdings LLC, 692 Poquoson Avenue, Poquoson, Virginia 23662, United States.