Privacy Policy

This policy explains how HABB Global Pvt Ltd ("we", "24hours.lk") handles personal information across the 24hours.lk website and mobile app, 24RideLink and 24Fix. All of them use one 24hours.lk account, so this policy applies to all of them.

(a) Account - your name, email address, phone number, profile photo and, if you choose, your date of birth; (b) Sign-in - your password (kept only as a secure hash), or the details Google, Apple or Facebook give us if you sign in with them, and records of your sign-in sessions; (c) Driver profile (24RideLink) - your contact details, driving licence and vehicle details and documents, and the vehicles and trips you publish; (d) Worker profile (24Fix) - your services, prices, working hours, languages, towns, work photos, and whether you choose to share your phone number; (e) Requests and bookings - seat requests, ride requests, job requests with any photos you attach, quotes and reviews; (f) Location - only when you use maps or ride features; (g) Device and usage - device type, operating system and app version, a push notification token, and analytics about how the platform is used; (h) Communications - messages you send to our support team.

You sign in to 24RideLink and 24Fix with your 24hours.lk account (using the OpenID Connect standard), so you do not create a separate password for them. The app receives a sign-in token and basic account details such as your name, email and whether your phone is verified. To use the driver or worker dashboard on the website, you open it from your account; it starts a separate dashboard session that ends automatically after 6 hours. Signing out or changing your password also ends these sessions.

(a) To provide the services - accounts, rides, jobs, bookings, quotes and reviews; (b) To verify identities and phone numbers and keep accounts secure, including two-step verification; (c) To review driver and worker applications, and new services or photos, before they appear publicly; (d) To send service messages by email, SMS and push notification, such as seat requests, booking updates and security alerts, and a birthday greeting if you add your date of birth; (e) To prevent fraud and misuse and to enforce our terms; (f) To improve the platform and measure usage; (g) To meet legal obligations.

Workers: your name, profile photo, services, prices, towns, languages, hours and reviews are public on 24Fix. Your phone number is shown only if you turn on phone sharing, and you can turn it off at any time. Drivers: passengers can see your name, vehicle and trip details. Passengers: when you request a seat, the driver sees your name and the contact phone number you give. Customers: when you request a job, that worker sees the job details and photos you send. Your reviews show your name. We never show your email address or password to other users.

If you allow notifications, we store a device token for each app you sign in on, with the app name, platform and version, so we can send you updates such as seat requests and booking changes. Notifications are delivered through Google Firebase Cloud Messaging, and Apple's notification service on iPhone. You can turn notifications off in your phone settings at any time, and signing out stops them for that account.

We do not sell your personal data. We share it only with: (a) the other people in a ride or job, as described above; (b) service providers that help us run the platform - cloud hosting and storage, email and SMS delivery, Google Firebase for notifications, and analytics; (c) Google, Apple or Facebook, if you choose to sign in with them; (d) authorities, when the law requires it or to protect safety and our rights. These providers may only use your data to provide their service to us.

We use HTTPS, hashed passwords, short-lived access tokens, optional two-step verification, session controls and restricted staff access. No system is completely secure, so please use a strong password, keep your phone number verified and sign out on shared devices.

We keep your information while your account is active. You can delete your account from Edit profile in the app or on the website; we then remove or anonymise your personal data, except records we must keep for legal, safety or dispute reasons (for example transaction records for up to 7 years).

You can view and edit your name, date of birth, email and phone number, change your profile photo, manage two-step verification and your sign-in sessions, control phone sharing on your worker profile, turn off notifications and unsubscribe from promotional messages. You can also ask us for a copy of your data, to correct it, to delete it, or to object to some processing, by writing to [email protected].

Our platform links to external services. We are not responsible for the privacy practices of those sites, and their own policies apply when you use them. We encourage you to read them.

We may update this Privacy Policy. When we make material changes we will update the date at the top of this page and, where needed, tell you in the app or by email. Continued use after a change means you accept the updated policy. Questions? Contact us at [email protected].