Privacy Policy

Who we are

Hatud runs tricycle rides, food and shop deliveries and Express parcels in Kidapawan City, and decides how the personal data in this notice is used. Write to support@hatud.ph about anything here, including to reach our Data Protection Officer.

What we collect

• Everyone: your name, email address, mobile number, password (stored only as a secure hash), the basic profile Google, Facebook or Apple shares if you sign in with them, and sign-in records (device and network address).
• Passengers and customers: the places you search and choose, your rides (route, times, fare, riders and discount categories, the cash your driver recorded, your rating), your orders (shop, items, delivery place and landmark, notes), the Express parcels you send (what’s inside, pickup and drop-off, and the recipient’s name and number you give us), your chats about an order or parcel, support tickets and safety reports.
• If you choose to verify: your date of birth and two live photos of your face, and, if you add one, a government ID (its type, last 4 digits and a photo).
• Drivers: your legal name, photo, license number, tricycle, body and plate numbers, TODA, and your credentials (license, registration, franchise or MTOP, clearance, insurance) with their numbers, issuers and validity; your location while you’re online or on a job, and the GPS route of each ride; your earnings, commission, payments to Hatud and payout account.
• Shops: your business details and permit, your storefront and menu, your orders, commission, payments and payout account.
• Hatud staff: your roles and everything you do in the workspace, with the purpose you give before opening a private record.
• Online payments: when you pay by GCash or Maya, the payment provider handles your wallet. Hatud receives the payment’s reference, amount and status, never your wallet PIN or password.

Why we use it

• To match you with a nearby driver or a shop, show the pickup and price each job, and run the ride, delivery or parcel (our agreement with you).
• To keep riders, drivers and shops safe: pickup and handoff codes, trip sharing, SOS alerts, verification, and looking into incidents and complaints.
• To record fares and fees, settle commission, pay out what Hatud collected for drivers and shops, refund payments, and keep the accounts the law requires.
• To check that drivers and shops are who they say and are allowed to operate, and to prevent fraud and misuse.
• To answer support requests, and to meet legal obligations and lawful requests.

License and government ID numbers are sensitive personal information under the law. We use them only to check drivers and verified passengers, as the law and your consent allow. Verifying your face is your choice; you can withdraw it for the future by closing your account or asking support.

Who sees what

• Your passenger sees the driver’s first name, Hatud ID (DRV-…), photo, body and plate numbers, tricycle and franchise or MTOP number, and which credentials Hatud verified and until when. Never the documents themselves or the license number. During the trip they also see the driver’s live location and can call their number.
• Your driver sees your Hatud ID (PAX-…), and whether you’re verified, before accepting. During the trip they see your first name, pickup, destination and riders, and can call your number.
• A shop sees your first name and Hatud ID on your order, and your driver’s first name, Hatud ID, body and plate numbers.
• A driver carrying your parcel sees your first name and Hatud ID, your number until the parcel is in hand, and the recipient’s name and number while the job is on.
• Order and parcel chats go through Hatud: phone numbers are never shown in them.
• People you share a trip with see its status, the tricycle and the driver’s location, never your contact details. The link stops showing anything 2 hours after the trip.
• Hatud staff see what they need to run the service. Documents, receipts, routes and verification photos open only after the staff member writes why, and that is kept in the audit trail. Nobody decides on their own records.
• Service providers who host the app, send email, look up places and routes and process online payments, under agreements to protect the data.
• Authorities, only when the law requires it, such as a court order or a preservation order under the Cybercrime Prevention Act.

Hatud does not sell personal data.

Passenger verification

Verifying is never required to use Hatud. With two live photos and your date of birth (no ID needed), you can book rides at night, place larger cash orders and send Express parcels, and drivers see that you’re verified. Adding a government ID is optional. Hatud staff review the photos.

Your face photos are kept while your account is open and for 1 year after you close it, so we can identify you in a safety report; a check that wasn’t approved keeps its photos 90 days. An ID photo is removed 90 days after it is reviewed; we keep only the ID type, its last 4 digits and the result.

How long we keep it

The law sets no single number of years. It lets us keep personal data as long as its purpose needs, to establish or defend legal claims, or as another law requires, and the National Privacy Commission has said it may not be kept indefinitely, even for safety. So each kind of record below is kept as long as its purpose and the law allow, for the safety and fairness of everyone on Hatud, and no longer:

Trips, orders and parcelsWho booked and who drove, pickup and drop-off, times, fares, items and what was paid.

10 years from the day the job ended. Pickup and drop-off are reduced to the area (about 1 km), and names are separated from the record.Each job is a written agreement on Hatud: actions on written contracts prescribe in 10 years (Civil Code Art. 1144). Covers the 5 years tax records must be kept (NIRC Sec. 235, as amended by RA 11976).

Trip routes, in fullEvery GPS point a driver's phone sent during a ride.

2 years from the day the ride ended. Thinned to one point a minute, enough to show the route taken.Safety reviews, complaints and disputes are almost always raised within this time; more detail than that isn't needed for the route.

Trip routes, thinnedOne GPS point a minute of each ride's route.

5 years from the day the ride ended. Removed. The trip record stays.Claims for injury or damage prescribe in 4 years (Civil Code Art. 1146), other actions in 5 (Art. 1149).

Order and parcel chatsMessages between customers, shops and drivers about one order or parcel.

3 years from the day the order or parcel ended. Removed.Kept for complaints, refunds and safety reports about the order; most are settled long before.

Support ticketsTickets, emails and attachments sent to Hatud support.

5 years from the day the ticket closed. Removed.Complaints can become claims: 4 years for injury or damage, 5 for other actions (Civil Code Arts. 1146, 1149).

Safety recordsSOS alerts, incident reports, cases, evidence, findings and appeals.

10 years from the day the case or incident closed. Removed, unless a legal hold keeps them.Kept for the people involved and for any later criminal or civil case; serious offences can take a decade or more to prescribe.

Money recordsCommission, payments, payouts, online payments, refunds and receipts.

10 years from the day the entry was posted. Removed.Tax records must be kept 5 years (NIRC Sec. 235, as amended by RA 11976); written agreements can be claimed for 10 (Civil Code Art. 1144).

Audit trailWhat staff did, and the purpose they gave before opening private records.

10 years from the day it was recorded. Removed.Accountability for every staff decision, for as long as the records it touched are kept.

Driver documentsPhotos of licenses, OR/CR, franchises, clearances and insurance.

5 years from the day a newer one was verified, or the driver left Hatud. The photo is removed; the record of what was verified and until when stays with the trips.Identifies who drove if a complaint or claim comes later: 4 to 5 years (Civil Code Arts. 1146, 1149).

Rejected applicationsDocuments sent with a driver or shop application that wasn't approved.

1 year from the day it was rejected. The documents are removed.Long enough to spot the same documents sent again; not needed after that.

Passenger face photosThe two live photos from a passenger's face check.

1 year from the day the account closed (90 days after a check that wasn't approved). Removed. The result (verified, and when) stays.Lets Hatud identify a passenger in a safety report while they use Hatud. The NPC has stopped selfie checks kept too long without a clear purpose, so they go once that purpose ends.

Government ID photosA photo of the ID a passenger chose to add.

90 days from the day it was reviewed. Removed. Hatud keeps the ID type, the last 4 digits and the result.Only needed to make the decision; an ID photo is the most sensitive thing a passenger shares.

Trip share linksThe private link a rider shares to follow a trip.

30 days from the day the trip ended. The link stops existing.Only useful during the trip; the link already stops showing anything 2 hours after it.

Fare checksFares a passenger checked but didn't book.

90 days from the day it was checked. Removed.Only used to answer questions about a fare shown.

Copies of emails sentHatud's copy of account emails (confirmations, password resets).

90 days from the day it was sent. Removed.Only kept to look into an email that didn't arrive.

Sign-in sessionsThe device and network address of each sign-in.

6 months from the day the session ended. Removed.Traffic data is preserved for at least 6 months under the Cybercrime Prevention Act (RA 10175, Sec. 13).

Payment provider messagesWhat the payment provider sent about each online payment.

1 year from the day it was received. Removed. The payment and its refunds stay with the money records.Kept to reconcile payments with the provider; the payment record itself is kept with the money records.

Legal holds. When a claim, a complaint or an investigation is open, such as a police request or a court case, Hatud keeps the records involved until it ends, then the schedule applies again. A hold on a person keeps every ride, order, parcel and ticket of theirs, their documents and verification photos, and their sign-in records; a hold on one ride, order or parcel keeps that job’s records.

The schedule rests on:

• Data Privacy Act of 2012 (RA 10173), Sec. 11(e), and its IRR, Sec. 19(d): Keep personal data only as long as its purpose, a legal claim or another law needs.
• National Privacy Commission, In re Grab Philippines (2020 and 2023): Selfie checks and recordings need a clear purpose and period; indefinite retention isn't allowed, even for safety.
• Civil Code, Arts. 1144, 1146 and 1149: Written contracts: 10 years. Injury or damage: 4 years. Other actions: 5 years.
• National Internal Revenue Code, Sec. 235, as amended by RA 11976: Books and accounting records: 5 years.
• Cybercrime Prevention Act (RA 10175), Sec. 13: Traffic data: at least 6 months.

Your rights

Under the Data Privacy Act you have the right to:

• Be told how your data is used (this notice), and to ask us about it.
• Get a copy of your data. Download it any time from your account (Your data), in a file you can take elsewhere.
• Correct it. You can change your name and number in your account; ask support for anything else.
• Object to a use of your data, and withdraw a consent you gave, such as for verification photos.
• Have it erased or blocked. Closing your account (Your data, in your account) stops sign-in at once; what the law needs us to keep follows the schedule above, and we’ll tell you if something has to stay.
• Be compensated for damage from misuse of your data, and complain to the National Privacy Commission (privacy.gov.ph).

To use any of these, go to your account or write to support@hatud.ph.

Keeping it safe

Data travels over encrypted connections, passwords are hashed, documents and verification photos are visible only to their owner and the Hatud staff who need them (a driver’s photo is also shown to their passengers), and every private read by staff is recorded with its purpose. No system is perfectly secure; if a breach affects you, we’ll tell you and the National Privacy Commission as the law requires.

Changes to this notice

We’ll post changes here with a new date, and tell you in the app before a significant change applies.