Privacy Policy — FastLine

This policy applies to the "FastLine" (rider) and "FastLine Captain" (driver) apps, the FastLine website and its admin panel. It explains what data we collect, why, how we protect it and your rights, in line with Jordan's Personal Data Protection Law No. 24 of 2023.

1. Who we are

Service operator: FastLine. Privacy contact: support@fastlinejo.com or ‎+962796845819‎.

2. Data we collect

• Account data: name, phone number, email (optional), gender (used only for optional women-rider preferences), preferred language, and your password stored as a one-way hash.
• Phone verification: we confirm that you own your phone number with a one-time code sent by SMS through Google Firebase (phone authentication); your number is shared with Google for this purpose only.
• Location data:
• Riders: your location only while you use the app, to set pickup/drop-off and track your trip. The rider app does not track you in the background.
• Captains: your location while you are "Online" and during trips (including when the app is in the background, with a persistent visible notification), to show nearby requests, share your live position with the rider, and compute distance and fares. Collection stops when you go offline.
• Trip and order data: pickup and drop-off points, route and distance, times, fare, cancellations and fines, orders/parcels and their recipients, and car-with-driver bookings including odometer readings.
• Captain verification (KYC): national ID and driving licence numbers; photos of the national ID, driving licence, vehicle licence, public transport licence, insurance policy and non-criminal record certificate; a selfie that our staff compare with the ID by human review (no automated face recognition); vehicle photos, vehicle details and plate number; and home location for intercity trips — used only to verify eligibility and safety.
• Parcel photos: captains photograph each parcel when collecting it (and may photograph it at delivery) as proof of its condition and handover; the photos are kept with the order and reviewed by our support team only in case of a complaint or dispute.
• Ratings, complaints and support messages.
• In-app calls: audio is streamed directly between the two parties and is never recorded or stored; we keep only a call log (time, duration, participants).
• Technical data: push-notification token (FCM), device model and OS, IP address and error logs for security and fraud prevention.
• Crash reports: when the app crashes, a technical report (device model and OS, app version and technical details of the error) is sent through Firebase Crashlytics. It does not include your name or phone number and is linked only to your internal account ID so we can trace the error. We use it only to fix bugs — never for advertising, and we never sell it.

We do not collect payment-card data; payments are currently cash only.

3. How we use your data

• To provide the service: matching riders and captains, pricing, navigation, tracking, notifications and rider–captain calls.
• To verify your phone number at sign-up and password recovery, and to fix app bugs using crash reports.
• Safety and trust: captain verification, emergency features, women-rider preferences, complaint investigation and fraud prevention.
• Accounting and legal obligations: earnings, commissions, settlements and legally required records.
• To contact you about your account and trips. We never send marketing without consent and never sell your data.

4. Who we share data with

• Between rider and captain, only as needed for the trip: first name and rating; riders see the captain's name, photo, vehicle, plate and live location during the trip. Calls go through the app.
• Service providers acting on our behalf under confidentiality: server hosting (Germany (EU)), Google Firebase for notifications, phone-number verification (SMS) and crash reports (Crashlytics), Google Maps to display the map and search for places, and the open OpenStreetMap Nominatim service to search places and addresses (it receives only the search text or map point, never your name or phone number). Fares, trip distances and arrival times are calculated on our own servers from OpenStreetMap data. The road route drawn on the map also comes from our own servers.
• Authorities when legally required, or to protect someone's safety.

Some data may be processed on servers outside Jordan by the providers above, with safeguards equivalent to those required by Jordanian law.

5. Retention

• Account data: while your account is active.
• KYC documents: deleted when the account is deleted, or when an application is rejected and not completed.
• Captain location history: deleted with the account; before that, kept only as long as needed for operations, safety and dispute resolution.
• Trip and financial records: kept in anonymized form after account deletion for the period required by law (accounting and tax), not linked to you.

6. Your rights

You may access and correct your data, withdraw consent, and request deletion of your account and data.

Account deletion: in the app go to "Account → Delete account", or use https://fastlinejo.com/delete-account

On deletion we immediately erase your name, phone, email, photo, ID documents, location history, sessions and notification tokens, and keep trip/financial records anonymized as in section 5. Deletion is not possible during an active trip/order or with an unsettled balance or unpaid fine until settled.

7. Device permissions

Location (to run the service as described in section 2), notifications (trip and offer alerts), microphone (in-app calls only, during the call), and camera and photos (captains take photos of their documents and parcels with the device camera or pick them themselves through the system photo picker). You can change these in your device settings at any time; some features will not work without them.

8. Security

Encrypted connections (HTTPS), hashed passwords, private storage for identity documents accessible only to authorized staff, least-privilege access and audit logs.

9. Children

Our services are for adults aged 18 and over. We do not knowingly collect children's data.

10. Changes

We may update this policy and will notify you in the app before any material change takes effect.

Last updated: 2026-10-19