Privacy Policy

• Account and profile information: name, email address, phone number, preferred language and your role on PickYou.
• Rider trip information: pickup and destination addresses, the coordinates of those places, ride notes, times, status history, fare and receipts.
• Driver location while a driver is on duty, used to dispatch rides and to show the assigned vehicle approaching.
• Driver and operator compliance information: licence, chauffeur permit, vehicle registration, insurance and inspection details supplied for regulatory eligibility.
• Payment records: amount, currency, status, refunds, the PickYou platform fee, and the payment identifiers issued by our payment processor.
• Support requests and the correspondence attached to them.
• Safety and security incident records, including emergency escalations.
• Lost-property records.
• Text-message consent records: whether consent was given or withdrawn, the phone number it applies to, the wording shown, where it was given and when.
• Push notification device tokens, where push notifications are enabled on your device.
• Accessibility preferences saved to your account.
• Guardian or trusted-contact details, where a rider chooses to add one.
• Technical and security logs: sign-in events, error reports and operational events, with personal information redacted.

We do not store complete payment card numbers. Card details are entered directly into our payment processor's own secure payment form. PickYou receives only the payment's status, amount, currency and the processor's reference identifiers.

• To create and dispatch rides between riders, operators and drivers.
• To verify that operators, drivers and vehicles meet local licensing and insurance requirements.
• To calculate fares and the platform fee applied to completed rides.
• To maintain an accurate, tamper-evident record of each ride for dispute resolution and regulatory reporting.
• To respond to support requests, safety incidents and lost-property reports.
• To keep accounts secure and to prevent misuse of the platform.

We do not sell personal information, and we do not use ride or location data for advertising.

Access is limited by role. A rider sees only their own rides. A driver sees only the rides assigned to them. An operator sees only their own fleet and the rides their company handles. A rider's phone number is released only to the operator and driver assigned to that specific ride, and to PickYou administrators. That access stays tied to the ride record, so an assigned operator or driver can still see it on their record of a completed ride. Driver licence and permit records are visible only to that driver, their operator, and PickYou administrators.

• With the licensed operator and driver fulfilling your ride, limited to what is needed to complete it.
• With service providers who host our infrastructure, process payments, provide mapping and address search, deliver our messages, and monitor service health.
• With regulators or law enforcement where we are legally required to do so.

PickYou uses service providers to host and operate our application, process payments, provide maps and address search, send communications, and monitor service health. Some of these providers store or process personal information outside Canada, including in the United States. When information is processed in another country, it may be subject to the laws of that country and may be accessible to courts, law-enforcement or regulatory authorities there. PickYou remains responsible for personal information under its control and uses contractual and technical safeguards appropriate to the sensitivity of the information.

PickYou is a Canadian company based in Yellowknife, Northwest Territories. We do not, however, represent that personal information is stored or processed only in Canada.

We use administrative, technical and organizational safeguards appropriate to the sensitivity of the information, including encryption in transit, encryption at rest through our infrastructure providers, role-based access controls, restricted administrative access, and security logging and monitoring. Personal information is removed from our error and operational records, and ride records are kept as an append-only history.

No system can be guaranteed completely secure.

Security researchers can report a vulnerability through our security page.

If PickYou becomes aware of a security incident involving personal information, we will investigate, contain and document the incident and notify affected individuals and appropriate authorities where required by applicable law.

When you close your PickYou account, sign-in identity, saved accessibility preferences, live location points, trusted-contact details and your PickYou roles are erased; rider and driver records are anonymised; and rides, fares, PickYou fees, the ride audit history, safety cases and the admin action log are retained without identifying you. Ride audit history is append-only by design: entries are never edited or deleted after the fact.

• Sign-in identity (email, password, Google link, sessions) — erased: Identity is not a business record.
• Saved accessibility preferences — erased: Released per ride only; nothing to retain.
• Live location points — erased: Operational only, never a history.
• Trusted-contact details — erased: Belongs to the person who left.
• PickYou roles and portal links — erased: Access ends with the account.
• Rider record (name, email, phone) — anonymized: The record is referenced by rides; the person is not.
• Driver record (name, email, phone) — anonymized: Licence and permit facts stay for regulators; contact detail does not.
• Rides and PickYou Trip IDs — retained: Immutable dispatch and accounting records.
• Fares, fees and settlement — retained: Financial reconciliation and tax retention.
• Ride audit history — retained: Append-only; it can never be rewritten.
• Safety and security cases — retained: Investigations outlive an account.
• Admin action log — retained: Accountability for PickYou's own staff.
• Taxi company and vehicle records — retained: Company records, not personal data.

Retained ride, fare and safety records are kept for about 7 years as business, tax, insurance and transport records. Full details, and how to close your account, are on the delete your account page.

Canadian privacy law, including PIPEDA and applicable Northwest Territories legislation, may give you the right to request access to the personal information we hold about you, to ask for corrections, or to withdraw consent where processing relies on it. Which statutes apply to a particular request depends on the circumstances. Some records are kept as business, tax or safety records even after an account is closed.

Privacy questions and access requests: privacy@pickyou.ca. We aim to respond within 30 days and will tell you if additional time is permitted and required under applicable law.

General help: help@pickyou.ca. Accessibility barriers: accessibility@pickyou.ca. Security vulnerability reports: security@pickyou.ca.