Privacy notice

Version 2026-11-03-draft-1 · Prepared 3 November 2026 · Effective date pending

1. About this notice

This draft describes data categories relevant to Aster’s customer features. The operator name is ASTER. Contact privacy@maldive.app for privacy enquiries. Registered entity details, mailbox availability, actual production practices and applicable rights must be confirmed before this notice takes effect.

2. Account and service information

Aster’s features use information such as your phone number, profile information, booking details, pickup and destination locations, parcel sender and recipient details, payment and transaction records, and support requests. The information used depends on the services you choose.

3. Location and device permissions

Location may be used to find nearby services and set pickup or delivery locations when you allow access. Features involving photos, notifications or other device capabilities may request permission. You can manage permissions in your device settings; some features may then be unavailable. The operator must verify precise and background location behavior before publication.

4. Why information is used

Service information supports sign-in, bookings, fulfillment, payment records, customer assistance, safety, fraud prevention and service reliability. The operator must confirm the purposes and legal grounds that apply to each production data flow.

5. Information shared for a booking

Drivers and service providers may need relevant booking and contact information to fulfill a service. Parcel deliveries may involve information about recipients who do not have an account. Share another person’s information only when authorized and tell them why it is needed.

6. Service providers and sharing links

Hosting, authentication, payment, mapping, notification and other infrastructure providers may process information needed for their functions. Optional sharing features can disclose booking information to people who receive a link. The operator must confirm provider identities, international transfers, safeguards and the exact information exposed by each sharing feature.

7. Retention and security

Different records may need different retention periods for service delivery, accounting, dispute handling and security. The operator must confirm retention periods or criteria, deletion behavior, security descriptions and any legally required retention before publication. No specific retention period is promised by this draft.

8. Your choices and requests

You can manage device permissions and the profile settings available in the app. Send privacy enquiries and account deletion requests to privacy@maldive.app. The operator must verify that this mailbox is monitored and confirm procedures for access, correction, account deletion or other applicable rights, including verification and retained-record exceptions.

9. Children and updates

The operator must confirm service age requirements, handling of children’s information, complaint channels and how material changes will be communicated. Each published notice should have an effective date and stable version.