Privacy Policy

Effective Date: 01st March  2026

Introduction

MiWayz (“we,” “our,” or “us”) is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your information when you use our mobile applications, websites, and related online services (collectively, the “Services”).

This Privacy Policy is intended to comply with the Personal Data Protection Act No. 9 of 2022 of Sri Lanka (“PDPA”) and other applicable data protection laws.

By using the Services, you acknowledge that you have read and understood this Privacy Policy and agree and consent for us to use, process, disclose and transfer your personal data as set out herein. You further agree that all information provided by you are true and correct to the best of your knowledge, and you have not knowingly omitted any relevant information.

In case if you provide Personal Data of another individual, it will be deemed that you have obtained the consent from that individual prior to providing their Personal Data to us. Any references to ‘your Personal Data’ shall include such individual’s personal data.

Scope and Application

This Privacy Policy applies to individuals (“Users”) who access or use MiWayz Services for transportation, food delivery, grocery delivery, or other on-demand services, where personal data is processed in Sri Lanka.

This Privacy Policy does not apply to drivers, couriers, fleet operators, or other service providers who access the MiWayz platform under a separate contractual arrangement (“Drivers”). Personal data relating to Drivers is governed by a separate Driver Privacy Policy.

If you interact with the Services in more than one capacity, the applicable privacy policies apply separately to each role.

1. Information We Collect

• 1 Information You Provide to Us

We collect information you voluntarily provide, including:

• Personal Information: Name, NIC/Passport Number, Date of birth, email address, phone number, profile photo, delivery address, and payment-related information.
• Account Information: Login credentials and authentication details, including where you choose to use third-party login services.
• Order and Trip Information: Ride requests, delivery orders, preferences, instructions, and feedback.
• Communications: Messages, emails, or other communications with MiWayz support or within the app.
• 2 Information We Collect Through Your Use of the Services

When you use the Services, we automatically collect certain information, including:

• Location Information: Precise or approximate location data during active trips or deliveries, based on device permissions. Location data is used to facilitate rides, deliveries, safety features, and fare calculation.
• Device Information: Device model, IP address, operating system, app version, unique device identifiers, and mobile network information.
• Transaction Information: Trip or order details such as date, time, distance, route, fare amount, and payment status.
• Usage Information: App interactions, crash logs, diagnostic data, and system activity.
• Communication Metadata: Date, time, and duration of calls or messages exchanged through the platform. MiWayz does not record voice calls by default.
• 3 Information from Other Sources

We may receive information from:

• Linked Accounts: Third-party authentication or payment providers where you choose to connect them.
• Enterprise Partners: Employers or organizations if you use MiWayz through an enterprise or corporate program.
• Third-Party Integrations: Services that integrate with MiWayz or whose services we integrate

2. Legal Basis for Processing

MiWayz processes personal data based on one or more of the following lawful bases, as permitted under applicable law:

• Your consent
• Performance of a contract with you
• Compliance with legal obligations
• Legitimate business interests, including service improvement, safety, and fraud prevention

3. How We Use Your Information

We use personal data to:

• Provide, operate, and maintain the Services
• Verify your identity and authenticate your login.
• Provide customer support and respond to your inquiries.
• Match Users with Drivers and facilitate communication
• Calculate fares, process payments, and issue receipts
• Improve service quality, features, troubleshoot issues and user experience
• Ensure safety, security, and fraud prevention
• Provide personalized offers and marketing including service messages, product benefits, feature changes, (if permitted by applicable law and your preferences).
• Conduct analytics, testing, and research
• Send service-related notifications and, where consented, promotional communications
• Other purposes, if permitted by applicable law.

Certain features, such as fare calculation and ride matching, involve automated processing based on predefined rules.

4. Sharing of Information

4.1 Through the Services

We may share limited personal data:

• With Drivers: To enable service fulfillment, including pickup and delivery details.
• With Other Users: Where you choose shared services or referrals

4.2  With Third Parties

We may share information with:

• Service Providers: Payment processors, analytics providers, customer support vendors, hosting providers and cloud infrastructure partners.
• Business Partners: Where required to deliver requested services or promotions.
• Government Authorities: Where required by law or legal process.
• Corporate Transactions: In connection with mergers, acquisitions, or restructuring.
• In Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
• .

All third parties are required to process personal data in accordance with applicable data protection obligations.

4.3 Cross-Border Data Transfers

Where personal data is transferred or stored outside Sri Lanka, MiWayz ensures that appropriate safeguards are in place in accordance with applicable data protection laws to protect such data.

5. Your Rights

Subject to applicable law, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Withdraw consent where processing is based on consent
• Object to or restrict certain processing
• Request deletion of personal data, subject to legal requirements
• Be informed of material data breaches where required by law
• opt out of marketing communications at any time by following the instructions provided in our messages or contacting us directly. For the avoidance of doubt this shall not apply to mandatory product or service communications which are considered as part of the Services, which could be cancelled unsubscribing to the Service

Requests may be submitted by contacting MiWayz using the details below.

6. Your Choices

6.1 Account Management

You may update or delete your account through the app or by contacting support.

6.2 Location Information

You may disable location access via device settings, though this may limit service functionality.

6.3 Promotional Communication

You may opt out of marketing messages at any time. Service-related communications will still be sent where necessary.

7. Data Retention

Subject to the applicable laws, Personal data is retained only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Data is securely deleted or anonymized once retention periods expire.

8. Security

MiWayz implements appropriate technical and organizational measures to protect personal data. While we strive to safeguard your information, no system can guarantee absolute security.

9. Children’s Privacy

MiWayz Services are not intended for individuals under the age of 18 without parental or guardian consent. If you are under the age of 18, we presume that you have obtained the consent of your parent, guardian before submitting your Personal data. If we become aware that a child’s information has been collected without parental consent, we will take steps to delete that information promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated through the Services or by other appropriate means. Continued use of the Services constitutes acceptance of the updated policy.

Contact:
Support: support@miwayz.com

If you have concerns regarding data protection, you may contact us directly or lodge a complaint with the relevant regulatory authority.