Privacy Policy

Effective date: October 8, 2025

Who we are: Catch Technologies Inc. (“Catch”, “we”, “us”, “our”) operates a Canadian ride-hailing platform that connects riders and drivers through our apps, websites, and support channels (the “Catch Platform”).

Where this policy applies
This policy applies to riders, driver applicants, active drivers, visitors to our websites, enterprise/business account users, and anyone who contacts our support team. It covers personal information as defined under Canadian privacy laws, including PIPEDA, Alberta PIPA, applicable Saskatchewan privacy and consumer protection requirements, BC PIPA, and Québec’s Act respecting the protection of personal information in the private sector as amended by Law 25.
Our privacy commitments
• We follow Canada’s accountability and consent model and the OPC’s meaningful-consent guidance, including layered notices, just-in-time disclosures, and accessible withdrawal mechanisms.
• We implement reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of personal information.
• In Québec, we designate a privacy officer, maintain an incident register, disclose technologies that identify, locate, or profile individuals, and conduct privacy impact assessments where required.
• In Saskatchewan, we support fair information handling practices, transparent digital communications, accessibility accommodations, and responsible disclosure practices relating to transportation and platform operations.

1) Personal information we collect
A. You provide
• Identity and contact information: name, email, phone number, postal address, date of birth, and profile photo.
• Account and preference information: saved places, accessibility requirements, language preferences, and pronouns.
• Payment and tax information: card details processed through PCI-compliant providers; driver banking and tax identifiers.
• Driver screening information: license class, driving abstracts, right-to-work documentation, vehicle registration and insurance, and background verification reports where permitted by law and obtained with appropriate consent.
• Verification and biometric information: selfie/liveness images and identification scans only with express consent and subject to applicable provincial laws.
• Communications and support information: ratings, feedback, survey responses, support communications, and attachments.

B. Automatically collected information
• Precise location information, trip routes, device telemetry, IP address, browser and operating system information, device identifiers, and network information.
• Ride details including pickup and drop-off locations, fare information, time-stamps, and promotional usage.
• In-app communications metadata and content when necessary for safety, fraud prevention, quality assurance, or legal compliance.

C. Information from third parties
• Background-check providers, payment processors, mapping and telemetry vendors, insurers, regulators, enterprise partners, referral partners, and law enforcement or regulatory authorities where legally authorized.
• Safety and incident reports from users or third parties.
• Municipal or provincial transportation reporting programs where limited or aggregated information is required for compliance or planning purposes.

2) How we use personal information
We use personal information to:
• Provide and operate the Catch Platform.
• Verify identities and onboard drivers.
• Match riders and drivers and process rides and payments.
• Improve safety, fraud prevention, incident response, and insurance handling.
• Support accessibility accommodations and customer support functions.
• Improve platform quality, analytics, forecasting, and operational performance.
• Send service updates, promotions, and marketing communications where permitted or consented to.
• Comply with tax, legal, insurance, municipal, provincial, and regulatory obligations.
• Maintain platform integrity, investigate misuse, prevent unauthorized activity, and protect users, drivers, and the public.

3) Lawful authority and consent in Canada
We rely on express or implied consent based on the sensitivity of the information and the collection context. Express consent is obtained where required, including for precise location services, identity verification, background checks, biometric verification, and certain advertising or profiling activities.

You may withdraw consent at any time, subject to legal or contractual restrictions. Certain services or platform features may not function without the necessary information.

Electronic communications, digital acknowledgments, and in-app consent mechanisms may be used to document user authorization and agreement where permitted by applicable law.

4) Automated decision-making and profiling
We use automated tools and analytical systems for fraud prevention, unsafe-driving detection, fare estimation, platform integrity, service optimization, and trust and safety reviews.

Individuals may request additional information regarding automated decisions that significantly affect them and may request human review where appropriate and legally available. Québec users receive additional transparency regarding technologies used for identification, location tracking, or profiling.

5) Sharing your information
We do not sell personal information for monetary compensation.

We may share information with:
• Service providers performing services on our behalf under contractual confidentiality and security obligations.
• Riders and drivers as necessary to facilitate transportation services.
• Enterprise customers or third-party payors for billing and compliance purposes.
• Insurers, adjusters, legal advisors, or claims administrators, where relevant.
• Municipal, provincial, or regulatory authorities where required by law, licensing requirements, transportation regulations, audits, or lawful requests.
• Law enforcement or public safety authorities where legally required or reasonably necessary to protect safety, rights, or platform integrity.
• Parties involved in mergers, acquisitions, restructuring, or financing transactions are subject to appropriate safety measures.

6) Cross-border transfers
Personal information may be processed or stored in Canada or other jurisdictions, including the United States. When information is transferred outside a province or Canada, we use contractual and organizational safeguards to provide a comparable level of protection.

Foreign governments, courts, law enforcement agencies, or regulators may access information under their applicable laws. Québec users are advised that privacy impact assessments may be conducted for certain transfers outside Québec where required.

7) Cookies, SDKs, and analytics
We use cookies, software development kits (SDKs), analytics tools, and related technologies for authentication, security, fraud prevention, service functionality, operational analytics, and advertising measurement.

Users can manage preferences through browser settings, device controls, and in-app privacy controls. We aim to provide meaningful consent options and clear disclosures about tracking technologies.

8) Retention
We retain personal information only as long as necessary to fulfill the purposes in this policy or as required by law, insurance, dispute resolution, transportation regulations, tax obligations, or legal proceedings.

Examples may include:
• Trip and accounting records remained for approximately 7 years.
• Driver onboarding and compliance records retained during engagement and for a reasonable period afterward.
• Incident, claims, safety, and fraud investigation records retained as reasonably necessary for legal defense, insurance, or regulatory obligations.
• Communications and telemetry records are retained according to operational necessity, legal obligations, and platform integrity requirements.

9) Security
We implement safeguards appropriate to the sensitivity of the information we hold, including encryption, access controls, vendor due diligence, monitoring systems, secure development practices, authentication protections, and incident response procedures.

While we work to protect information, no method of electronic storage or transmission is completely secure.

10) Your privacy rights and choices
Depending on applicable Canadian law, individuals may have rights to:
• Access personal information.
• Request corrections to inaccurate information.
• Withdraw consent subject to legal limitations.
• Manage marketing and communications preferences.
• Request de-indexation or cessation of dissemination rights where available under Québec law.
• Request portability of certain computerized information where legally applicable.
•We aim to respond to verified privacy requests within required legal timelines.
•Requests may be submitted through the in-app privacy tools, by email, or by mail to the Privacy Officer.

11) Children and teens
The Catch Platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If such information is identified, we will take reasonable steps to delete it.

Where minors are legally permitted to use certain aspects of the platform, additional consent or guardian involvement may be required under applicable laws and circumstances.

12) Breach notification
If a breach involving personal information creates a real risk of significant harm or otherwise triggers legal notification obligations, we may notify affected individuals, regulators, insurers, law enforcement authorities, or other relevant parties as required by applicable law.

We maintain records of security incidents and follow applicable reporting and response obligations, including those applicable in Alberta, Saskatchewan, Québec, and under federal privacy law.

13) Contact and Privacy Officer
Privacy Officer
Catch Technologies Inc.
Email: admin@gotocatch.com

The Privacy Officer is responsible for overseeing privacy compliance, responding to privacy-related requests, and managing privacy concerns or complaints.

14) Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, platform operations, or business practices. Updated versions will be posted through the Catch Platform or related websites.

Where material changes are made, we may provide additional notice through email, in-app messaging, or other reasonable methods.

15) Linked notices
• Cookie and Tracking Notice
• Driver Screening and Safety Notice
• Law Enforcement Request Guidelines
• Terms of Service