Effective date: August 29, 2026

Vayliron Technologies Limited ("Vayliron," "we," "us") provides ride, chauffeur, and vehicle-rental services. This policy explains the personal information we collect, why we use it, who receives it, how long we keep it, and how users can request deletion.

Information We Collect and Use

We collect account and contact information, booking and transaction records, approximate or precise location when required for a trip, device and diagnostic information, payment status, support communications, and information a user submits to complete a service. We use this information to create and protect accounts, provide bookings and trips, calculate prices, process payments, prevent fraud, send service notifications, provide support, meet legal obligations, and improve reliability. We do not sell personal information.

Vehicle-Rental Identity Verification and Face Data

What is collected. When identity verification is required for a vehicle rental, the Smile ID software development kit captures a selfie and liveness images and may capture images of the user's identity document. On supported Apple devices, the SDK uses Apple's TrueDepth API through ARKit to measure three-dimensional facial orientation and facial expressions while the selfie is being taken.

TrueDepth processing. TrueDepth spatial-orientation and facial-expression measurements are processed entirely on the device to confirm that a live person is present and to position the face correctly. Vayliron and Smile ID do not receive, store, or retain the TrueDepth face mesh, depth map, facial coordinates, or facial-expression measurements.

Purpose. The selfie, liveness images, identity-document images, and verification result are used only to confirm identity, compare the live user with the presented identity document, determine rental eligibility, reduce impersonation and fraud, and permit an authorized Vayliron administrator to review a verification that cannot be completed automatically. Face data is not used for advertising, marketing, analytics, or building a user profile.

Sharing and storage. With the user's clear consent, selfie and document images are securely transmitted to Smile ID (Smile Identity), our identity-verification service provider, and verification evidence and results are copied to Vayliron-controlled protected storage for authorized rental review. We do not share face data with advertising networks, analytics providers, data brokers, or information resellers. Smile ID is required to use this information only to provide identity verification and fraud-prevention services and to protect it to the same or a higher standard described in this policy.

Retention and deletion. Vayliron retains selfie, liveness, identity-document images, and copied Smile ID evidence for no more than 90 days after collection or verification, after which an automated process permanently deletes the evidence from Vayliron-controlled storage. We delete this evidence sooner when the user deletes the account or makes a valid deletion or consent-withdrawal request, unless a documented legal obligation requires limited retention. The on-device TrueDepth measurements are not retained at all. Non-image verification outcomes and rental transaction records may be retained separately when required for security, accounting, dispute resolution, or law, but do not contain the TrueDepth measurements.

Service Providers and Disclosure

We disclose only the information needed to service providers that support identity verification, payments, maps, messaging, cloud hosting, customer support, and application security. We may also disclose information when required by law, to protect users, or in connection with a corporate transaction. We do not sell personal information. Service providers may use information only for the contracted service and must apply appropriate security and deletion controls.

Security

We use access controls, encrypted network transport, protected storage, audit logging, and role-based administrative permissions designed to prevent unauthorized access, loss, misuse, or disclosure. No system can be guaranteed completely secure, and we continuously review these safeguards.

Your Choices, Consent, and Account Deletion

Users can decline rental identity verification, but Vayliron may be unable to provide a rental that legally or operationally requires identity confirmation. Consent may be withdrawn and personal information may be accessed, corrected, or deleted by using Profile > Delete Account in the app or by contacting admin@vayliron.com. Account deletion removes Vayliron-controlled face and rental KYC evidence and signs the user out after the deletion succeeds. We also process deletion requests with applicable service providers. We may retain the minimum information required by law or for an active legal claim and will document any such exception.

Contact

Questions or privacy requests may be sent to Vayliron Technologies Limited at admin@vayliron.com.