Privacy Policy

This Privacy Policy applies to DuneRider, an off-road ATV, UTV and SSV rental booking app. It explains what information we collect, how we use it, when it may be shared, how long it is retained and what choices you have.

1. Information We Collect

We collect information needed to provide account, browsing, booking, payment simulation, pickup, customer support and safety features.

• Account information: phone number, verification code login records, nickname, avatar, membership status, registration time and last login time.
• Identity and eligibility information: real-name verification status, driver license type, driver license number, license expiration date and verification results.
• Rental booking information: selected vehicle, rental period, pickup and return times, contact name, contact phone number, pickup address, order amount, deposit, insurance option, order status and reviews.
• Payment-related information: payment method, payment status, transaction amount and wallet balance changes. We do not store full bank card numbers or third-party payment account passwords.
• Location-related information: when authorized, location data is used to show nearby stores, estimate distance and support navigation to pickup or return locations.
• Device and log information: device model, system version, app version, crash logs, operation logs, network status and security risk records.
• Support and message information: messages between you and dealers, vehicle hosts or online support, including message content, images, time and unread status.

2. How We Use Information

• Create and maintain your account and support login, registration, profile editing and account security checks.
• Display vehicle inventory, pricing, ratings, promotions and nearby store information.
• Process bookings, payment simulation, deposits, pickup and return details, cancellations, refunds, reviews and after-sales support.
• Provide location-based features such as nearby recommendations, navigation and store distance calculations when you grant permission.
• Send booking reminders, support replies, payment result notices, promotional messages and security alerts.
• Detect and prevent fraud, improper rentals, abnormal login behavior, payment risks and account abuse.
• Improve product experience, diagnose issues, measure service quality and optimize vehicle recommendations.

3. Device Permissions

• Location: used for nearby vehicles, store distance and pickup or return navigation. You can still enter an address manually if location access is disabled.
• Camera and photo library: used for avatars, driver license images, vehicle photos, review images and support evidence.
• Notifications: used for order status updates, payment result notices, support messages and activity reminders.
• Face ID or biometric authentication: used only for local security verification. We do not upload biometric information.

4. Sharing and Service Providers

We do not sell personal information. We may share or process information through trusted parties only when necessary to provide the service.

• Vehicle hosts, dealers and rental service providers: to confirm vehicles, arrange pickup and return, handle deposits, insurance and after-sales support.
• Payment service providers: to support wallet payment, Alipay payment simulation, refunds and transaction risk checks.
• Map and location service providers: to support address lookup, route planning, distance calculation and navigation.
• Cloud, SMS, notification and security service providers: to support data storage, verification codes, push messages, monitoring and security protection.
• Regulators, courts or law enforcement: when disclosure is required by applicable law or necessary to protect legitimate rights.

5. Retention

We keep personal information only for as long as needed for the purposes described in this Policy. Account information is retained while the account is active. Order, payment and invoice-related records may be retained as required for legal, accounting and dispute-resolution purposes. Support records are retained as needed to resolve issues, improve service quality and handle disputes. When retention is no longer necessary, we delete or anonymize the information.

6. Security

We use access controls, encrypted transmission, permission separation, log auditing and abnormal activity monitoring to protect personal information. No internet service can guarantee absolute security, but we continuously improve our safeguards and will take appropriate remedial actions if a personal information security incident occurs.

7. Your Rights and Choices

You can view and edit account information, manage notification permissions, change your password and contact online support for order or data-related requests. You may request access, correction, deletion, withdrawal of consent, account deletion or an explanation of personal information processing rules. After account deletion, we stop providing account services and delete or anonymize related personal information as required by law.

8. Children and Minors

DuneRider's vehicle rental and driving-related services are intended for users who have the required legal capacity and driving qualifications. Minors must not independently use features involving vehicle operation, payment, deposits, pickup or return. If a guardian believes a minor has provided personal information to us, the guardian may contact us through the in-app online support channel.

9. Third-Party Services

The app may link to third-party services such as Alipay, maps, system settings, phone dialer functions or web pages hosted on Cloudflare Pages. These third parties process information according to their own privacy policies. This Privacy Policy page is hosted on Cloudflare Pages, and Cloudflare may process access logs, IP addresses, browser identifiers and security event information for website delivery and protection.

10. Changes to This Policy

We may update this Policy to reflect product changes, legal requirements or security needs. Material changes will be communicated through in-app notices, pop-ups, messages or a prominent notice on this page. The updated Policy takes effect on the effective date shown above.