How we collect, use, share, and protect your personal data.
Effective date: 26 August 2026
Last updated: 27 August 2026
Alpha Movers Transport Corp. ("Alpha Movers", "we", "us", "our") operates the iDOL Booking platform. We are the Personal Information Controller for the personal data described in this Policy, as that term is used in the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
Registered address: 2609 1201, Crimson, Entrata, Civic Drive, Entrata Urban Complex, Filinvest, Alabang, Muntinlupa City, Philippines.
This Policy applies to:
Where this Policy says passenger it means a customer account; where it says driver-partner it means a driver account. Where processing applies to only one of them, this Policy states which.
We do not collect your date of birth, your gender, or your civil status. We do not ask for and do not want sensitive personal information beyond the government identification that driver-partner accreditation requires.
Your counterpart in a trip provides information about you: a passenger's rating and review of a driver-partner, and a driver-partner's rating of a passenger. Safety reports made about you are also recorded.
Location is the most sensitive data we handle, so we describe it precisely.
The passenger app collects your device location only while the app is open and in use. We use it to set your pickup point, to show nearby driver-partners, to calculate fare estimates and routes, and to display your trip in progress. The passenger app does not track your location in the background.
The driver app collects location continuously while you are online and available for trips, including when the app is in the background or your screen is off. This is necessary for the service to function: we cannot match you to nearby requests, show passengers your approach, navigate a trip, or calculate distance-based fares without it. While background location is active, Android displays a persistent notification so you can see that tracking is running.
Location collection stops when you go offline. You can revoke the location permission at any time in your device settings, but the driver app cannot accept trips without it.
Your last known location is retained for 24 hours and then purged, unless it is attached to an active or recently completed trip or is required for a safety investigation. Location points that form part of a completed trip's route are retained with the trip record under section 13.
Trips can be paid in cash or by digital payment. Digital payments are handled by our payment gateway, PayMongo. When you pay digitally we pass PayMongo your name, email address, mobile number, the amount, and a reference to the trip.
We never see, receive, or store your card number, CVV, or e-wallet credentials. Those are entered directly with the payment provider. We receive only the payment result and a transaction reference.
Cash fares are settled directly between you and the driver-partner; we record the amount for accounting and commission purposes but no payment instrument is involved.
Our messaging is transactional. We do not currently send marketing or promotional messages. If that changes, we will update this Policy and provide a way to opt out before doing so.
To complete a trip, each side sees limited information about the other: first name, profile photo, rating, and vehicle details for the driver-partner. Pickup and drop-off locations are shared with the assigned driver-partner. Contact between you is handled through in-app chat, or by a call placed through your device's dialler — mobile numbers are not displayed in the app.
We use the following processors, and share only what each needs:
We may disclose personal data where we are required to by law, court order, or a lawful request from a regulator or law enforcement agency, and where necessary to establish, exercise, or defend a legal claim, or to protect life, safety, or property.
We do not sell your personal data. We do not rent or trade it. We do not share it with advertisers or data brokers.
The apps include an emergency function that can contact the national emergency number and notify contacts you have nominated. If you trigger it, we record the alert, your location at the time, and the trip it relates to, so that we and the responding parties can act on it. Trip monitoring may also flag unusual delays after a trip has been completed.
Messages exchanged between a passenger and a driver-partner pass through and are stored on our servers so they can be delivered and so they are available if a dispute or safety report arises. Treat in-app chat as recorded, not private.
Our administrators can access account records to operate the platform, resolve disputes, and investigate safety reports. Access is controlled by role. You should be aware that staff with the relevant role can view uploaded identification documents in readable form. We limit who holds those roles, and access is for operational purposes only.
We protect personal data with access controls and role-based permissions, encrypted connections between the apps and our servers, authentication tokens for app sessions, and logging of authentication events with sensitive values masked. Backups are taken at the infrastructure level by our hosting provider.
No system is perfectly secure. If a personal data breach occurs that is likely to give rise to a real risk of serious harm, we will notify the National Privacy Commission and the affected data subjects as required by law.
Data may persist in infrastructure backups for a period after deletion from the live system, until those backups are rotated out.
Under the Data Privacy Act you have the right to be informed; to object to processing; to access your personal data; to have inaccurate data corrected; to erasure or blocking in the circumstances the law allows; to damages for a violation of your rights; and to data portability.
To exercise any of these, contact us using the details in section 18. We will respond within a reasonable period and will ask you to verify your identity first, so that we do not disclose your data to someone else. Some rights are qualified — for example, we cannot erase records we are legally required to keep, such as financial records.
You can permanently delete your account from within the app. Deletion is not available while you have a trip in progress or an outstanding balance.
When you delete your account we permanently remove your profile and contact details, your wallet and saved addresses, your ratings and reviews, and your chat membership. Completed trips are not deleted — they are anonymised, meaning the trip record remains but is no longer linked to you. This is necessary because the other party to the trip has their own record of it, and because we are required to keep transaction records.
Deletion is permanent and cannot be undone.
iDOL Booking is intended for people aged 18 and over. We do not knowingly collect personal data from children. We rely on your representation that you meet the age requirement; we do not currently verify age. If you believe a child has provided us with personal data, contact us and we will delete it.
We may update this Policy. When we do, we will change the "last updated" date above and, for significant changes, notify you in the app. Continuing to use the platform after a change means you accept the updated Policy.
For any privacy question, to exercise your rights, or to reach our Data Protection Officer:
If you are not satisfied with our response, you may bring a complaint to the National Privacy Commission, 5th Floor, Delegation Building, PICC Complex, Roxas Boulevard, Pasay City, or through privacy.gov.ph.
