Privacy Notice

Privacy Notice

Privacy Notice – DurianX Mobile Apps (Version 3)

Last Updated: June 21, 2026

Your Privacy Matters

This Privacy Notice describes how DurianX Co., Ltd. and its affiliates (“DurianX”, “we”, “us”, or “our”) collect, use, process, and disclose your Personal Data when you use our mobile applications (including the DurianX Passenger App, DurianX Driver Delivery Mobile App, and DurianX Merchant Mobile App), websites, and other services (collectively, the “Services”).

Our apps collect limited operational data necessary for providing transport, delivery, and merchant services. By downloading, installing, or using these applications, you acknowledge and agree to the practices described in this Privacy Notice.

Important Notice for Driver Partners: The DurianX Driver App requires location access to operate correctly. You can control this through your device settings at any time.

I. Collection of Personal Data

“Personal Data” means any information which can be used to identify you or from which you are identifiable. We collect Personal Data about you in the following ways:

1. Data Provided Directly by You

We collect data when you create an account, complete profile details, or communicate with us:

  • Account Credentials & Profiles: Name, registered mobile number, email address, profile picture, gender, date of birth, and encrypted passwords.
  • Verification Documents (Drivers/Merchants): National ID card, driving license, vehicle registration card, insurance details, business licenses, bank account certificates, and tax registration (VAT) documents.
  • Payment Details: Credit/debit card details, bank account numbers, or digital wallet links.
  • Communications: Chat history, messages, and calls made between passengers, drivers, and merchants using our in-app communications.

2. Data Collected Automatically (During Use of Services)

We collect data generated by your activity and device when you access our Services:

  • Location Data:
    • For Passengers: Real-time GPS location is collected when the app is running in the foreground to set pickup/delivery coordinates.
    • For Drivers: Real-time GPS location is collected both when the Driver App is running in the foreground and in the background (while actively logged in and available for jobs) to match orders, navigate, and track deliveries.
  • Transaction and Payment History: Dates, times, billing details, fees charged, delivery routes, and payout summaries.
  • Device and Usage Information: IP address, device hardware model, IMEI/UUID, operating system version, browser type, crash logs, and app performance metrics.

3. Data from Other Sources

We may receive data from background check agencies, financial institutions, insurance partners, or public registries to verify driver/merchant eligibility.

II. Use of Personal Data

We use your Personal Data to provide, maintain, and improve our platform. The primary purposes include:

1. Operation of the Services

  • Matching passengers with available drivers/riders.
  • Matching customers with nearby merchants for food and parcel orders.
  • Providing turn-by-turn navigation for drivers/couriers.
  • Processing settlements, payments, and partner payouts.

2. Safety and Security

  • Verifying identities and qualifications of driver partners (background screening, license checks).
  • Reviewing ratings and feedback to maintain high platform standards.
  • Monitoring rider telematics (speed, driving behavior) to ensure passenger and public safety.
  • Detecting and preventing fraud, fake bookings, and account sharing.

3. Customer Support & Operational Enhancements

  • Troubleshooting app issues and fixing bugs.
  • Responding to support queries, disputes, and incident reports.
  • Running analytics to optimize pickup zones, delivery routes, and matching algorithms.

4. Legal Compliance

  • Complying with tax audit obligations, financial regulations, and telecommunications rules in Cambodia.

III. Disclosure of Personal Data

We share your Personal Data with other users on our platform and third-party partners as necessary to operate the Services:

1. Sharing Between Users

  • Riders and Customers: A customer will see their driver’s name, photo, phone number, vehicle type, license plate number, and real-time location. A driver will see the customer’s pickup and delivery address.
  • Merchants and Riders: A merchant will see the assigned driver’s name, photo, and license plate number. A driver will see the merchant’s store location and order details.

2. Service Providers & Corporate Partners

We share data with:

  • Mapping/Navigation Providers: Google Maps API to calculate routes, distance, and ETA.
  • Payment Gateways: Third-party banks and payment processors to settle payments and driver payouts.
  • Cloud Hosting Providers: Infrastructure services (e.g., AWS) to store and secure database records.
  • Legal and Professional Advisors: Auditors, accountants, and legal counsel in connection with legal disputes.
  • Law Enforcement & Government Authorities: In response to official warrants, court orders, or regulatory compliance inquiries.

IV. Retention of Personal Data

We retain your Personal Data for as long as your account exists or as required to fulfill the purposes outlined in this Notice.

  • Standard Customer Accounts: Data is retained while the account is active and deleted/anonymized when a deletion request is processed.
  • Driver and Merchant Partner Accounts: Due to the business partnership, tax audit laws, and contractual commitments under Cambodian regulations, Driver and Merchant account records, business details, and transaction histories are not permanently deleted from our databases. They are deactivated and marked as “Inactive / Requested for Deletion” under our archiving protocols (see Section VIII).

V. International Transfers of Personal Data

Your Personal Data may be transferred to, stored at, or processed in databases located outside Cambodia (for example, on cloud servers hosted by our third-party infrastructure providers). We ensure that any such transfer complies with applicable data protection laws and that your data remains protected under encryption standards.

VI. Cookies and Related Technologies

We and our partners use cookies, web beacons, and mobile device identifiers (such as Android Advertising ID or Apple IDFA) to recognize your device, persist your session, understand your preferences, and secure the app against automated bot attacks. You can manage or disable cookie tracking in your mobile browser or OS settings.

VII. Protection of Personal Data

We implement strict organizational, technical, and physical security measures to safeguard your Personal Data:

  • Encryption: Data is encrypted during transmission (via SSL/TLS) and at rest.
  • Access Control: Access to personal databases is restricted to authorized personnel on a “need-to-know” basis.
  • Security Audits: Regular vulnerability scanning and security testing are performed.
  • Confidentiality: All employees and contractors are bound by strict confidentiality agreements.

VIII. Your Privacy Rights & Data Deletion

You have control over your personal data. Below are your rights and detailed instructions on how you can manage or request the deletion or deactivation of your account:

1. Access, Correction, and Portability

You can access and correct your profile information directly inside the app. For comprehensive data extracts, you can submit a request to privacy@durianx.com.

2. Location Tracking Control

You can enable, disable, or adjust location permissions through your device’s operating system settings. Note that disabling location tracking for the Driver App will prevent you from receiving matching delivery offers.

3. Data Deletion and Account Deletion Process

We provide a simple and clear process for you to request the deletion or deactivation of your account:

How to Submit a Request
  • In-App Request: Open the DurianX App > Go to Profile > Select Request Account Deletion and submit.
  • Email Request: Send an email to privacy@durianx.com with the subject “Account and Data Deletion Request” from your registered email address, providing your registered phone number.
  • Web Request Form: Submit a request via our web deletion portal at: https://www.durianx.com/delete-account (or using the Contact Us form on our website).
Special Administrative Verification Flow for Partners (Drivers & Merchants)

Because drivers (riders) and merchants operate under a formal partnership agreement/contract with DurianX, their deletion requests require verification and approval by our Administration team. Before an account can be approved for deactivation and marked as “Inactive / Requested for Deletion”:

  • All outstanding settlements, payouts, or collections must be fully cleared.
  • All pending orders or delivery assignments must be completed.
  • Any active disputes or compliance investigations must be resolved.
  • The partnership contract/agreement must be formally terminated.
What Data is Deleted vs. Retained
  • For Standard Customer/User Accounts: Upon approval, account credentials, profile pictures, location history, and personal registration details are permanently deleted or anonymized.
  • For Driver and Merchant Partners:
    • The account is deactivated and marked as “Inactive / Requested for Deletion”, revoking all active access.
    • All account information, business data, and transaction histories are retained. In accordance with Cambodian laws and regulations (including financial, tax, and telecommunications rules) and the terms of your merchant/driver agreement, we are required to retain all signed agreements, payout details, delivery completion records, and transaction histories for up to 5 years (or longer if required by active audit/regulatory mandates) for tax compliance, fraud prevention, and dispute resolution.
Timeframe

Our Administration team will verify the account status and update your account status within 30 calendar days from submission.

IX. Amendments and Updates

We may modify, update, or amend this Privacy Notice at any time. If we make material changes, we will notify you through the app notifications, email, or a banner on our website. Continued use of our Services after an update indicates your acceptance of the revised notice.

X. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Notice or your Personal Data, please contact our Data Protection Officer:

  • Company Name: Durian Inn Co., Ltd
  • Email: privacy@durianx.com
  • Phone: (096 | 076 | 031)-3696969
  • Website: www.durianx.com
  • Address: #BT-1841 (B&V Mansion), 2nd Floor, Chroy Chongva, Phnom Penh, Cambodia

XI. Compliance & Acknowledgment

  • Regulatory Compliance: This Privacy Notice complies with Cambodian data protection, electronic commerce, and telecommunications regulations, following industry best practices for mobile app privacy.
  • Consent & Location Agreement: By using the DurianX mobile applications, you acknowledge that location data may be collected during active delivery sessions, and that you can control such permissions anytime through your device settings.