Legal

Privacy Policy

Last updated: 20 July 2026

APRide is operated by DUOCODE TECHNOLOGY (Malaysia). This policy explains what personal data we process and why, in line with the Personal Data Protection Act 2010 (PDPA).

01

What we collect

  • APU email address — used to verify you belong to the APU community and to sign you in.
  • TP number and display name — shown (TP partially masked) so matches know who they are riding with.
  • Microsoft Teams contact — shared with matched users so you can coordinate off-platform.
  • Ride posts — route, date/time, seats, and notes you choose to publish.
  • Premium subscription status — plan and billing state mirrored from Stripe.
02

Where it lives

Your data is stored in Supabase (managed Postgres) and served through Vercel. Payments for Premium are processed by Stripe — your card number never touches APRide servers; we only keep a customer reference and subscription state. Transactional and contact email is sent via Zoho Mail.

03

How we use it

  • To match ride posts and display them to other verified APU users.
  • To operate your account, sign-in emails, and Premium entitlements.
  • To respond when you contact us.
  • We do not sell your personal data, and we do not use it for third-party advertising.
04

Sharing

Ride posts (including your display name, masked TP number, and — once matched — your Teams contact) are visible to other verified users as part of how the board works. Beyond that, data is shared only with the processors named above (Supabase, Vercel, Stripe, Zoho) to run the service, or where the law requires disclosure.

05

Retention and deletion

We keep your data while your account is active. To access, correct, or delete your data — including full account deletion — email contact@apride.net from your registered address and we will action it within a reasonable period. Billing records may be retained where required for tax and accounting law.

06

Your PDPA rights

Under the PDPA you may request access to and correction of your personal data, and withdraw consent to processing (which may mean we can no longer provide the service). We answer these requests via the contact below.

Questions? Email contact@apride.net or use the contact form.