1. Who we are
ARK Accessibility Services Inc. ("ARK", "we", "our") is a Canadian corporation operating at arkaccess.ca. This Privacy Policy explains how we collect, use, and protect your personal information when you use the ARK rider or driver apps, our website, or any related services.
2. Information we collect
Account information: Phone number (required for OTP verification), name, and email address (optional).
Location data: We collect precise location when the app is open and in use. Rider apps collect location only while the app is active. Driver apps collect location in the background only during an active trip, to stream real-time position to the rider for their safety.
Ride data: Pickup and dropoff addresses, accessibility needs, trip duration, and fare.
Payment information: Processed by Stripe. We do not store full card numbers. Stripe's privacy policy governs payment data.
Device data: Push notification tokens, device type, and OS version for delivering notifications.
Accessibility profile: The accessibility needs you set (e.g., wheelchair type, service animal). This is used solely to match you with suitable vehicles and is never sold or shared with third parties.
3. How we use your information
- To match riders with accessible vehicles and drivers - To process payments and send receipts - To send ride status notifications via push and SMS - To improve matching accuracy and service quality - To investigate safety incidents and support requests - To comply with applicable Canadian law
We do not sell your personal information. We do not use your accessibility profile for any purpose other than matching you with appropriate vehicles.
4. Data sharing
We share data only with: - Stripe — payment processing - Twilio — OTP verification and SMS - Google — Maps, Directions, and Distance Matrix APIs (coordinates only; no personal identifiers) - DigitalOcean — cloud infrastructure hosting - Sentry — anonymised crash reporting - Expo — push notification delivery
5. Data retention
Account data is retained while your account is active and for 3 years after deletion, as required by Canadian financial regulations. Location history is retained for 90 days. You may request deletion at [email protected].
6. Your rights
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, you have the right to access, correct, and request deletion of your personal information. Contact [email protected].
7. Security
All data is encrypted in transit using TLS 1.3. Passwords and tokens are hashed using Argon2id. Stripe handles all payment data under PCI-DSS Level 1 compliance.
8. Contact
ARK Accessibility Services Inc. [email protected]