Privacy Policy

Who we are

MoveOnLah is a navigation and live traffic app for drivers in Malaysia. MoveOnLah is the data user (controller) for the personal data described here and processes it in line with Malaysia's Personal Data Protection Act 2010 (PDPA), as amended.

Your consent

You must actively agree to this policy before signing in. You can withdraw consent at any time by signing out and asking us to delete your account; some features will then stop working.

Location

With your permission, the app reads your device's precise GPS location only while it is open, to show your position, guide and reroute you, and attach a location to reports you choose to submit.

We do not track your location in the background, build location histories or sell location data.

Account

When you sign in (email and password, Google or Lovable) we store your email address and basic profile so your saved places (such as Home and Work) and submissions belong to your account.

Driver reports

Reports you submit (police, hazard, traffic, accident, speed camera) store only the report type, location, time and vote counts. Other nearby signed-in drivers see the report but never your identity. Votes are counted once per driver.

Searches and routes

Destination searches, nearby searches and route requests are sent to Google Maps Platform to return places, routes and live traffic.

AI features

When you ask for route advice, only route summaries (time, distance, traffic, tolls) and the priorities you choose are sent to an AI service — not your identity or GPS history. When you generate a premium voice pack, only the fixed navigation phrases are sent for speech generation. AI output never starts navigation on its own.

Sponsored places and advertisers

Businesses that advertise provide business name, category, location, contact details, offers and, for invoicing, billing information. This data is visible to that business and to our administrators; only approved listings and their live offers are shown publicly.

Sponsored listings are clearly labelled and never change your route. To measure them we record anonymous events (listing shown, opened, directions, call or website tap) with only the listing and time — no user or device identifier.

Stored on your device

Voice recordings, downloaded voice packs, your uploaded car icon, theme, avatar and music choices are stored only on your device and are not uploaded.

Microphone and media

The microphone is used only while you record a custom voice pack. Music playback uses the YouTube player under YouTube's own terms.

Support and email updates

If you acknowledge a donation while signed in, we store the amount you report, the acknowledgement date and your account identifier in your private support history. These are self-reported records, not verified bank payments or tax receipts. Payment transfers take place in your banking or wallet service; we do not receive card details through the App.

Project updates require a separate, optional email consent. With that consent we send your email address and subscription choice to Klaviyo to manage updates and unsubscribes; Klaviyo may process this information outside Malaysia. Donating does not automatically subscribe you. Existing stored subscribers are not automatically transferred. You can unsubscribe using the emails you receive or request deletion through our contact below. Thank-you email delivery is not enabled until the sender domain is configured.

Third parties and transfers

We use Google Maps Platform, YouTube, an AI service provider, and our hosting and database providers. They may process data outside Malaysia under their own privacy policies and safeguards. We do not sell personal data or share it for third-party advertising.

Security

Data is encrypted in transit. Database access is restricted per user by row-level rules, admin actions require a verified administrator role, and billable map and AI services are only reachable by signed-in users. We regularly run security scans and fix findings.

If a data breach is likely to cause you significant harm, we will notify affected users and the authorities as required by law.

Retention and deletion

Driver reports expire automatically. Anonymous listing statistics are kept in aggregate for business reporting. Invoices are kept as long as required by tax law. You can request deletion of your account and associated data at any time and we will complete it within 30 days.

Your rights

Under the PDPA you may request access to and correction of your personal data, limit its processing, or withdraw consent. Contact us below; we respond within 21 days.

Children

MoveOnLah is not directed at children under 13 and we do not knowingly collect their data.

Legal basis and purposes

We process personal data only to provide navigation, safety reports, accounts, sponsored listings and support, to keep the App secure, and to meet legal obligations. We do not use your data for purposes beyond these without asking you.

Disclosure required by law

We may disclose personal data where required by law, court order or a lawful request from authorities, or to protect the safety of users, the public or MoveOnLah.

Your responsibilities

Do not include other people's personal data, licence plates or faces in reports or uploads. Keep your device and account secure. Data you share outside the App is under your own control.

Limits

No system is completely secure. While we take reasonable steps under the PDPA Security Principle, we cannot guarantee absolute security, and we are not responsible for data handled by third-party services under their own policies. Use of the App is also governed by our Terms of Use.

Changes

We will update the date below and notify you in the app when this policy changes materially.

Contact

Privacy questions, data requests or security reports: shahzackhry@gmail.com