Privacy Policy

Rundo respects your privacy. This policy explains what personal information we collect from drivers using the Rundo platform, why we collect it, how we use and protect it, and the rights you have under Australian privacy law.

The Rundo platform is provided by Rundo (ABN 60 165 093 312), operated from Melbourne, Victoria, Australia. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). In this policy, "we", "us" and "our" refer to Rundo; and "you" refers to a driver or applicant using the platform.

1. Information we collect

We collect only the information needed to verify drivers, operate the job marketplace, run the points system, process subscriptions, and keep the community safe. This includes:

Account and identity information

• Full name
• Australian mobile phone number (verified via one-time SMS code)
• Email address (optional, used for account recovery)
• State of residence and operating state

Verification documents

To confirm you are a legitimate commercial passenger vehicle driver, we collect images of:

• Driver's licence (front and back)
• Vehicle registration document
• Taxi / CPV plate
• Taxi meter (only if you process card, MPTP, or Cabcharge payments)
• A selfie photograph used to match your licence

These documents are stored privately and securely. They are never visible to other users and are accessible only to authorised Rundo administrators during the verification review.

Vehicle and capability information

• Vehicle type, make, model, year and registration plate
• Payment capabilities you can process (e.g. cash, card, MPTP, Cabcharge, account)

Activity and location information

• Jobs you post and bid on, including pickup and drop-off suburbs and coordinates
• Final fares you enter when closing a job, and any receipt or meter photo you upload
• Points movements recorded in your transparency ledger
• Safety reports you submit (such as runner reports), including locations
• Approximate location data used to show relevant nearby jobs and safety alerts

Payment information

Subscription payments are processed by our payment providers — Apple In-App Purchase on iOS, Google Play Billing on Android, and Stripe for any web-based transactions. Rundo does not store your full card number. Card data is handled directly by these providers under their own security standards.

Technical information

• Device identifiers and push notification tokens (so we can send you job and safety alerts)
• App usage and diagnostic data needed to operate and improve the service

2. How we use your information

We use your information to:

• Verify your identity and eligibility as a commercial passenger vehicle driver
• Operate the job marketplace, matching, and bidding features
• Run the Universal Points Engine and maintain your transparency ledger
• Process subscription payments and manage your plan
• Send push notifications about jobs, bids, payments, and safety
• Operate community safety features such as the Runner Registry
• Resolve disputes fairly using the audit trail
• Detect, prevent and address fraud, abuse, and policy violations
• Comply with our legal obligations

3. Verification and the public registry cross-check

During verification, Rundo administrators may cross-reference your declared vehicle registration and CPV plate against publicly available state registries (for example, VicRoads vehicle lookup and Safe Transport Victoria records) to confirm authenticity. We do this only to verify your eligibility, not to build any external profile of you.

4. Who we share information with

We do not sell your personal information. We share it only as needed to operate Rundo:

• Other drivers: when you post or bid on a job, limited details (such as suburbs, fare, vehicle/payment requirements, and your display name) are visible to relevant drivers. Your phone number and documents are never shared.
• Service providers: infrastructure and processors that help us run the platform, including Supabase (database, authentication and document storage, hosted in the Sydney ap-southeast-2 region), Upstash (caching), Expo (push notifications), Google Maps (location services), and our payment providers above.
• Legal and safety: authorities or third parties where required by law, or where reasonably necessary to prevent harm, fraud, or serious misconduct.

5. Where your data is stored

Your data is primarily stored in Australia, in the Supabase ap-southeast-2 (Sydney) region, supporting Australian data sovereignty. Some service providers (such as push notification and maps services) may process limited data outside Australia. Where that occurs, we take reasonable steps to ensure your information is handled consistently with the Australian Privacy Principles.

6. How long we keep your data

We keep your information for as long as your account is active and as needed to provide the service. Points ledger and audit records are kept as an immutable record to support transparency and dispute resolution. Where an application is rejected, limited records may be retained to enforce the policy preventing immediate re-registration and to prevent fraud. We delete or de-identify information when it is no longer needed, subject to our legal obligations.

7. Security

We take reasonable technical and organisational measures to protect your information, including row-level access controls in our database, signed and private URLs for verification documents, and restricted administrator access. No system is completely secure, but we work to protect your data against unauthorised access, loss, or misuse.

8. Your rights

Under the Australian Privacy Principles you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or out-of-date information
• Ask questions or make a complaint about how we handle your information

To exercise any of these rights, contact us at support@rundo.com.au. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Notifications and marketing

You can control most notification categories in the app's settings. Some notifications — such as safety alerts and payment failures — are essential to the service and cannot be disabled. We will only send you marketing messages where permitted, and you can opt out at any time.

10. Children

Rundo is intended for licensed commercial passenger vehicle drivers and is not directed at anyone under 18. We do not knowingly collect information from minors.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "last updated" date and, where appropriate, notify you in the app.