Privacy Policy

Last updated: June 26, 2026

This Privacy Policy describes how FirstGo Team ("we", "us", or "our") collects, uses, and protects your information when you use the FirstGo mobile application ("App").

By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

Information	Purpose
Full name	Account creation and identification.
Phone number	Account login and communication.
Gender	Profile information.
Password	Account authentication (never stored in plaintext).
Passenger category (student / trainee / employee)	Optional profile information.
Payment confirmation screenshot (optional)	Used solely to verify manual payments made outside the App before adding points to your account.

1.2 Information Collected Automatically

• Firebase Cloud Messaging (FCM) device token – Used to deliver push notifications.
• App version – Used to ensure compatibility and provide updates.

1.3 Permissions Requested

Permission	Purpose
INTERNET	Required for communication with our servers.
ACCESS_NETWORK_STATE	Check internet connectivity before sending requests.
POST_NOTIFICATIONS (Android 13+)	Display push notifications.
Photos / Media access	Allow you to select a payment confirmation screenshot from your gallery.

We do not request access to your precise location, contacts, SMS, microphone, or camera. Photo access is only used when you voluntarily choose a payment confirmation screenshot.

2. How We Use Your Information

• Create and manage your account.
• Authenticate your login.
• Process bus trip bookings and subscriptions.
• Verify manually submitted payment confirmations.
• Add points to your account after successful payment verification.
• Send notifications related to bookings, subscriptions, payments, and important updates.
• Provide, improve, maintain, and secure the App.
• Comply with applicable legal obligations.

3. Data Storage and Security

3.1 Storage

• On your device: Encrypted authentication tokens (using flutter_secure_storage) and temporary cached data (using Hive CE).
• On our secure servers: Account information, bookings, subscriptions, user points, payment confirmation records, and related service data.

3.2 Security

• HTTPS/TLS encrypted communication.
• Secure Bearer Token authentication.
• Encrypted local storage for authentication tokens.
• Secure password hashing on our servers.

Although we strive to protect your personal information, no method of electronic storage or transmission is completely secure.

3.3 Data Retention

We retain your information while your account remains active or as necessary to provide our services.

If you request account deletion, we will permanently delete your personal data within a reasonable period unless we are legally required to retain certain information.

4. Data Sharing and Disclosure

4.1 Third-Party Services

We use Firebase Cloud Messaging (FCM) exclusively to send push notifications.

FCM receives your device token and notification delivery information. We do not use Firebase Analytics, Firebase Crashlytics, advertising services, or user profiling services.

Payment confirmation screenshots are used solely for manual verification of payments made outside the App and are not shared with third parties except where required by law.

4.2 No Sale of Personal Data

We do not sell, rent, trade, or share your personal information with third parties for advertising or marketing purposes.

4.3 Legal Requirements

We may disclose information if required by law or in response to valid legal requests from public authorities.

5. Your Rights

• Access your personal information.
• Correct inaccurate information.
• Delete your account and associated data.
• Withdraw your consent where applicable.
• Object to or restrict certain processing activities.

To exercise these rights, please contact us using the information below.

6. Children's Privacy

The App is not intended for children under the age of 13.

We do not knowingly collect personal information from children under 13 years old. If we become aware that such information has been collected, we will delete it promptly.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and the "Last updated" date will be revised accordingly.

8. Contact Us

If you have any questions regarding this Privacy Policy, please contact us:

Developer: NVIEX

Email: nviex.software@gmail.com

Location: Zagazig, Egypt