Privacy Notice

Last updated: 15 August 2026 · Version 1

This app needs a powerful permission to work. This page explains exactly what it does with

it, and what it deliberately does not do.

1. The accessibility permission, in plain terms

To read a booking card, Lapak uses Android's accessibility service. That permission

is broad: technically it allows an app to read anything on your screen.

We restrict it in code, not just in policy.

The app only reads windows that belong to:

• Rapido driver (com.rapido.rider)
• Ola Partner (com.olacabs.oladriver)
• Uber Driver (com.ubercab.driver, com.ubercab.partner)

Anything else on your screen — WhatsApp, your bank, your messages, your gallery, your

browser — is discarded before a single character is examined. This is enforced in one place

in the code, and there are automated tests that fail the build if it stops being true.

2. What we never read, even inside a driver app

Driver apps show more than booking cards. So even within them, the following are removed

before anything can be saved:

• One-time passwords and verification codes
• Card, account and long numbers
• Phone numbers, yours and your customers'
• Email addresses and UPI IDs
• Long tokens that could be credentials

We removed the notification-reading permission from the app entirely. It was added briefly

to test whether bookings arrive as notifications; they do not, so keeping a permission that

could see every OTP on your phone was not justified.

3. What stays on your phone and never leaves it

• Your rules and settings
• Your decision history — which bookings were accepted or declined and why
• Pickup and drop addresses, area names and fares from the cards you were shown
• Diagnostic captures used to fix parsing problems

These are stored in the app's private storage, where other apps cannot read them, and are

deleted when you uninstall. We never upload them.

4. What we do send to our server

• Your mobile number — this identifies your subscription
• Your phone model, Android version, app version, and Android ID — to bind your

subscription to one device and to support you

• Counts: how many bookings were read, accepted and declined. Numbers only, no details
• Payment reference, amount and the transaction ID you enter
• Your payment screenshot, if you attach one, so we can confirm the payment
• Anything you write to us in Help, plus your phone's technical report

5. What we never send

• Your location. The app does not request location permission at all
• Pickup or drop addresses
• Customer names or phone numbers
• Individual fares
• Screen content from any app other than the ones listed above

6. Payment screenshots

Kept only until your payment is confirmed and for a reasonable period afterwards for our

records. Please crop out anything you do not want us to see — we only need the amount and

the transaction reference.

7. How long we keep things

• Account and subscription records: while your account exists, plus what tax rules require
• Support conversations: two years
• Counts and diagnostics: 90 days

Ask us through Help to delete your account and we will remove your personal data, except

what we must keep for accounting.

8. Who else sees it

Nobody. We do not sell your data, we do not share it with advertisers, and we do not send

it to Rapido, Ola, Uber or Porter. Our server is operated by us.

9. Your rights

Ask us through Help for a copy of what we hold, to correct it, or to delete it.

10. Contact

Use Help inside the app.