eyyo! lets vehicle owners and other drivers exchange messages by number plate without revealing who they are to each other. This policy explains what we collect to make that work, how we use it, and the choices you have. It is written to be read, not skimmed past; if anything is unclear, ask us through the contact form.

1. Who we are

eyyo! is operated from Malaysia and is available at eyyo.me. We are the data controller for the personal data described here. This policy is written with the Personal Data Protection Act 2010 (Malaysia) in mind and applies to everyone who uses the service, wherever they are.

2. What we collect

Account details. Your name, email address and the country you drive in when you register, and the date you joined. If you joined through another member's invite link or code, we record which account invited you; that member sees only how many people joined with their code, never who. There is no password: sign-in uses one-time codes sent to your email, and we store only a hashed copy of each code for the ten minutes it is valid.

Vehicles. Number plates you add, plus anything optional you attach to them: a photo, nickname, make, model, year, country and private notes.

Messages. Every message you send or receive, any photo attached to it, the plate it concerns, when it was sent, read and delivered, and any flags or reports made on a conversation, including the reason and details given. Attached photos are resized and re-encoded, their location and camera metadata removed, stored under a random file name outside the public web folder, and shown only to the two participants and, when a conversation is reported, to moderators.

Ownership disputes. If you claim a plate that another account holds, the explanation you give and the proof document you upload (for example a vehicle grant), which may contain your identity card number, address and other details printed on that document.

Profile photo. If you upload one. We strip location and camera metadata from every image before storing it.

Technical data. Standard server logs (IP address, browser type, pages requested, timestamps) kept for security and debugging, and, if you turn notifications on, the push subscription your browser gives us.

Preferences stored on your device. Your theme choice and whether you dismissed the install guide are kept in your browser's local storage and never sent to us.

Usage statistics. We keep our own aggregate, anonymous statistics about how eyyo! is used: pages viewed, device type, operating system, browser, the site that referred you, and product events such as "a message was sent". No cookies or third-party analytics services are involved, no IP address is stored, and visitors are counted with a code that changes every day so it cannot be joined across days. Raw records are deleted after 90 days; only daily totals are kept. If your browser sends the Global Privacy Control signal, we do not record your page views at all.

We do not collect your location, your contacts, or payment details. We do not use advertising trackers.

3. How we use it

• To deliver messages to the right plate and show you the chats you are part of.
• To sign you in and keep you signed in on your devices.
• To notify you of new messages by push notification, if you turn it on, and to send account emails such as sign-in codes.
• To resolve ownership disputes between accounts claiming the same plate.
• To review reports and flags, enforce the Terms of use, and apply moderation outcomes such as hiding a message or muting an account.
• To apply fair-use limits (for example how many messages a new account can send) and to detect abuse.
• To keep the service secure, backed up and working.

We rely on your consent (given when you register) and on our legitimate interest in running a safe service. We do not make automated decisions about you with legal effect; moderation decisions are taken by a person.

4. What other users see

The people you chat with never see your name, email, photo, vehicle details or other plates. A driver writing to your car sees you as "Owner of" that plate. An owner sees a driver as "Driver" followed by a short, stable code derived from the account, so they can tell repeat drivers apart. Your name and photo are visible only to you and to our moderators, with one exception you control: if two accounts agree to become Fwenns (a Premium member asks, the other accepts, and both are told beforehand what will be shared), each sees the other's nickname, and the profile photo where that person ticked the box, in the chats between them. Either side can end this at any time, and the link is removed when an account is deleted.

What you type in a message is, of course, visible to the other participant. Do not include personal details you would not hand to a stranger.

5. Who else can see your data

Moderators. When a conversation is reported or a message is flagged, eyyo! staff read the full conversation and see the names, email addresses, account age and message counts of both participants, so that decisions can be fair. Moderators do not see private vehicle notes or photos. When you file an ownership dispute, moderators see your proof document.

Service providers. We use a hosting provider for our servers, a storage provider (Cloudflare) that holds a second copy of our backups so they survive the loss of a server, and a transactional email provider (Brevo) to send sign-in codes and account emails. Push notifications travel through the push service built into your browser (for example Apple, Google or Mozilla). These providers process data only on our instructions.

Legal requests. We disclose data when the law requires it or when a lawful request is made by the police or a court, for example in a harassment investigation. We will tell you when we are allowed to.

We never sell personal data and we do not share it with advertisers.

6. How long we keep it

• Account details: until you ask us to delete your account.
• Messages: kept while either participant has an account, so that disputes and reports can be reviewed. When a plate changes hands, the previous owner's conversations are sealed and the new owner never sees them.
• Reports, flags and moderation outcomes: kept for as long as the accounts involved exist, so repeat behaviour can be recognised.
• Dispute proof documents: kept while the dispute is open and for a reasonable period after it is resolved, then deleted.
• Sign-in codes: ten minutes.
• Server logs: rotated regularly and kept for a short period.
• Backups: encrypted at rest and kept for seven days on our server, with a second copy held by our storage provider for thirty days. Backup copies may be stored outside Malaysia. Deleting your account takes effect immediately in the live service; backups still holding the old data expire on these schedules.

7. Your rights and choices

• Access and correction. Your name, email, vehicles and messages are all visible in the app. You can change your name, photo and vehicle details yourself at any time.
• Deleting vehicles. Removing a vehicle releases the plate and seals every message you received for it.
• Deleting your account. Use Delete account at the bottom of your Profile. Your plates are released, and your name, email, photo, push subscriptions and dispute documents are erased immediately. Messages you sent remain in the recipients' chats, attributed to an anonymous driver, because they belong to that conversation too; they carry no personal data about you.
• Notifications. Turn push notifications off in the app or in your browser settings at any time.
• Withdrawing consent and complaints. You may withdraw consent by deleting your account. You may also complain to the Personal Data Protection Commissioner of Malaysia or the supervisory authority where you live.

8. Security

All traffic is encrypted in transit. Sign-in is by single-use codes with a limit on wrong attempts. Uploaded documents are stored outside the public web root and are served only to the people entitled to see them. Only our public pages (the landing page, help, this policy, the terms and the contact form) can appear in search results; the app, your messages and your uploads are not listed. No system is perfectly secure; if we learn of a breach affecting you, we will tell you.

9. Children

eyyo! is for people old enough to hold a driving licence. We do not knowingly accept accounts from anyone under 17. If you believe a child has an account, contact us and we will remove it.

10. Changes to this policy

When we change this policy we update the effective date at the top and, for significant changes, tell you in the app or by email. The Help pages describe the current behaviour of the app in plain language and are updated alongside it.

11. Contact

Questions, access requests and deletion requests: use the contact form (choose “Request”). We reply to the email address you confirm there.