Last updated: March 2026
This Privacy Policy describes how Guana ("we," "us," or "our") collects, uses, and protects your personal information when you use the Guana mobile application and website (collectively, the "Platform"). By using the Platform, you consent to the practices described in this policy.
We collect information you provide directly when creating and using your Guana account. This includes:
We also collect certain information automatically when you use the Platform:
Location data is collected only when the app is in active use — specifically during trip searches and live trip tracking. Location data is not collected in the background and is not retained beyond what is necessary for trip records.
The app may request access to your device camera and photo library for profile photo uploads and identity document scanning during verification. NFC access is used to read identity document chips during verification. Microphone access may be requested during video verification. These permissions are requested only when needed and can be managed through your device settings.
We use the information we collect to:
We process your personal data based on the following legal grounds:
Contract performance: Processing necessary to provide the ridesharing service you requested, including account creation, trip matching, and communication between users.
Legitimate interests: Processing necessary for our legitimate business interests, such as improving the Platform, preventing fraud, and ensuring user safety, where those interests are not overridden by your rights.
Consent: Where you have given explicit consent, such as for identity verification, location data collection, and push notifications. You may withdraw consent at any time through the app settings or by contacting us.
Legal obligation: Processing necessary to comply with applicable laws and regulations.
We use the following third-party services to operate the Platform:
Supabase: Our primary database and backend infrastructure provider. Your data is stored on Supabase servers hosted on Amazon Web Services (AWS). Supabase processes data in accordance with their privacy policy and applicable data protection regulations.
Didit: Our identity verification provider. When you verify your identity, Didit processes your government-issued ID, NFC chip data, and selfie to confirm your identity. Didit's processing is governed by their own privacy policy.
Google Sign-In and Apple Sign-In: If you choose to sign in using Google or Apple, these services share your name and email address with us to create or access your account. We do not receive your Google or Apple password.
We do not use third-party advertising services. We do not use tracking cookies or cross-app tracking technologies. We do not sell, rent, or share your personal information with third parties for their marketing purposes.
Your profile information (name, photo, verification status, and ratings) is visible to other Guana users when you publish a trip or book a seat. Trip details are shared between drivers and passengers matched on the same trip.
We may share your information in the following limited circumstances:
We retain your personal information for as long as your account is active or as needed to provide services. Trip records are retained for a reasonable period to support dispute resolution, safety reviews, and legal compliance.
If you request account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law or necessary to resolve pending disputes. Identity verification data held by our verification provider is subject to their retention policies.
Aggregated, anonymized data that cannot identify individual users may be retained indefinitely for analytical purposes.
We implement industry-standard security measures to protect your data. All network communications use HTTPS encryption. Sensitive data stored locally on your device is encrypted using AES-GCM. Authentication tokens are stored securely in the device keychain.
While we strive to protect your personal information, no method of electronic transmission or storage is completely secure. We encourage you to use strong, unique passwords and to keep your device software up to date.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law.
You have the following rights regarding your personal data:
To exercise any of these rights, use the relevant options in the app settings or contact us at soporte@guana.app. We will respond to your request within 30 days.
You may also opt out of non-essential push notifications through the app settings. Transactional notifications related to active trips cannot be disabled for safety reasons.
Guana is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
Users must be at least 18 years of age to create a Guana account and use the Platform as a driver or passenger.
Your data is stored on servers located in the United States through our infrastructure provider (Supabase/AWS). By using the Platform, you consent to the transfer of your information to the United States and other jurisdictions where our service providers operate.
We ensure that appropriate safeguards are in place for international data transfers, including contractual protections with our service providers.
We may update this Privacy Policy from time to time. The most current version will always be available on the Platform with the "Last updated" date at the top.
If we make material changes, we will notify you through the app or by email at least 30 days before the changes take effect. Your continued use of Guana after the effective date constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your data, please contact us at:
