Privacy policy

TukHop is an app for people travelling in Sri Lanka. It shows what things usually cost, plans a trip, books rides between towns, Day Passes and rental vehicles, and carries travel news. This policy covers the app and this website.

TukHop sells the rides, Day Passes and rentals you book in the app. Ceylon Lodge in Negombo looks after them with us.

As a guest, nothing that says who you are. Checking a price and reading the news need no account, and the prices you check are not stored. The app itself is counted, as explained below, but not you.

With an account, we keep:

• your name and your email address, and your password in a form nobody can read back;
• your phone number, your country and how many usually travel with you, if you add them;
• what kind of trip you said this is (backpacking or on a budget, a couple or family, or business), if you chose one;
• the trips you plan: your dates, who is travelling, what interests you, your budget, the plan itself, and what you add to it, such as bills and saved places;
• the rides you book: the route, the day, how many are travelling, your bags, and what you paid;
• the Day Passes you book: the same, and the pickup and drop-off addresses you give us, which your driver and Ceylon Lodge see;
• a private ride from your hotel or from the airport: the hotel or address, or the flight number, you give us, which your driver and Ceylon Lodge see;
• the vehicles you rent: the type, town and dates, the hotel or address you give us, that you confirmed your age, what you paid, and your cash deposit;
• the photos you send for a rental: your driving licence and permit, and your vehicle at handover and return, with its fuel and odometer reading;
• the cards you save: the brand, the last four digits, the name on the card and its expiry date. We never hold the full card number.

Your licence and permit photos. The app asks for these only after you have paid for a rental, and only the documents listed for it. We never ask for your passport. You take the photos or choose them yourself: the app sees only the photos you pick, and they are made smaller on your phone before they are sent, which removes where they were taken. They are stored privately, not on any public address. Only TukHop's administrators can see them, to check them and your age, and not reception or anyone else. Vehicle photos can be seen by TukHop's administrators and reception. We do not share your photos with the vehicle's owner.

A count of the phones the app is on. When the app is first opened, it makes up a random number for itself and keeps it on your phone. It sends that number, with whether the phone is an iPhone or an Android phone and which version of the app it has, when it downloads prices, when you sign in, and when it checks that you are still signed in. If you have said what kind of trip this is, it sends that too. We keep the number, the kind of phone, the app's version, the first and last day it was seen, whether anyone has signed in on that phone, and the kind of trip chosen on it. That is all: it is not your phone's own identifier, and we do not keep it with your account, your name or your internet address.

Your location. The app asks for it only when you tap a location button. To find the town nearest you, it works this out on your phone and sends us nothing. On a Day Pass or a rental, it can fill in your address box with where you are: you can change it, and it reaches us only if you book, as the address you gave. We do not keep your position.

This website sets no cookies, except on the delete-your-account page, where they keep the form secure. It has no advertising and no tracking.

Your location on this website. The home page can show rides from the town nearest you. Your browser asks you first. If you allow it, the nearest town is worked out in your browser, from the list of towns already on the page: your location is not sent to us and we do not keep it. Your browser remembers only that it has asked.

Like any service on the internet, our servers keep short technical records, such as the internet address a request came from, to keep the service running and safe.

To run the app for you: to sign you in, keep your trips, arrange your rides and take payment for them.

To put first in the app what fits the kind of trip you chose: prices and shared rides, or a ride to yourselves and your plans. You can change it, or not answer, and everything stays available either way.

To know how many phones use the app, how many of them have been signed in on, and what kinds of trip they are used for, from the count above. It is never used to find out who you are.

We email you only when the app needs to: a code to confirm your address, a link to reset your password, a link to delete your account, and messages about what you book. For a ride or a Day Pass, those are the booking, your driver and any change of driver, a hold on your card and any problem with it, who else is on your ride when that changes what cancelling costs, your receipt, a charge for not being on board, and a cancellation with its refund. For a rental, they are the payment, your documents and reminders about them, your vehicle, reminders of the handover and the return, your deposit, the rental closing, and a cancellation with its refund.

We do not sell your details and we do not use them for advertising.

Your first name, how many are travelling and how many bags you have. On a Day Pass your driver also sees the pickup and drop-off addresses you gave us, on a private ride from your hotel the pickup address, and on a ride from the airport your flight number. A driver does not see your surname, your email address, your phone number or what you paid.

Ceylon Lodge arranges every ride, so its staff see the bookings they are arranging: your name, your booking code, the ride, how many are travelling, and whether you have checked in and boarded.

Ceylon Lodge staff who manage the service can also see the details of your account.

TukHop staff can see your account's activity — your details, the prices you have checked, the trips you have planned and the rides you have booked — to help you if you get in touch about any of it.

• PayHere, our payment provider, which takes card payments for rides, Day Passes and rentals. Your card details go to PayHere, not to us.
• The person who hands over your rental vehicle, and its owner, who learn your name and your rental dates so the vehicle can be handed over. They do not get your document photos.
• The service that sends our email, which needs your address to deliver a message to it.
• The companies that host our servers.
• Lakbima News. News stories and their photos are loaded from lakbimanews.lk, so your phone or browser connects to that site when you read them.

We may also have to share information when the law requires it.

We keep your account, your trips and your saved cards until you delete your account.

Rides you have already taken stay in Ceylon Lodge’s records after that, with your name removed, because they are its record of the ride and of the payment.

The codes and links we email you stop working within the hour.

Licence, permit, handover and return photos are deleted automatically 30 days after your rental closes or is cancelled, or at once if you delete your account. A rental's booking and payment stay, as a ride's do.

The number the app is counted by is deleted once that phone has not opened the app online for 13 months.

• Use Price Check and News without an account.
• See and change your details in the app, under Profile. Your email address is your login and cannot be changed in the app: write to us and we will change it.
• Remove a saved card, or delete a trip, in the app.
• Ask us for a copy of what we hold about you, or to correct it. Write to the address on our Support page.

In the app, go to Profile, then Delete account. Without the app, ask for a link on this site.

Deleting your account deletes your name, email address, phone number, country and kind of trip, your planned trips, your saved cards and your rental photos, and signs you out everywhere. It cannot be undone, and you can sign up again with the same email address.

If you have a ride or Day Pass still to come, or a rental still running, cancel it first, or wait until it has ended.

The app is made for adults planning their own travel. A trip can include children, and for that we ask only how many are travelling, never who they are.

When this policy changes, the date at the top of the page changes with it. If a change matters to how we use your details, we will tell you in the app or by email.

Write to the address on our Support page.