Security Policy

This Security Policy (the "Policy") applies to the RutaPro mobile application, the website https://rutapro.app, and digital services operated by RutaPro Labs S.A.P.I. de C.V., a subsidiary of GRUPO FERNSBY S.A. DE C.V..

This Policy is intended for independent drivers using mobility platforms such as Uber and DiDi, and describes how RutaPro protects the confidentiality, integrity, and availability of information processed in connection with profitability analysis, financial management, and safety backup features.

Using RutaPro implies acceptance of the principles described herein. For questions about privacy or complementary terms of use, contact us at the email address provided at the end of this document.

RutaPro adopts a security-by-design and privacy-by-default approach. Our guiding principles are:

RutaPro does not sell or commercialize personal data. Information that may be processed locally on your device includes, by way of example:

RutaPro does not access your Uber or DiDi account. We do not request third-party credentials or intercept communications outside the functional scope you authorize.

To protect information under our control, we implement the following measures:

RutaPro requests only the permissions necessary for operation. On Android, this may include overlay or accessibility permissions to read on-screen information during app operation, always with your explicit consent when enabling the feature.

You may revoke these permissions at any time from your phone settings. Revocation may limit or disable certain real-time analysis features without affecting access to other app tools.

RutaPro offers optional monitoring and backup tools during your shift. These features are designed to support your personal safety as a driver and operate according to settings you define.

Data generated by these features is handled with the same confidentiality standard described in this Policy. RutaPro does not secretly record audio or video, nor access your camera or microphone without a voluntary, visible action on your part.

Data stored locally on your device remains under your control. You may delete financial records, reset preferences, or uninstall the application at any time, which removes associated information from your phone.

RutaPro Labs does not keep cloud copies of your trip content or screenshots, given the local processing model described in this Policy.

Anonymized technical diagnostic logs, if any and only with your consent, are retained for the time strictly necessary to resolve incidents and improve app stability.

Under applicable data protection legislation — including, for users in the United States, relevant state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA) where applicable — you may exercise the following rights:

To exercise these rights, send a request to hola@rutapro.app with your name, contact method, and a clear description of your request. We will respond within a reasonable timeframe under applicable law.

RutaPro Labs S.A.P.I. de C.V. operates from México and provides services to drivers across Latin America and the United States. If you use RutaPro in the United States, you acknowledge that the service provider is the Mexican entity identified in this document.

We commit to respecting applicable data protection standards in each jurisdiction and to handling data subject requests according to local timelines and procedures, to the extent compatible with our corporate structure.

Local data processing on your device reduces the risk of international transfers of sensitive personal information.

RutaPro is intended exclusively for adult drivers who meet legal requirements to operate on mobility platforms in their country. We do not intentionally collect data from anyone under 18. If we detect such a situation, we will delete the corresponding information.

RutaPro Labs S.A.P.I. de C.V. maintains an internal procedure to identify, contain, and respond to incidents that may compromise information security or service continuity.

In the event of an incident affecting personal data under our control that poses a significant risk to your rights, we will notify you without undue delay through available contact methods and, where required by law, inform competent authorities.

We may update this Policy to reflect changes in our security practices, app functionality, or legal requirements. We will publish the current version on this page and indicate the last updated date.

We recommend reviewing this document periodically. Continued use of RutaPro after an update constitutes your acceptance of the changes, unless additional consent is required by law.

This Policy is governed by the laws of the United Mexican States. For any dispute arising from its interpretation or enforcement, the parties submit to the jurisdiction of the competent courts of Ciudad de México, México, waiving any other venue that may correspond to them.

Notwithstanding the above, users in the United States retain non-waivable rights recognized by applicable federal and state consumer and privacy laws.