Privacy Policy
Rixon Road Ranger · Effective 23 August 2026
Who we are
Rixon Road Ranger ("Rixon", "we") is a roadside assistance platform operated by Hunter Analytix, Kuala Lumpur, Malaysia. It connects vehicle owners who need help (tow, battery, tyre, fuel) with independent service providers ("Rangers"). This policy covers the Rixon mobile apps and the rixon.ai website.
Data we collect
Account data: your name, Malaysian mobile number, optional email, and a hashed password. Job data: pickup and (for tows) drop-off locations, vehicle details you provide, notes, quotes, payments due, ratings, and reviews. Location data: when you request help we capture the location you share so a Ranger can reach you; while a Ranger is online or on a job, the app periodically sends their position so customers can track arrival. Device data: basic app and device information used for security and diagnostics (e.g. rate-limiting and fraud prevention). We do not collect background location when the app is closed and you have no active job (owners) or are offline (Rangers).
How we use it
To match jobs with nearby Rangers, price jobs (base fee, distance, parts, optional priority fee), show live tracking, process payment records, maintain ratings and safety, prevent abuse, and comply with legal obligations. We do not sell your personal data, and we do not use it for third-party advertising.
Sharing
When a job is matched, the owner and Ranger see the details needed to complete it: first names, the job locations, vehicle notes, and live position during the job. Infrastructure providers that process data on our behalf: Vercel (hosting, USA), Neon (database, USA), and Expo (app build and update services). Each processes data only to run the service. We may disclose data if required by Malaysian law or to protect users' safety.
Payments
Jobs are currently settled in cash on completion; we store the amounts owed and paid, not card numbers. When online payments launch (via the Curlec/Razorpay payment gateway), your card details will be handled by the payment provider and never stored on our servers.
Retention & your rights
We keep account and job records while your account is active and as required for legal, tax, and dispute purposes. Under Malaysia's Personal Data Protection Act 2010 (PDPA), you may request access to, correction of, or deletion of your personal data, or withdraw consent, by contacting us. Deleting your account removes your personal data except records we must keep by law.
Security
Data is encrypted in transit (TLS), passwords are stored as bcrypt hashes, access tokens are short-lived, and production access is restricted. No system is perfectly secure; if a breach affecting you occurs we will notify you as required by law.
Children
Rixon is for users aged 18 and over (you must be able to operate a vehicle or provide roadside services). We do not knowingly collect data from children.
Changes & contact
We will post any changes to this policy on this page with a new effective date. Questions or PDPA requests: privacy@rixon.ai.