Privacy Policy

Last updated 27 October 2026

Sehala is a driving app for Malaysia: trip tracking, navigation, toll and fuel costs, performance timing, your garage and a driving community. It is available at sehala.my, as a web app at sehala.my/app and as an Android app. This policy explains what we collect, why, who we share it with, and the choices you have. "Sehala", "we" and "us" mean the operator of Sehala.

What we collect

• Account details: your email address and password (stored encrypted by our sign-in provider). If you sign in with Google, we receive your name, email address and profile picture from Google.
• Profile: the name, username and photo you choose, and your app settings.
• Cars: the cars you add to your garage (make, model, year, specifications, modifications) and the car photos you take or upload.
• Location while you drive: when you start a drive, navigation or a timing run, the app uses your device's GPS. For each trip we save the route you drove (a thinned-out list of GPS points with speed and time) and a summary (start and end time, distance, duration, top and average speed, hard braking count). Timing runs save the result (for example your 0–100 km/h time) with your car.
• Destinations and routes: when you search for a place or ask for directions, your search text, your position and the destination are sent to get the route.
• Road reports: hazards you report are saved with their location so other drivers can see them.
• Expenses: fuel, toll, maintenance and other costs you log.
• Community: posts, shared garages, friend requests, blocks and reports you make.
• Device and usage: a push notification token if you allow notifications, and basic service logs (time, request type, errors) that our hosting providers keep to run and secure the service.

How we use it

• To run your account and show your trips, garage, expenses and timing results.
• To give directions, estimate tolls and fuel costs, and show speed limits and road reports.
• To recognise a car from a photo you take, so you don't have to type it in.
• To show leaderboards and community features you take part in.
• To send account emails (confirming your email, resetting your password) and notifications you allow.
• To keep the service secure, prevent abuse and fix problems.

We do not sell your personal information and we do not show advertising.

What other people can see

Your trips and expenses are private to you. Other drivers can see your name, username and profile photo, timing results that appear on leaderboards, road reports, and anything you post or share in Community (including a shared garage and its car photos). Car photos are stored at web addresses that anyone with the link can open.

Services we use

We share only the data each service needs to do its job:

• Supabase: database, sign-in and photo storage.
• Cloudflare: hosting of the website and web app, and one of the car-recognition services.
• Google: Google Sign-In; Google Maps Platform for place search and routes; Google Gemini for car recognition from photos.
• Groq: car recognition from photos, used when other services are unavailable.
• Resend: sending account emails.
• Expo: delivering push notifications.
• OpenStreetMap data: maps and speed limits are downloaded to your device; your location is not sent for this.

Some of these providers process data outside Malaysia.

Google user data

If you sign in with Google, Sehala receives only your name, email address and profile picture, and uses them only to create and identify your Sehala account. Sehala's use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements.

How long we keep it

We keep your information while your account exists. When you delete your account, your profile, cars, trips, timing results, expenses, posts and photos are deleted. Records of car-recognition attempts and reports you made about other users are kept without your name attached. Service logs kept by our providers expire on their own schedules.

Your choices and rights

• Edit your profile, cars and expenses in the app at any time.
• Delete your account yourself in the app under More → Profile & account → Delete account, or email us.
• Turn off location or notification permissions in your device settings (driving features need location to work).
• Under Malaysia's Personal Data Protection Act 2010 you may ask to see or correct the personal data we hold about you.

Security

Data is sent over encrypted connections, and database access rules let each account read only its own private data. No system is perfectly secure, so please use a strong password.

Children

Sehala is meant for drivers and is not directed at children under 13.

Changes

If we change this policy we will update the date above, and tell you in the app for important changes.

Contact

Questions or requests: support@sehala.my