Your privacy is important to us. Learn how we collect, use, and protect your information.
Last Updated: December 5, 2025
Effective Date: December 5, 2025
This Privacy Policy explains how Xtrafyl ("Xtrafyl", "we", "our", or "us") collects, uses, shares, and protects information when you use our platform, including:
By using Xtrafyl, you agree to the practices described in this policy.
This policy applies to all users of the Xtrafyl platform, including:
If you are accessing and/or using the Platform for an entity, such as the company you work for, you represent that you have authority to bind that entity to this Privacy Policy, and you agree that "you", and "your", and "yourself" as used in this Privacy Policy includes both you personally and the entity you represent. If you are accessing the Platform on behalf of only yourself as an individual, then you agree that "you", and "your", and "yourself" as used in this Privacy Policy includes only you personally as an individual. Unless otherwise specifically stated in this Privacy Policy, this Privacy Policy applies to third-party businesses, individual consumers, and all others that access and/or use the Platform.
This Privacy Policy constitutes a legally binding agreement made between you and us. By accessing and using the Platform you represent and agree that: (i) you have read and familiarized yourself with this Privacy Policy; (ii) you understand this Privacy Policy, and (iii) you are bound by this Privacy Policy. If you do not accept and agree to all of this Privacy Policy, then you MUST NOT access and/or use the Platform.
Customers
Providers
Drivers
Xtrafyl collects and uses location data, which may include precise (GPS) location.
Customer App:
Location is collected when booking a service to identify service availability and nearby providers.
Driver App:
Location is collected to:
Provider Panel:
Location-related data is used to define service areas and manage assignments.
The Driver App may collect location data even when the app is running in the background, strictly for:
Background location access is only active during an active service or shift and is never used for advertising.
The Platform may include certain functions that are accessed or modified through the Platform, which may require explicit user permission to access such functions. You acknowledge and agree that denying explicit user permission to those functions may affect or reduce your user experience, or prevent the Platform from working altogether.
Customer App:
Driver App:
Provider Panel:
You can manage app permissions through your device settings at any time. However, disabling certain permissions (such as location) may result in:
We use the collected information to:
We may share information only as necessary:
We may share your information with third parties when you have given us explicit consent to do so.
We may disclose your information if required to do so by law or in response to valid legal processes, such as subpoenas, court orders, or government investigations.
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.
We do not sell personal data. We share data with service providers as described in this Privacy Policy for business purposes only.
We retain data only as long as necessary:
When we have no ongoing legitimate business need to retain and/or process your data, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible. You may request deletion of your data at any time, subject to legal retention requirements.
Depending on your location and applicable laws, you may have the right to:
Some features may not function if required permissions (such as location) are disabled.
To exercise any of the above rights, please contact us at support@xtrafyl.com. We will respond within 30 days (or sooner if required by applicable law).
We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, and to process transactions and facilitate your requests.
We will take reasonable steps to verify your identity prior to responding to your requests. The verification steps will vary depending on the sensitivity of the personal information and whether you have an account with us.
You can also designate an authorized agent to make a request on your behalf. If you use an authorized agent, please include written permission that you have designated that agent to make the request, or proof of the agent's power of attorney. We may follow up with you to verify your identity before processing your authorized agent's request.
If you reside in the State of California, you have additional rights under the California Consumer Privacy Act ("CCPA") as described herein. This information supplements our Privacy Policy for California residents only.
Under the CCPA, you have the following rights (which are not absolute, and in certain cases, we may decline your request as permitted by law):
To exercise any of these rights, you may submit a request to support@xtrafyl.com. We will respond within forty-five (45) days (or as required under the CCPA).
If you reside in the State of Colorado, you have additional rights under the Colorado Privacy Act ("CPA"). Under the CPA, you have the right to:
We do not sell or share your personal information, as those terms are defined under the CPA.
If you reside in the State of Connecticut, you have additional rights under the Connecticut Data Privacy Act ("CTDPA"). Under the CTDPA, you have the right to:
We do not sell or share your personal information, as those terms are defined under the CTDPA.
If you reside in the State of Nevada, you have the right to request that we do not sell your personal information. Please submit your request to us at support@xtrafyl.com and we will process it accordingly pursuant to applicable Nevada law.
If you reside in the State of Utah, you have additional rights under the Utah Consumer Privacy Act ("UCPA"). Under the UCPA, you have the right to:
We do not sell or share your personal information, as those terms are defined under the UCPA.
If you reside in the State of Virginia, you have additional rights under the Virginia Consumer Data Protection Act ("VCDPA"). Under the VCDPA, you have the right to:
We do not sell or share your personal information, as those terms are defined under the VCDPA. If your appeal is denied, you may contact the Attorney General to submit a complaint.
If you are located in another jurisdiction that is not specifically discussed in this Privacy Policy, you may have rights under applicable data privacy laws to request information about or access to your personal information that we maintain, to require that inaccurate information be corrected or, in some circumstances, to object to our processing of your personal information. To exercise any rights you may have, please send your written request to us at support@xtrafyl.com.
We use industry-standard security measures, including:
No system is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security. We cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your data. Although we continuously work to protect your data, transmission of personal information to and from the Platform is solely at your own risk. You should only access the Platform within a secure environment.
You represent to us that you are over 18 years of age and are lawfully able to enter into contracts in the jurisdiction where you are a citizen. The Platform is not intended for use by persons who are under the age of 18 or are not lawfully able to enter into contracts in the jurisdiction where you are a citizen.
We do not knowingly collect or solicit data or market to persons who are a minor according to applicable local laws. If we learn that personal information from users who is a minor according to applicable local law has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you believe or become aware that we have collected information and/or data from someone who is a minor according to applicable local laws, please contact us immediately at support@xtrafyl.com.
This section explains the different types of cookies and similar technologies that may be applied on the browsers and devices of consumers who visit the Platform.
By continuing to use the Platform, you are agreeing to the use of cookies and other similar technologies for the purposes we describe in this section.
Cookies are small text files which are downloaded to your browser or device when you visit a website or an app. Most web pages and apps contain elements from multiple sources so when you use our Platform, your browser or device may receive cookies from several sources which includes, but is not limited to, third parties that provide services on our behalf, such as website and/or app analytics or ad targeting or third parties who have products on the Platform.
We use cookies and similar tracking technologies to enhance your experience on the Platform:
You can control cookie settings through your browser preferences. However, disabling certain cookies may limit and/or prevent your ability to use some features of the Platform.
You may be able to set your cookie preferences using the device you have to access the Platform. If you do not agree to the use of cookies, please disable or delete them by following the instructions for your browser(s) set out at http://www.allaboutcookies.org/manage-cookies/index.html. Please note that the Platform may not function well if cookies are disabled.
For cookies that track activity in connection with targeting advertising, you can opt-out of third party targeting cookies on the Digital Advertising Alliance's consumer choice page (http://optout.aboutads.info) or the Network Advertising Initiative's consumer choice page (http://optout.networkadvertising.org).
This Privacy Policy applies only to the content we provide on the Platform and not to any third-party products, services, sites, apps, applications, resources, advertisements, content or hosted services you may find or access through the Platform ("Third Party Content"). If you submit any information or data or access any of the Third Party Content, your data and information will be governed by those third-party's privacy policies and terms of use. We encourage you to carefully read the terms of service and privacy policy of any site and/or app you visit or hosted service you use.
The Platform may include social media features, such as share buttons and widgets. These features may collect your IP address, which page you are visiting on the Platform, may set a cookie to enable the feature to function properly and/or other things. Social media features and widgets are either hosted by a third party or hosted directly on the Platform. Your interactions with these features are governed by the privacy policy of the company providing it.
You have the right to opt-out of receiving marketing communications from us at any time by following the unsubscribe link in our emails or by contacting us directly at support@xtrafyl.com. Depending on your jurisdiction, you may also have other rights regarding your personal information. Even if you opt-out of receiving marketing communications, we will still send you transactional messages which include but are not limited to responses to your questions or emails and those related to purchases you make regarding the Platform.
Currently, various browsers offer a "do not track" or "DNT" option that relies on technology known as a DNT header which sends a signal to the websites or apps visited by the user about the user's browsers DNT preference setting. We do not currently commit to responding to browser's DNT preference across the Platform because no common industry standard for DNT has been adopted by industry groups, technology companies or regulators, including no consistent standard of interpreting user intent. We take privacy and choices regarding privacy seriously and will make efforts to continue to monitor the development around DNT browser technology and the implementation of a standard for DNT.
Our Terms and Conditions currently located at https://xtrafyl.com/terms/ (the "Terms") apply to your access and/or use of the Platform, and its terms are made a part of and incorporated into this Privacy Policy by this reference. The Terms may be changed from time to time and such changes are effective immediately upon their posting as set forth in more detail in the Terms. By accessing and/or using the Platform, you acknowledge that you have read our Terms and agree to our Terms.
If this Privacy Policy and/or the Terms conflicts with any language in any other contract we enter into with you (the "Contracts"), then the language contained in those Contracts shall govern.
We reserve the right, at our sole discretion, to change, modify, update, add or remove all or portions of this Privacy Policy from time to time. Updates will be reflected by the "Last Updated" date at the top of this Privacy Policy. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after changes indicates that you accept and agree to the changes.
This Privacy Policy, the Terms, and any policies and/or operating rules posted by us on the Platform or in respect to the Platform or otherwise, and/or any contracts we enter into with you constitutes the complete and exclusive statement of the agreement between you and us concerning this subject matter of this Privacy Policy and supersede all proposals, oral or written, and all other communications between you and us relating to the subject matter of this Privacy Policy.
This Privacy Policy does not, and shall not be construed to, create any partnership, joint venture, employer-employee, agency or franchisor-franchisee relationship between you and us. You may not assign, transfer or sublicense all or any of your rights or obligations under this Privacy Policy without our express prior written consent. We may assign, transfer or sublicense all or any of our rights or obligations under this Privacy Policy without restriction.
Our failure to exercise or enforce any condition, term or provision of this Privacy Policy will not operate as a waiver of such condition, term or provision. If any provision of this Privacy Policy is held invalid or unenforceable, the offending language shall be limited, rewritten, modified or interpreted as will render it enforceable and the remainder of this Privacy Policy shall continue in full force and effect.
If any non-English translations of this Privacy Policy are provided, it is for convenience only. In the event of any ambiguity or conflict between translations, the English version is authoritative and controls.
If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: support@xtrafyl.com