Privacy Policy

Welcome to Crash N Go.

Crash N Go ("Crash N Go," "we," "us," or "our") operates an online accommodation booking platform that allows property owners and hosts to list accommodations and enables guests to discover, reserve, and book properties for short-term or long-term stays.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you access or use our website, mobile application, and related services (collectively, the "Platform").

This Privacy Policy applies to all users of Crash N Go, including guests, hosts, prospective users, and individuals who communicate with us.

By using the Platform, you acknowledge that you have read this Privacy Policy. Where applicable law requires consent for a particular processing activity, we will obtain that consent separately.

We may collect the following categories of information, depending on how you use the Platform.

2.1 Personal and Account Information

When you create or manage an account, we may collect:

• Full name
• Email address
• Telephone number
• Profile photograph
• Account credentials or authentication identifiers
• Account type, such as guest or host
• Preferred language and currency
• Account settings and communication preferences
• Other information you voluntarily provide

If you use a third-party authentication service, such as Google or Firebase Authentication, we may receive account identifiers and other information made available through that service, depending on your configuration and permissions.

We do not intend to collect passwords belonging to your third-party accounts.

2.2 Host and Property Information

If you register as a host or submit a property listing, we may collect:

• Property name and type
• Country, city, and property address
• Building or property name
• Street address and unit number, where applicable
• Property photographs and descriptions
• Accommodation amenities and facilities
• Nightly prices, availability, and booking restrictions
• Cancellation policies and house rules
• Host business information, where applicable
• Host contact and payout information
• Property coordinates and map location
• Information needed to verify or manage a listing

Certain property details, including the approximate location and listing information, may be displayed publicly to help guests discover accommodations.

For safety and privacy, a property's full address may be restricted until a booking is confirmed, subject to the Platform's functionality and applicable legal requirements.

2.3 Booking and Transaction Information

When you make or manage a reservation, we may collect:

• Booking reference and reservation status
• Check-in and check-out dates
• Number of guests
• Accommodation details
• Booking price and applicable fees
• Discounts, promotions, and rewards applied
• Payment status and transaction references
• Cancellation, refund, and dispute information
• Check-in completion records
• Booking-related communications

We use this information to process reservations, calculate applicable charges, administer refunds, provide customer support, and maintain accurate transaction records.

2.4 Payment and Payout Information

Crash N Go may work with third-party payment service providers to process guest payments and host payouts.

Depending on the payment methods and providers available, we may process or receive information such as:

• Payment method and transaction status
• Payment provider transaction identifiers
• Amount paid and currency
• Billing information required for a transaction
• Refund and chargeback information
• Host payout details and payout status

Payment card details and other sensitive payment credentials may be collected and processed directly by the relevant payment provider.

We do not claim to store full payment card details unless our actual payment infrastructure is specifically designed and authorized to do so.

Payment providers may process information under their own privacy policies and applicable legal obligations.

2.5 Location Information

We may process location information to help users find accommodations in their preferred destinations.

Depending on the Platform's functionality and your permissions, this may include:

• Country and city selected during a search
• Location entered into the search bar
• Approximate location derived from technical information, where permitted
• Device location, if a location-based feature is available and you grant the required permission
• Property coordinates used to display listings on a map

We may use mapping and location services to display property locations and help hosts identify their properties.

We do not intend to publicly disclose a host's full property address before booking confirmation when the Platform is designed to restrict that information.

You may be able to disable device location permissions through your device settings. Certain location-based features may not function properly if you disable them.

2.6 Communications and Messages

When users communicate through Crash N Go, we may collect and process:

• Messages between guests and hosts
• Customer support inquiries
• Attachments, photographs, or other media sent through the Platform
• Message timestamps and delivery information
• Information submitted through feedback, complaints, or dispute processes

Where supported and enabled, communications may include voice messages, video, reactions, or translation features.

We use communication information to facilitate reservations, provide support, investigate reported problems, enforce our policies, and protect the Platform against misuse.

Users should avoid sharing unnecessary sensitive personal information through messaging features.

2.7 Reviews, Rewards, and User Activity

Where these features are available, we may collect information relating to:

• Reviews and ratings
• Saved properties or other preferences
• Booking history
• Check-in completion
• Passport stamps and city visits
• CrashStamp reward balances and redemption
• Promotional offers and eligibility
• Interactions with Platform features

We use this information to provide relevant features, administer rewards, improve our services, and prevent fraudulent or abusive activity.

2.8 Technical and Usage Information

When you access the Platform, we or our service providers may automatically collect certain technical information, where enabled and permitted, including:

• IP address
• Browser type and version
• Device type and operating system
• Application version
• General usage and diagnostic information
• Pages or screens viewed
• Access times and interaction events
• Error logs and performance information
• Security-related event records

The information collected depends on the Platform's technical configuration and the services integrated into it.

2.9 Cookies and Similar Technologies

Our website may use cookies, local storage, and similar technologies to:

• Keep users signed in
• Maintain session security
• Remember preferences
• Support essential website functionality
• Understand website performance
• Measure usage and improve the user experience
• Support analytics or other services, where enabled

You can manage certain cookies through your browser settings. Disabling essential cookies may affect website functionality.

Where required by law, we will obtain consent before using nonessential cookies or similar technologies.

Mobile applications may use different technologies for session management, analytics, diagnostics, and preferences.

We may use personal information for the following purposes:

• To create, authenticate, and manage user accounts.
• To allow guests to search for accommodations and make reservations.
• To allow hosts to create, manage, and promote property listings.
• To process bookings, payments, refunds, and host payouts.
• To calculate service fees, commissions, discounts, and applicable charges.
• To communicate booking confirmations, reminders, updates, and important notices.
• To facilitate guest-host messaging and customer support.
• To administer check-ins, booking completion, and applicable rewards.
• To personalize the Platform's language, currency, and user preferences.
• To provide map-based property discovery and location-related functionality.
• To detect and prevent fraud, unauthorized access, and misuse.
• To enforce our Terms of Service, booking rules, and other applicable policies.
• To resolve disputes and investigate complaints.
• To maintain financial, operational, and transaction records.
• To monitor, analyze, and improve Platform performance.
• To maintain the security, reliability, and integrity of our systems.
• To comply with legal obligations and respond to lawful requests.
• To send promotional communications where permitted by law and consistent with your preferences.
• To exercise, establish, or defend legal claims where necessary.
• To carry out other purposes disclosed to you at the time information is collected.

We will not use personal information for purposes that are incompatible with the original purpose of collection unless permitted by law or otherwise appropriately authorized.

Where applicable data protection law requires a legal basis for processing personal information, we may rely on one or more of the following:

4.1 Contractual Necessity

Processing necessary to create your account, provide requested services, manage reservations, process payments, and fulfill our obligations under our agreements with you.

4.2 Consent

Processing based on your consent, such as certain optional permissions, marketing activities, or nonessential cookies where consent is required.

You may withdraw consent where applicable, although doing so does not affect the lawfulness of processing performed before withdrawal.

4.3 Legitimate Interests

Processing necessary for legitimate business interests, such as securing the Platform, preventing fraud, improving services, and handling disputes, provided those interests do not override applicable legal protections.

4.4 Legal Obligations

Processing necessary to comply with applicable laws, regulatory requirements, tax obligations, recordkeeping requirements, or lawful government requests.

4.5 Other Lawful Bases

Where applicable, we may rely on other legal bases permitted under the data protection laws governing the relevant processing activity.

We do not make personal information publicly available indiscriminately. However, we may share certain information with the following categories of recipients when necessary and lawful.

5.1 Guests and Hosts

To facilitate reservations, we may share relevant information between guests and hosts.

For example, a host may receive information necessary to manage a confirmed booking, while a guest may receive information needed to identify and access the booked accommodation.

We seek to limit shared information to what is reasonably necessary for the relevant transaction or service.

5.2 Payment Service Providers

We may share transaction and payment information with payment processors, banks, and other financial service providers to process payments, refunds, payouts, and disputes.

5.3 Technology and Infrastructure Providers

We may use third-party providers for services such as:

• Cloud hosting and database infrastructure
• Account authentication
• Website and mobile application operation
• Mapping and geolocation
• Email and communication delivery
• Push notifications
• Analytics and application diagnostics
• Security monitoring and fraud prevention
• File and media storage

These providers may process personal information on our behalf or for their own purposes, depending on the service and their contractual arrangements.

5.4 Customer Support and Business Operations

We may share relevant information with authorized personnel, contractors, or service providers who help us operate the Platform, provide support, investigate disputes, or maintain our services.

Access should be limited according to legitimate business needs and appropriate security controls.

5.5 Legal and Regulatory Authorities

We may disclose personal information when reasonably necessary to:

• Comply with applicable laws or lawful legal processes
• Respond to valid requests from competent authorities
• Protect the rights, safety, and property of users or Crash N Go
• Investigate suspected fraud or unlawful activity
• Establish, exercise, or defend legal claims

5.6 Business Transfers

If Crash N Go undergoes a merger, acquisition, restructuring, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to applicable legal requirements and appropriate safeguards.

5.7 With Your Direction or Consent

We may share information with other parties when you request or authorize us to do so, or when disclosure is otherwise permitted by law.

We do not claim that we never share personal information. Certain sharing is necessary to provide accommodation booking, payment processing, and other Platform services.

Crash N Go may serve users in different countries. Our service providers, hosting infrastructure, or business operations may be located in countries other than the country in which you reside.

As a result, personal information may be transferred to or accessed from other jurisdictions.

Where applicable law requires safeguards for international transfers, we will take appropriate steps to comply with those requirements.

The privacy protections and legal requirements of other countries may differ from those in your country of residence.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods may depend on:

• Whether your account remains active
• The nature of the information
• The status of your reservations
• Applicable accounting and tax requirements
• Fraud prevention and security needs
• Dispute resolution and legal obligations
• Regulatory recordkeeping requirements

Booking, payment, and financial records may need to be retained after an account is closed.

When personal information is no longer required, we will take appropriate steps to delete it, anonymize it, or otherwise dispose of it securely, subject to applicable law and legitimate retention requirements.

We take reasonable technical, organizational, and administrative measures designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.

Depending on the systems involved, these measures may include:

• Access controls and role-based permissions
• Authentication and account security measures
• Encryption in transit where supported and appropriately configured
• Security monitoring and logging
• Backup and recovery procedures
• Restricted access to sensitive operational information
• Security assessments and maintenance

No website, mobile application, database, or electronic transmission can be guaranteed to be completely secure.

Although we take reasonable precautions, we cannot guarantee absolute security. Users should protect their login credentials and notify us promptly if they suspect unauthorized access to their accounts.

Depending on your country of residence and applicable law, you may have rights concerning your personal information.

These rights may include:

9.1 Right to Access

You may request information about the personal information we hold about you and how we process it.

9.2 Right to Correction

You may request the correction of inaccurate, incomplete, or outdated personal information.

9.3 Right to Deletion

You may request deletion of personal information, subject to legal requirements and circumstances in which we are permitted or required to retain it.

9.4 Right to Withdraw Consent

Where processing relies on your consent, you may withdraw that consent, subject to applicable law.

9.5 Right to Object or Restrict Processing

Where applicable, you may object to certain processing activities or request restrictions on how we process your personal information.

9.6 Right to Data Portability

Where applicable, you may request a copy of certain personal information in a structured, commonly used, machine-readable format.

9.7 Right to Complain

You may have the right to submit a complaint to the relevant data protection authority in your jurisdiction.

9.8 Marketing Preferences

You may opt out of promotional emails by following the unsubscribe instructions provided in the message, where available. You may also contact us to update your preferences.

Opting out of marketing does not prevent us from sending necessary service-related communications, such as booking confirmations, security notices, or important account updates.

9.9 How to Exercise Your Rights

To submit a privacy request, contact us using the details provided in the Contact Us section.

We may need to verify your identity before responding to a request.

We will handle requests in accordance with applicable legal requirements and may explain when a request cannot be fulfilled in full.

You may request the deletion of your Crash N Go account through the account settings or other account deletion mechanism made available by the Platform, where available.

You may also contact us to request account deletion.

When processing an account deletion request, we will take appropriate steps to delete or de-identify personal information that is no longer necessary to retain.

Some information may need to be retained where required or permitted by law, including information relating to completed transactions, accounting records, fraud prevention, security, disputes, and legal obligations.

Deleting your account may affect your ability to access booking history, rewards, messages, or other account features.

Where applicable, we will provide any required disclosures concerning the consequences of account deletion.

Crash N Go is not intended for children who are below the minimum age required to independently use the Platform under applicable law.

We do not knowingly collect personal information from children in violation of applicable legal requirements.

Where parental or guardian consent is legally required, we will handle the relevant information in accordance with applicable law.

If you believe that a child has provided personal information inappropriately, please contact us so that we can review the situation and take appropriate action.

The Platform may use or link to third-party websites, applications, authentication services, mapping services, payment providers, or other external services.

These third parties may collect or process personal information according to their own privacy policies and practices.

Crash N Go does not control the privacy practices of independent third parties. We encourage users to review the relevant privacy policies before using their services.

The inclusion of a third-party service does not mean that Crash N Go endorses every privacy practice of that service.

Where enabled, Crash N Go and its service providers may use cookies, software development kits, analytics tools, and similar technologies to understand usage, maintain functionality, identify technical issues, and improve the Platform.

The technologies used may differ between the website and mobile application.

We will provide any required notices and obtain consent where applicable law requires it.

We will not represent that a particular analytics or tracking technology is used unless it is actually implemented.

We may send service-related communications concerning your account, reservations, payments, security, and changes to our policies.

Where permitted by law, we may also send promotional communications about Crash N Go services, special offers, or other relevant updates.

You can opt out of marketing communications through the available unsubscribe mechanism or by contacting us.

Even if you opt out of promotional communications, we may continue to send communications necessary to provide the services you request or comply with legal obligations.

We may update this Privacy Policy from time to time to reflect changes in our services, technology, business operations, or applicable legal requirements.

When we make changes, we will update the "Last Updated" date at the beginning of this document.

Where required by law, we will provide additional notice or obtain consent before implementing material changes.

We encourage you to review this Privacy Policy periodically.

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a concern about how your personal information is handled, please contact us.

• Company/Platform: CRASHANDGO ACCOMMODATION RESERVATION SERVICES
• Website: https://crashngoapp.com
• Privacy Contact Email: support@crashngoapp.com
• Business Address: Salinas Drive, Barangay Lahug, Cebu City, 6000 Cebu, Philippines.

If Crash N Go has formally designated a Data Protection Officer or privacy representative, their contact details should be provided here where required by applicable law.

We will review and respond to privacy inquiries in accordance with applicable legal requirements.

Where the Philippine Data Privacy Act of 2012 and its implementing rules apply, Crash N Go will handle personal information in accordance with applicable requirements.

Subject to the law and the circumstances of processing, data subjects may have rights relating to being informed, access, correction, erasure or blocking, objection, damages, data portability, and filing a complaint with the National Privacy Commission.

Requests and complaints may be submitted using the contact details provided in Section 16.

Crash N Go will assess and respond to requests in accordance with applicable law.

Where the GDPR or UK GDPR applies, users may have additional rights and protections, depending on the circumstances.

These may include rights of access, rectification, erasure, restriction of processing, objection, and data portability.

Where processing relies on consent, users may withdraw consent without affecting the lawfulness of processing performed before withdrawal.

Users may also have the right to complain to their relevant data protection supervisory authority.

Where legally required, Crash N Go will provide additional information about its applicable legal basis for processing, international data transfers, and relevant safeguards.

Where applicable California privacy laws cover Crash N Go and the relevant processing activities, California residents may have rights concerning access to, correction of, deletion of, and disclosure about the use of their personal information.

Depending on the law's applicability and the circumstances, residents may also have rights to opt out of certain sales or sharing of personal information, limit certain uses of sensitive personal information, and receive equal service when exercising their privacy rights.

Crash N Go will provide applicable notices and honor legally required requests and opt-out rights.

To exercise a right, contact us using the details in Section 16.

We will not claim an exemption from applicable California privacy requirements without a proper basis.

This Privacy Policy describes the general principles governing Crash N Go's handling of personal information.

The actual information collected, technologies used, service providers involved, retention periods, and privacy controls depend on the Platform's implemented features and operational practices.

Nothing in this Privacy Policy is intended to exclude, restrict, or waive a right or protection that cannot lawfully be excluded, restricted, or waived under applicable law.

If any provision of this Privacy Policy is found to be unenforceable, the remaining provisions will continue to apply to the extent permitted by law.

Thank you for using Crash N Go.