Privacy · updated 2026-11-04

Ayuh! Privacy Policy

Ayuh! is built so that it never needs to know who you are. No account, no name, no phone number. This page lists what is sent to the Ayuh! servers, why it is needed, and how long it is kept. It follows the principles of Malaysia's Personal Data Protection Act 2010 (PDPA): collect as little as possible, only for the stated purpose. The Malay version (Bahasa Melayu) is the reference text.

01What we collect, and why

Random install ID: A random number made by the app when it is installed (not the IMEI, not a Google ID). The server keeps only its hash (SHA-256), to count how many people use Ayuh! each day and to stop one phone voting or reporting again and again. The daily counts are deleted after 35 days.
Road reports: The kind of report (accident, police, flood …), its location, and a note and photo if you add them. So other drivers can see it. Deleted by itself after 48 hours.
Anonymous traffic: When "Share traffic" is on: the road cell, direction and speed only (no ID), so traffic jams can be detected. Live data is discarded after an hour; all that is kept is the average speed for each hour of the week.
Detected jams: The slow stretches of road, shown to other drivers. Shown for 45 minutes only.
Toll prices, ratings and place suggestions: The toll you paid, the stars you give a place, and the places/roads you suggest (name, category, location, address, note). Place suggestions are checked automatically (their name and location are looked up in the Ayuh! map and Esri) and by an admin before others see them.
Road chat: Only while driving with a route: display name, message, rough location and the nearby road name (as the message's heading), so nearby drivers can see it. Deleted by itself after 24 hours.
Forum: The title, text, photo if added, and the category and state you choose (so issues are shown by state). You can delete your own posts and comments from the app. Photos are shown straight away; other drivers can report them to the admin.
Pre-registration (website): Your e-mail address and phone type (Android or iOS) only: to invite you to test in the order people registered, and to tell you when Ayuh! launches. Invitations are sent by the owner from their own e-mail, with every address hidden (Bcc). Deleted 30 days after the launch, or whenever you ask.

02Processed, not stored

Routes and searches: The start, destination and search text are sent to the Ayuh! routing (Valhalla) and search (Photon) servers to be answered, and kept in memory for a few minutes only so the same question is answered faster. Never written to disk and never linked to your ID.
The "Become a tester" button (website): The website only counts how many times the button is pressed (one number). The IP address is held in the server's memory for 24 hours so one phone counts once, and is never written to disk. The tester group's link opens at Google.
Weather and radar: The car's location (rounded) to check for rain on MET Malaysia's radar. Not stored.
IP address: Seen by the server with every request, and remembered in memory only to block abuse (an address sending too many requests is blocked for an hour). Never written to disk.

03What we do NOT collect

Identity: Name, phone number, contacts, Google or social-media accounts.
Trip history: Trips, home/work locations, pins and recent places stay on your phone only.
Convoy: Convoy locations, messages and voice are end-to-end encrypted and sent straight between phones (Bluetooth or public Nostr relays). The Ayuh! servers never see them.
Everything else on your phone: Your recorded guidance voice, fuel level, music and settings are not sent anywhere.

04Third-party services

Maps and open data: OpenFreeMap map tiles, Esri satellite imagery, OpenStreetMap data (Overpass, Nominatim) and Overture Maps are downloaded by the phone directly. They receive the IP address and the map area viewed, as any website does.
Weather and prayer times: Open-Meteo and MET Norway (weather at the car's location), JAKIM e-Solat and waktusolat.app (prayer-time zone), data.gov.my (public buses).
Fallbacks: When the Ayuh! servers are busy, routes and searches go to public OpenStreetMap servers (FOSSGIS Valhalla, OSRM, Komoot Photon).
Radio: The station list comes from Radio Browser (radio-browser.info); broadcasts play straight from the radio station's own server. Music from other apps (e.g. Spotify) is only controlled through Android's media controls; no data is sent to us.
Road height (hills): AWS Terrain Tiles elevation tiles, or Open-Meteo Elevation as a fallback, are downloaded for your route to detect uphill and downhill roads.

05Your rights

Delete: Your place suggestions can be deleted from the app; road reports disappear by themselves after 48 hours (or sooner when other drivers vote "gone"). For pre-registration, use the "Withdraw" link on the website. Uninstalling the app deletes the install ID and all data on the phone.
Contact: Questions about privacy or requests to delete: e-mail [email protected], or Threads @_mnxzmi98 (see the "Support" tab on the website).