Navigation
1. Introduction 2. Google OAuth & Account Data 3. Sensitive Data & Permits 4. How We Use Your Data 5. Sharing and Disclosure 6. Data Security & Retention 7. Your Rights & Deletion 8. Contact Us

Privacy Policy

Last Updated: July 2026

At MyWay.kg, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our platform, including details required for Google OAuth authentication and the processing of sensitive border permit documents.

1. Introduction

MyWay.kg (referred to as "MyWay", "we", "us", or "our") operates as a tourism and transport aggregator platform. When you book services (transfers, car rentals, border permits, or guided tours) or sign up on our platform, we collect certain personal information. By using our platform, you consent to the data practices described in this policy.

2. Google OAuth & Account Information

If you choose to register or log in to our platform using your Google account (via Google Sign-In), we access certain profile information via Google OAuth scopes.

Information We Access via Google OAuth
  • Email Address: Used as your primary login identifier and to send booking confirmations.
  • Full Name & Profile Photo: Used to personalize your account profile and display your identity on bookings.
  • Unique Google Identifier (Sub ID): Used to securely link your Google account to your MyWay account.

We do not request access to, nor store, any other Google data, files, or sensitive Google Account scopes. Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. Sensitive Data & Border Permits

Certain alpine destinations in Kyrgyzstan require an official Border Zone Permit issued by the state security and border control authorities. To facilitate this process on your behalf, we are legally required to collect highly sensitive passport information.

Border Permit Information Collected

We collect and process the following documentation:

  • Full legal name (exactly as it appears on your passport).
  • Passport number, nationality, date of birth, and passport validity dates.
  • A clear digital photograph/scan of your passport's information page.
  • Your planned travel dates and target border zones (e.g., Kel-Suu, Inylchek).

Strict Confidentiality: Your passport scans and details are treated with the highest level of security. They are only accessible by administrators specifically assigned to processing government permits, and are never shared for commercial purposes.

4. How We Use Your Data

We use the collected information for the following specific business purposes:

  • Account Authentication & Security: To verify your identity and protect our website against fraud or unauthorized access.
  • Booking Fulfillment: To organize private transfers, vehicle rentals, and guide services with our verified partners.
  • Border Permit Processing: To apply for and secure government border zone permits.
  • Communications: To send booking updates, invoices, and coordinates via email or WhatsApp.

5. Sharing & Disclosure of Information

We do not sell, rent, or trade your personal information. We share your data only with the following parties under strict conditions:

We share minimal details (such as your name, phone number, and pickup location) with the specific drivers, rental partners, or guides assigned to your booking to enable service delivery.

Passport scans and details are submitted directly to the State Border Guard Service of the Kyrgyz Republic for the sole purpose of issuing official border zone permits.

6. Data Security & Retention Policies

6.1 Data Security

We implement industry-standard encryption protocols (HTTPS/TLS) to protect data transmitted to and from our site. Sensitive database columns and passport document uploads are stored in secure, encrypted cloud repositories with restricted access controls.

6.2 Document Retention & Auto-Purging
Automated Sensitive Data Deletion

To minimize privacy risk, all uploaded passport scans and passport details collected for border permits are automatically and permanently deleted from our servers 30 days after your scheduled trip completion date. They cannot be retrieved after this period.

7. Your Rights & Account Deletion

You have the right to access, update, or correct the personal data we hold about you. You also have the right to request the deletion of your account and associated personal data at any time.

How to Request Account Deletion

To delete your MyWay account and all associated account profiles/history (including Google OAuth linked identifiers), please contact us via email or WhatsApp. Upon request, we will delete your account database records within 7 business days, excluding any financial records or booking logs we are legally required to retain under Kyrgyz tax and reporting regulations.

8. Contact Us

If you have any questions or concerns regarding this Privacy Policy or your data, please contact us at:

WhatsApp: Start conversation