DRAFT. This text awaits legal approval and is not the final version.
Privacy policy
1. Who processes your data
Your data is processed by [OPERATOR NAME], NIPT [NIPT], at [OPERATOR ADDRESS].
2. The data we collect
We collect your phone number, name, language, device id and push token, ride addresses and times, fares, ratings, and the GPS trace of a ride.
For drivers we also collect licence numbers, vehicles, and documents.
3. Purposes and legal bases
Ride data is processed to perform the transport contract. Driver location while online is processed to perform the contract between the operator and the driver.
4. Location data
Location is personal data. A GPS trace is stored only for rides. The position of an idle online driver is kept only in memory for 120 seconds.
5. How long we keep data
GPS traces are deleted after 90 days. Rides are kept. A deleted account is anonymized.
6. Who receives your data
The driver sees the passenger's name and phone from acceptance until the ride ends. For the same time the passenger sees the driver's name, phone, plate, and licence.
Operator staff also see the data. The SMS gateway [SMS GATEWAY], the push service [PUSH SERVICE], and the hosting provider [HOSTING PROVIDER] also receive it.
7. Your rights
You have the right to access, correct, and delete your data, and to object to its processing.
In the app settings use the rows "Download my data" and "Delete account".
8. Privacy contact
For privacy questions write to privacy@airide.app.
9. Supervisory authority
The supervisory authority is the Commissioner for the Right to Information and Personal Data Protection (IDP), https://idp.al. A complaint can go to the IDP.
10. Minimum age
The rider app is for people aged 16 or older.