← Back

Privacy Policy

Effective date: 5 June 2026 · Version 1.0

This Privacy Policy explains how TaxiMeIAfert ("we", "us", "the app") collects, uses, shares, and protects information when you use our mobile application and related services. We operate in Kosovo and comply with Law No. 06/L-082 on Personal Data Protection, with reference to EU GDPR standards.

1. Who we are

TaxiMeIAfert is a ride-hailing platform that connects passengers with taxi drivers and transport companies in Kosovo. The operator and data controller for this service is:

• Operator: TaxiMeIAfert (the application)
• Contact: klevisfx@gmail.com
• Country of operation: Republic of Kosovo

2. Information we collect

2.1 Account information

• Phone number (verified via SMS one-time code)
• Email address (used for login, password reset, and account communications)
• First and last name
• Profile photo or avatar (optional, uploaded by you)
• Password (stored only as a hashed value — we never see the plaintext)
• Google account identifier if you sign up via Google Sign-In (we receive your email, name, and profile picture from Google when you choose this option)

2.2 For drivers and transport companies

• Driver's licence number
• Vehicle make, model, year, plate, colour, and category
• Company name, address, and city (transport companies only)
• Identity and licence documents uploaded during registration for admin verification

2.3 Location data

• For passengers: your device location is used at the time of booking to determine pickup point and nearby drivers, and during an active ride for trip routing.
• For drivers: while you are online (toggle ON), we collect your GPS location continuously so we can dispatch nearby ride requests and show the passenger your live position en route. When you switch offline, location collection stops.
• We do not track your location when you are offline (passenger or driver).

2.4 Ride and trip data

• Pickup and drop-off addresses (entered or auto-resolved via OpenStreetMap Nominatim)
• Intermediate stops you add to a trip
• Distance travelled, duration, fare amount, and payment method
• Star ratings and reviews you give or receive
• Cancellations and cancellation reasons

2.5 Payment information

At launch, TaxiMeIAfert operates on a cash-only basis: passengers pay drivers directly with cash after each ride. We do not store credit card numbers, CVV codes, or card expiration data on our servers.

In the future, when card payments become available, payment information will be processed by a regulated payment processor (such as Stripe). In that case, we will receive only the card brand, the last 4 digits, and an opaque tokenised reference. We will not have access to your full card details.

2.6 Device and technical information

• Device type, operating system version, and language
• Firebase Cloud Messaging push token (so we can send notifications)
• App version, crash logs, and basic usage analytics (via Firebase Crashlytics)

3. How we use your information

We use your data to:

• Match passengers with nearby drivers and dispatch ride requests
• Calculate fares using the applicable tariff (per-km, per-minute, time-of-day)
• Display the driver's live location to the passenger during a ride
• Send transactional messages (ride accepted, driver arrived, payment confirmed)
• Verify driver and company identity (admin review of uploaded documents)
• Maintain a wallet/ledger of earnings, expenses, and amounts owed between parties
• Provide customer support and resolve disputes
• Detect and prevent fraud, abuse, or violations of these terms
• Improve the app's performance and fix bugs via crash reports and analytics
• Comply with our legal obligations in Kosovo

4. Who we share your information with

4.1 With the other party of a ride

When a ride is matched, the driver sees the passenger's first name, phone number, rating, and pickup address. The passenger sees the driver's first name, phone number, vehicle details, rating, and live location. This sharing is essential for the service to work.

4.2 With service providers (data processors)

• Google Firebase — authentication (Google Sign-In), push notifications, crash reporting, and analytics. See Google's Privacy Policy.
• Brevo (Sendinblue) — sends transactional emails such as password reset codes.
• Twilio — sends SMS one-time codes for phone verification.
• OpenStreetMap Nominatim — converts addresses to coordinates and vice versa (no personal information is included in these lookups).
• Google Maps Platform — renders the map view inside the app.
• Railway — hosts our backend servers and PostgreSQL database in the EU.
• Stripe — will process card payments once card payments are enabled (currently disabled at launch).

4.3 With law enforcement and authorities

We may disclose information when required by law, court order, or to protect the rights, property, or safety of users or the public. We will not provide bulk access to user data and we will resist overly broad requests.

4.4 We do NOT sell your data

We do not sell, rent, or trade your personal information to advertisers, data brokers, or any third party for commercial purposes.

5. How long we keep your data

• Account information: retained while your account is active. If you delete your account, we erase personally identifying data within 30 days, except where we are required by Kosovo law to keep certain records (e.g. financial transactions for tax purposes).
• Ride history: retained for up to 5 years for accounting and dispute resolution.
• Location data of completed rides: route points used during the trip are deleted automatically 90 days after the ride completes; pickup and drop-off addresses are retained with the ride record.
• Driver location while online: the live position is stored in our in-memory cache (Redis) only for as long as it takes to dispatch — after 90 seconds of no movement update we treat the driver as offline and delete the cached location.
• Crash reports and analytics: retained up to 90 days by Firebase Crashlytics.

6. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information (most fields are editable in your profile)
• Delete your account and associated personal data
• Export a copy of your data in a portable format
• Withdraw consent for non-essential processing (e.g. analytics)
• Object to processing for legitimate-interest reasons
• Lodge a complaint with the Kosovo Information and Privacy Agency (Agjencia për Informim dhe Privatësi) if you believe we have mishandled your data

To exercise any of these rights, email us at klevisfx@gmail.com. We will respond within 30 days as required by Kosovo data protection law.

7. Security

We protect your data with industry-standard measures: passwords are hashed with bcrypt; all network traffic between the app and our servers is encrypted with TLS; payment data (when card payments are enabled) is handled exclusively by certified payment processors and never touches our infrastructure in plaintext form; access to production systems is limited to authorised personnel using two-factor authentication.

Despite these measures, no online service is 100% secure. If we become aware of a data breach affecting your information, we will notify you and the Kosovo Information and Privacy Agency within 72 hours as required by law.

8. Children

TaxiMeIAfert is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us information, please contact us so we can remove it.

9. International transfers

Our backend infrastructure is hosted in the European Union (Railway, EU regions). Some service providers we use (Google Firebase, Stripe) may process data in the United States. In those cases, the transfer is covered by standard contractual clauses or other mechanisms recognised by Kosovo data protection law.

10. Cookies and similar technologies

The mobile app itself does not use cookies. Our public website (this page) uses no cookies, no tracking pixels, and no analytics scripts.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email at least 14 days before they take effect. Continued use of the app after changes take effect constitutes acceptance.

12. Contact

Questions, requests, or concerns about your privacy?
Email: klevisfx@gmail.com