Privacy Policy

1 Information We Collect

We collect only what is necessary to operate the platform. Here is exactly what that is:

2 How We Use Your Information

• To verify your identity via OTP login
• To show your trip request to available drivers on your route
• To display driver bids to you alongside their profiles
• To send you a review request via WhatsApp after your trip date (riders only)
• To publish reviews on driver profiles so future riders can make informed choices
• To verify driver documents before allowing a driver profile to go live
• To improve the platform based on how it is used

3 What We Do Not Do

• We do not sell your personal data to any third party, ever
• We do not run remarketing or behavioural advertising campaigns
• We do not track your precise GPS location
• We do not share your phone number with drivers — drivers call you only after you share your number directly in the booking conversation
• We do not use your data for any purpose beyond operating TaxiYaar

4 Data Sharing

We share data with third parties only to the minimum extent required to operate:

• Firebase (Google) — used for OTP authentication and push notifications
• Supabase — our database and file storage provider where your trip data and documents are securely stored
• WhatsApp Business API — used to send you a single review nudge message after your trip date. No marketing messages.

All three providers are GDPR-compliant and operate under strict data processing agreements. We do not share your data with any other party.

5 Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days. Aggregate, anonymised trip statistics may be retained for platform analysis.

Driver verification documents are retained for the duration the driver is active on the platform and deleted within 60 days of account closure.

6 Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for WhatsApp review messages at any time by replying STOP

To exercise any of these rights, email us at support@taxiyaar.com. We will respond within 7 business days.

7 Children's Privacy

TaxiYaar is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us and we will delete it promptly.

8 Security

We use industry-standard security practices including encrypted data transmission (HTTPS), secure cloud storage via Supabase, and OTP-based authentication with no passwords stored. Driver documents are stored in private, access-controlled storage and are not publicly accessible.

9 Changes to This Policy

If we make material changes to this policy, we will update the effective date at the top of this page and notify active users via push notification. Continued use of TaxiYaar after changes constitutes acceptance of the updated policy.