Privacy Policy

Last updated: 2026-06-26

1. Who is responsible for your data

This app lets you book a taxi from MUHEDIN TUMBUL PR TAKSI ZAVINOGRAĐE ("we", "us"), the taxi company serving your city. MUHEDIN TUMBUL PR TAKSI ZAVINOGRAĐE is the data controller.

• Company: MUHEDIN TUMBUL PR TAKSI ZAVINOGRAĐE, ZAVINOGRAĐE bb, 31305, Zavinograđe, Srbija, Serbia
• Registration no.: 108396635
• Privacy contact (the taxi company, as controller): [email protected]

The booking technology is operated by Voziko, a service of Polemarhi d.o.o., Vojvode Mišića 46, 35250 Paraćin, Serbia (PIB 112505565; platform contact: [email protected]), acting as the taxi company's data processor — it processes data only to run the service, under a written agreement with the taxi company.

2. What data we collect

As a rider, you do not create an account and we do not collect your email. When you book, we collect:

• Name and phone number — so the driver knows who to collect and can reach you.
• Pickup location — coordinates from a map pin or, only if you tap "Use my location", your device's location (your browser asks permission first); optionally a typed pickup address.
• Finding nearby taxi firms — on the homepage, your device location is used to show taxi companies near you: only if you tap "Use my location", or automatically on load if you previously allowed location access in this browser (this reuses your existing permission — no new prompt). The coordinates are sent server-side only to find nearby firms and are not stored. You can revoke location access at any time in your browser settings.
• Destination — an optional free-text note (no exact coordinates).
• The service you choose and your booking history (your past ride/service requests).
• Address-search text — what you type into the location search is sent to a mapping service to turn it into a location (see §4).
• Location for pickup address — when you tap "Use my location" (or move the map pin), the coordinates of your location are sent server-side to our geocoding provider (Geoapify) to determine your pickup address. These coordinates are used only for that lookup, are not stored, and your IP is not shared (see §4).
• Technical data — your IP address is used briefly to keep the service secure and prevent abuse (rate-limiting). It is held only in memory for that purpose and not stored in our database, though it may appear in our hosting/CDN providers' technical logs.

(Drivers and taxi-company staff have accounts and we hold additional data about them — name, phone, email, vehicle and licence details. MUHEDIN TUMBUL PR TAKSI ZAVINOGRAĐE is the controller of that driver data too, and Voziko is its processor; it is described in the separate Driver Privacy Notice.)

3. Why we use it, and our legal basis

We do not use your data for advertising, profiling, or analytics, and we do not sell it. (Verified: the app contains no analytics or tracking tools.)

4. Who we share it with

• The taxi company and its drivers/dispatchers — to fulfil your ride.
• Sub-processors that run the platform, processing data only on our behalf. For each: what it does, what it receives, its region, and whether your browser contacts it directly. The current list is also published on the Sub-processor List page.
  • Supabase — purpose: database, accounts and real-time updates. Data received: your booking data (name, phone, locations, history). Region: EU (Frankfurt, Germany). Direct browser contact: no (server-side only).
  • Railway — purpose: application hosting; runs each request. Data received: request data in transit; logs may include IP. Region: EU (Amsterdam, Netherlands). Direct browser contact: no.
  • Cloudflare — purpose: domain, security (anti-abuse) and content delivery. Data received: all requests and your IP address. Region: global edge network. Direct browser contact: yes (your browser connects to the nearest edge to load the site).
  • Brevo — purpose: sends the password-reset email for drivers/admins only. Data received: the recipient's email — no rider data (riders have no account or email). Region: EU (France). Direct browser contact: no.
  • Geoapify — purpose: geocoding (turns your typed address/coordinates into a location). Data received: your search text and/or coordinates. Region: EU. Direct browser contact: no (the request is made by our server, so your IP is not sent to Geoapify).
  • OpenFreeMap — purpose: supplies the map tiles. Data received: the map area you view (tile coordinates) — not your IP. Region: EU (Netherlands). Direct browser contact: no — the map tiles are fetched by our server (proxied), so your browser never contacts OpenFreeMap and your IP is not sent to it. Map data © OpenStreetMap contributors.
• Google Maps (driver-initiated): when a driver taps "navigate" to your pickup, Google Maps opens on the driver's own device, which sends your pickup coordinates to Google. This happens on the driver's device, at the driver's choice, so they can drive to you.
• Business transfers — if MUHEDIN TUMBUL PR TAKSI ZAVINOGRAĐE is involved in a merger, acquisition or sale of assets, your data may be transferred to the party taking over the business, which must continue to protect it as described in this policy.
• We disclose data to public authorities only where legally required.

Transfers abroad: your booking data is stored in the EU (Frankfurt), and all sub-processors above process data in the EU. Cloudflare operates a global edge network and may route requests through the nearest location to you. Under the Serbian Personal Data Protection Act (Zakon o zaštiti podataka o ličnosti), transfers to countries with an adequate level of protection are permitted; EU countries are treated as adequate, so no transfer outside the EU/adequacy area is required for storage of your data.

5. How long we keep it

We keep data for two different periods, depending on what it is:

• Booking data (your name, phone, pickup/destination locations, and ride history): kept for up to 12 months after your most recent ride or service request, after which we delete or anonymise it. Automated enforcement of this deletion is currently being rolled out; in the meantime we apply this limit and act on deletion requests.
• Accounting and e-invoice records: where a booking forms part of financial documentation, the relevant records are kept for up to 10 years for accounting, tax and e-invoice (e-archiving) records, as required by Serbian law. This is a legal retention obligation and overrides the 12-month period for those specific records.

6. Your rights

Under the Serbian Personal Data Protection Act (Zakon o zaštiti podataka o ličnosti) you can ask us to: access your data, correct it, delete it, restrict or object to its use, and receive a copy. Contact the taxi company at [email protected]; you can also reach Voziko platform support at [email protected], which forwards your request to the company.

Verifying your identity (anonymous riders): because you book without an account, we cannot identify you from a login. To act on an access or deletion request, we first verify that the data is yours: contact the taxi company (or Voziko support at [email protected], which forwards your request to the company), and the company checks that the booking details you provide — such as the phone number used and the pickup/destination and time of the ride — match its records before retrieving your data. If we cannot verify that the request relates to your booking, we will not disclose or delete the data, to protect other people's privacy.

You may also complain to your country's data-protection authority — the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik) (https://www.poverenik.rs). Complaint contact: Poverenik, Bulevar kralja Aleksandra 15, 11120 Belgrade, Serbia — [email protected].

7. Children's privacy

The app is intended for adults booking transport. We do not knowingly collect personal data from children. If you believe a child has provided personal data without appropriate consent, contact [email protected] and we will delete it.

8. Changes

We may update this policy; the "last updated" date shows the current version, and significant changes will be highlighted in the app.