Privacy Policy

Last updated: 2026-11-07

1. Who is responsible for your data

This app lets you book a taxi from MUHEDIN TUMBUL PR TAKSI ZAVINOGRAĐE ("we", "us"), the taxi company serving your city. MUHEDIN TUMBUL PR TAKSI ZAVINOGRAĐE is the data controller.

• Company: MUHEDIN TUMBUL PR TAKSI ZAVINOGRAĐE, ZAVINOGRAĐE bb, 31305, Zavinograđe, Srbija, Serbia
• Registration no.: 108396635
• Privacy contact (the taxi company, as controller): [email protected]

The booking technology is operated by Voziko, a service of Polemarhi d.o.o., Vojvode Mišića 46/1, 35250 Paraćin, Serbia (PIB 112505565; platform contact: [email protected]), acting as the taxi company's data processor — it processes data only to run the service, under a written agreement with the taxi company.

2. What data we collect

As a rider, you do not create an account and we do not collect your email. When you book, we collect:

• Name and phone number — so the driver knows who to collect and can reach you.
• Pickup location — coordinates from a map pin or, only if you tap "Use my location", your device's location (your browser or the app asks permission first). In the Voziko app, only approximate location is used, and you set the exact spot with the map pin. Optionally a typed pickup address.
• Finding nearby taxi firms — on the homepage, your device location is used to show taxi companies near you: only if you tap "Use my location", or automatically on load if you previously allowed location access in this browser (this reuses your existing permission — no new prompt). In the Voziko app, location is used only when you tap the button. The coordinates are sent server-side only to find nearby firms and are not stored. You can revoke location access at any time in your browser or device settings.
• Destination — an optional free-text note (no exact coordinates).
• The service you choose and your booking history (your past ride/service requests).
• Address-search text — what you type into the location search is sent to a mapping service to turn it into a location (see §4).
• Location for pickup address — when you tap "Use my location" (or move the map pin), the coordinates of your location are sent server-side to our geocoding provider (Geoapify) to determine your pickup address. These coordinates are used only for that lookup and we do not store them. Geoapify generally keeps its log of successful requests for no more than 24 hours, and your IP is not sent to it (see §4).
• Reports and blocks — if you report a driver about a ride, we store your report: the category, an optional note, a copy of the ride's last chat messages, the time, the ride it concerns, and a keyed one-way code made from your phone number, so that a request for your data still finds the report after the ride itself is anonymised. If you or a driver choose to block, or the company blocks you, we store a keyed one-way code made from your phone number (not the number itself) with the driver concerned, or with no driver for a block by the whole company, so that you and that driver are not matched again. Messages containing listed offensive words are refused before they are sent. Report safety concerns to MUHEDIN TUMBUL PR TAKSI ZAVINOGRAĐE at [email protected] or to Voziko at [email protected]; in an emergency call the police or the emergency number of your country.
• Technical data — your IP address is used briefly to keep the service secure and prevent abuse (rate-limiting). It is held only in memory for that purpose and not stored in our database, though it may appear in our hosting/CDN providers' technical logs.

(Drivers and taxi-company staff have accounts and we hold additional data about them — name, phone, email, vehicle and licence details. MUHEDIN TUMBUL PR TAKSI ZAVINOGRAĐE is the controller of that driver data too, and Voziko is its processor; it is described in the separate Driver Privacy Notice.)

3. Why we use it, and our legal basis

We do not use personal booking or contact data for advertising or profiling, and we do not sell it.

Privacy-friendly analytics: On public marketing pages and in the rider booking flow, we use Umami without cookies to collect aggregated usage statistics, including page views and booking/contact form events. Umami is self-hosted by Voziko in the EU on Railway. IP addresses are not stored in Umami; query strings and personal booking/contact details are not sent to analytics. Analytics data is kept for 24 months. Driver, dispatcher, tenant-admin and platform-admin areas are not tracked. The data-protection role for analytics on taxi-company booking pages is not settled.

4. Who we share it with

• The taxi company and its drivers/dispatchers — to fulfil your ride.
• Sub-processors that run the platform. For each: what it does, what it receives, its region, whether your browser contacts it directly, and its contract status. The current list is also published on the Sub-processor List page.
  • Supabase — purpose: database, accounts and real-time updates. Data received: your booking data (name, phone, locations, history). Region: EU (Frankfurt, Germany). Direct browser contact: no (server-side only). Contract status: Not confirmed. Provider publishes a DPA; our acceptance is not confirmed.
  • Railway — purpose: application hosting; runs each request. Data received: request data in transit; logs may include IP. Region: EU (Amsterdam, Netherlands). Direct browser contact: no. Contract status: Not confirmed. Provider publishes a DPA; our acceptance is not confirmed.
  • Cloudflare — purpose: domain, security (anti-abuse) and content delivery. Data received: all requests and your IP address; encrypted database backups (R2). Region: global edge network; R2 storage region not confirmed. Direct browser contact: yes (your browser connects to the nearest edge to load the site). Contract status: DPA incorporated in the provider's terms.
  • Brevo — purpose: sends the password-reset email for drivers/admins, and safety-report emails to the company's admins. Data received: the recipient's email; for a safety report, its category, note and the ride's last chat messages, which can include your messages. The name and phone number from your booking are never sent, and phone numbers and email addresses typed into a note or message are removed first. Region: EU (France). Direct browser contact: no. Contract status: Not confirmed. Provider's DPA not reviewed.
  • Geoapify — purpose: geocoding (turns your typed address/coordinates into a location). Data received: your search text and/or coordinates. Region: EU (operator Keptago Ltd, Cyprus). Direct browser contact: no (the request is made by our server, so your IP is not sent to Geoapify). Contract status: No signed DPA; provider's standard terms.
  • OpenFreeMap — purpose: supplies the map tiles. Data received: the map area you view (tile coordinates) — not your IP. Region: EU operator (Hyperknot Software Kft., Hungary); server location not published. Direct browser contact: no — the map tiles are fetched by our server (proxied), so your browser never contacts OpenFreeMap and your IP is not sent to it. Contract status: No DPA; processor role not settled. Map data © OpenStreetMap contributors.
  • GitHub Actions — purpose: scheduled jobs, including the encrypted database backup and retention deletion. Data received: database contents including your booking data, which are briefly unencrypted on a temporary server while the backup is made. Region: GitHub does not publish a server region. Direct browser contact: no. Contract status: DPA incorporated in the provider's terms; Actions not named, covered by its default for all Online Services.
  • Push notification services (Google, Mozilla, Apple, Microsoft) — purpose: deliver new-ride alerts to drivers. Data received: encrypted alert content, which may include a pickup address, without your name or phone. Region: global infrastructure, region not published. Direct contact from your browser: no. Contract status: Not confirmed for any of the four; Apple's role is open.
• Google Maps (driver-initiated): when a driver taps "navigate" to your pickup, Google Maps opens on the driver's own device, which sends your pickup coordinates to Google. This happens on the driver's device, at the driver's choice, so they can drive to you.
• Business transfers — if MUHEDIN TUMBUL PR TAKSI ZAVINOGRAĐE is involved in a merger, acquisition or sale of assets, your data may be transferred to the party taking over the business, which must continue to protect it as described in this policy.
• We disclose data to public authorities only where legally required.

Transfers abroad: the main database holding your booking data is in the EU; the storage region of the encrypted backups is not confirmed. Some providers are located or operate outside the EU. Examples: Cloudflare runs a global network, push notification services run on global infrastructure, and GitHub Actions, whose run locations are not published, runs scheduled jobs, including the encrypted database backup, during which data is briefly unencrypted on a temporary server. For Brevo, access from the US and India is an open question. The transfer mechanism for each provider is stated on the Sub-processor List page.

5. How long we keep it

We keep data for two different periods, depending on what it is:

• Booking data (name, phone, locations and messages): deleted or anonymised 12 months after each ride is completed, cancelled or marked no-show. Deletion is automated and runs daily; we also act on deletion requests. Backups expire within 30 days.
• Reports and blocks: a report is deleted 12 months after the company closes it; the phone code of a block is deleted 12 months after the block. Deletion is automated.
• Accounting records: Voziko keeps none about riders. If the company issues you a receipt, it keeps it for the periods set by law; private-sector electronic invoices are kept for 10 years from the end of the year of issue (Art. 15 of the Serbian Electronic Invoicing Act).

6. Your rights

Under the Serbian Personal Data Protection Act (Zakon o zaštiti podataka o ličnosti) you can ask us to: access your data, correct it, delete it, restrict or object to its use, and receive a copy. Contact the taxi company at [email protected]; you can also reach Voziko platform support at [email protected], which forwards your request to the company.

Verifying your identity (anonymous riders): because you book without an account, we cannot identify you from a login. To act on an access or deletion request, we first verify that the data is yours: contact the taxi company (or Voziko support at [email protected], which forwards your request to the company), and the company checks that the booking details you provide — such as the phone number used and the pickup/destination and time of the ride — match its records before retrieving your data. If we cannot verify that the request relates to your booking, we will not disclose or delete the data, to protect other people's privacy.

You may also complain to your country's data-protection authority — the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik) (https://www.poverenik.rs). Complaint contact: Poverenik, Bulevar kralja Aleksandra 15, 11120 Belgrade, Serbia — [email protected].

7. Children's privacy

The app is intended for adults booking transport. We do not knowingly collect personal data from children. If you believe a child has provided personal data without appropriate consent, contact [email protected] and we will delete it.

8. Changes

We may update this policy; the "last updated" date shows the current version, and significant changes will be highlighted in the app.