Privacy Policy

1. General information

This Privacy Policy describes what personal data MadTaxi (a Latvian taxi platform, "MadTaxi", "we") collects, uses and protects when You use the MadTaxi mobile application ("the App") as a client, driver, dispatcher, or administrator. By using the App, You confirm that You have read this Policy.

2. What data we collect

From all users:

• Account data: first and last name, email address, phone number, password (stored encrypted, we never see it as plain text).
• App language preference and other app settings.
• Device push notification token (to send notifications about orders and account status).

Additionally from clients:

• Location data (GPS): to request rides and display the map, as well as during the ride so the driver and the App can locate You and track the ride.
• Photos of an identity document and a selfie — for profile verification. These images are evaluated by artificial intelligence (Google Gemini) and stored securely, with access limited to You and the system performing the check.
• Saved addresses (e.g., "Home", "Work"), profile photo or chosen avatar appearance.
• Ride history, prices, payment method, tips, reviews and ratings left about the driver.
• Payment data: card payments are processed by our payment provider Stripe — we do not see or store Your full card number, only a secure identifier issued by Stripe for future payments, and Your MadTaxi Wallet (pre-payable) balance.
• With Your separate, voluntary consent — ambient sound recorded and analysed on Your device during an active ride to automatically recognise potentially dangerous situations; an audio recording is sent to us ONLY if a dangerous sound is recognised (see Section 5).
• Content of conversations with the AI support assistant (processed using Google Gemini to provide responses).

Additionally from drivers:

• Vehicle data: make, model, license plate number, vehicle photo.
• Photos of a driver's license and a selfie — for profile verification (evaluated by artificial intelligence, same as for clients).
• Location data (GPS) — continuously while You are "on shift", so the App can offer You nearby ride requests and show Your location to the client and dispatcher.
• Earnings data, client reviews and ratings about You, and problem reports submitted to support.

3. Why we collect this data

• To provide the core service — requesting rides, connecting drivers and clients, calculating prices and processing payments.
• To verify user identity and maintain a safe environment for all users (profile verification).
• To provide client and driver support (AI assistant and problem reporting).
• To fulfil legal obligations (e.g., accounting and tax requirements related to completed rides).

4. Legal basis for processing

In accordance with Article 6 of the General Data Protection Regulation (GDPR), we process Your data based on:

• performance of a contract — to fulfil these Terms and provide ride ordering, fulfilment and settlement;
• compliance with a legal obligation — e.g., accounting and tax law requirements;
• legitimate interests — to maintain a safe environment, prevent fraud, and improve the service;
• Your explicit consent — for specific, optional types of processing, such as the sound-detection feature mentioned in Section 5. You can withdraw consent at any time in the App settings, without affecting the availability of the core service.

5. Artificial intelligence and automated data processing

For profile verification (comparing a document with a selfie) and AI support chat, we use Google Gemini artificial intelligence services (via Firebase AI Logic). Uploaded images and messages are sent to this service for analysis, but are not used to train Google's models in any way that would violate Google Cloud's data processing terms.

With Your separate consent, during an active ride the App may analyse ambient sound locally (on Your device) to automatically recognise potentially dangerous situations. This analysis happens on-device only — audio data is sent to our servers ONLY if a dangerous sound is recognised, and only so that staff can assess the situation and provide assistance. This feature can be turned off at any time and does not affect the availability of the core service.

6. Who we share data with

We store and process Your data using Google Firebase (authentication, database, file storage, notifications), Google Gemini (AI verification and support), and Stripe (payment processing). These service providers act as our data processors and do not use Your data for their own purposes. We do not sell or share Your personal data with third parties for advertising purposes.

Basic client and driver information (name, rating, vehicle, approximate location) is disclosed to each other during a ride so You can contact and recognize one another.

7. International data transfers

Some of the service providers we use (Google, Stripe) may process data outside the European Union/European Economic Area. In such cases, the data transfer is based on standard contractual clauses approved by the European Commission or another safeguard mechanism provided for by the GDPR, ensuring a level of data protection consistent with GDPR requirements.

8. Data retention period

We retain account and ride data while Your account is active, plus an additional period after account deletion if required by accounting or legal obligations. Verification document images are retained for as long as necessary for identity confirmation and security purposes.

9. Your rights

Under the General Data Protection Regulation (GDPR), You have the right to:

• Request access to the data we hold about You.
• Request correction of inaccurate data (You can also do this yourself in the "Edit data" section).
• Request deletion of Your data, subject to legal retention obligations — You can also do this yourself in the App (Profile → Delete profile) or without the App on this page.
• Object to data processing or request its restriction.
• Request portability of Your data in a machine-readable format, where processing is based on a contract or consent.
• Withdraw any consent You have given (e.g., for the sound-detection feature in Section 5) at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Lodge a complaint with the Data State Inspectorate of Latvia: Elijas iela 17, Riga, LV-1050, tel. +371 67223131, email: pasts@dvi.gov.lv, www.dvi.gov.lv, if You believe Your data is being processed unlawfully.

To exercise these rights, write to us: support@madtaxi.lv. We will respond without undue delay and no later than one month from receipt of Your request, as provided by Article 12(3) of the GDPR.

10. Data security

We use industry-standard security measures (encryption, access control, database and file storage level security rules) to protect Your data from unauthorized access, loss, or misuse.

11. Changes

We may update this Privacy Policy from time to time. We will notify You in the App of material changes. By continuing to use the App after changes take effect, You confirm Your acceptance of the updated Policy.

12. Contact

SIA "Selado", reg. No. 52103092291, Nākotnes iela 4, Jumurda, Jumurdas pagasts, Madonas novads, LV-4844, Latvia.
For questions or complaints, write to: support@madtaxi.lv