Privacy Policy
Who is responsible
MaxiTaxi (reg. no. [REG. NO.]), [ADDRESS], is the data controller for the processing of your personal data in the MaxiTaxi app. Questions about personal data: dataskydd@maxitaxi.se.
Data about you as a rider
Mobile number and, if you provide them, name, email address and profile photo. If you sign in with Apple or Google we receive your user ID with them, your email address and your name.
Your location when booking and during the ride, pickup point, destination, saved places (home and work), messages to the driver and ride history with price, route driven, rating and tip.
Payment methods: brand, last four digits and expiry of saved cards. The card number is held only by our payment partner Stripe. Payments and receipts.
Signed-in devices (platform, device name, app version and IP address at sign-in) and your contact with support.
Emergency contacts you add: name, relationship and phone number. That data belongs to them, not you, so only add someone who knows about it. We use it only to share a ride with that person when you choose to.
If you end the ride before you arrive we store where you got out, the time, the reason you chose and the share of the price charged. If you choose that you feel unsafe, a case is opened with our support, who can reduce the amount to zero.
Data about you as a driver
In addition to the above: name, personal identity number (stored encrypted), driver code and photos of the front and back of your taxi driver licence, a selfie, the licence expiry date, form of business, organisation number or taxi operator, the vehicle's registration number and taximeter ID.
Your location continuously while online, including with the app in the background if you have allowed it, time online, offers received and answered, rides driven, ratings from riders, earnings and payouts.
The personal identity number is processed because secure identification is required to check the taxi driver licence (Chapter 3, Section 10 of the Swedish Data Protection Act).
Data from the website and the operator portal
If you write to us using the form on our website we store your name, email address, the role you stated, what the enquiry is about and your text as a support case. You need no account, and we use the data only to answer you.
If you apply as a driver on the website we store name, mobile number, email address, personal identity number (encrypted), driver code, registration number, taxi operator or organisation number, and the text you ticked with the time you did. This is stored before any account exists, because the application has to be reviewed. If it is approved your driver account is created; if it is rejected the application is deleted, see How long we keep data.
If you work for a taxi operator and use the operator portal we store your name, email address, the sign-in codes we email you and your signed-in sessions. In the portal you see data about the rides your drivers have carried out, including the rider's first name and the addresses of the ride. What the operator may do with that data is set out in the agreement between us and the operator.
Why we process the data
To perform our contract with you: arrange and carry out rides, show the driver's location, take payment, issue receipts and pay drivers.
To comply with law: the Swedish Bookkeeping Act requires payment records to be kept for seven years, taxi legislation requires drivers to be verified, and we may be obliged to report data to authorities, for example platform income to the Swedish Tax Agency.
For our legitimate interest in a safe service: preventing fraud and abuse, keeping blocked drivers out, handling disputes and complaints, and improving the app. We always weigh that interest against your interest in privacy.
Location access, camera and photo library are controlled by you in your phone's settings. We send no marketing unless you have opted in.
Location
As a rider we use your location to suggest a pickup point, show where the driver is and follow the ride. It is read only while the app is open.
As a driver your location is shared with dispatch while you are online so that rides can be offered to you and the rider can see where you are. With location access set to Always this continues while the screen is locked. It stops when you go offline. We store your current position and the route of the rides you drive, not a full movement history.
Who receives the data
The driver sees your first name, profile photo, pickup point, destination and your message once they have accepted the ride. You see the driver's first name, photo, car, registration number and driver code. If you share a ride with someone, that person sees the car's position via a link that stops working after 24 hours.
Providers processing data on our behalf: Stripe Payments Europe Ltd (Ireland) for payments, 46elks AB (Sweden) for SMS, Google Ireland Ltd for maps, address search, routes, navigation and Sign in with Google, Apple for Sign in with Apple, Expo (USA), which passes push notifications on to Apple's and Google's notification services, komoot GmbH (Germany) for address lookups when we do not use Google, our error reporting service (technical errors with your user ID and the screen the error occurred on), and our hosting provider. Our servers, image storage and route calculation are located within the EU.
Authorities when required by law, for example the Police, the Swedish Transport Agency and the Swedish Tax Agency. We never sell your data and show no advertising.
How long we keep data
Account data is kept until you delete the account. Rides, payments and receipts are kept for seven years under the Bookkeeping Act, after deletion without any link to you as a person.
Licence photos and the selfie are deleted 90 days after an approval and 30 days after a rejection; the decision, driver code and licence expiry date are kept. A rejected application is deleted after 30 days.
Ride offers are deleted after 90 days. Signed-in devices are logged out after 30 days of inactivity, and sessions are deleted 30 days after expiry. SMS codes expire after a few minutes and are deleted the following night. Technical error reports are deleted after 30 days.
Access and security logs are kept as long as needed to investigate incidents and disputes.
Your rights
You have the right to access your data, have it corrected, have it deleted, have it transferred (data portability), object to processing based on legitimate interest and request restriction. Name, email and profile photo you change yourself under Account info. Contact us at dataskydd@maxitaxi.se for anything else; we reply within one month.
If you are unhappy with how we process your data you can complain to the Swedish Authority for Privacy Protection (imy.se).
Deleting your account
You delete your account under Settings > Delete account. Mobile number, name, email, profile photo, saved places, saved cards and sign-ins are removed immediately. Rides and receipts are kept for seven years under the Bookkeeping Act, without any link to you.
For drivers the personal identity number, licence details and photos are removed as well. Name, driver code, organisation number and vehicle appear on receipts and are therefore kept for seven years. If the account is blocked, an encrypted checksum of the personal identity number is kept so the block holds on re-registration.
Security
All traffic between the app and our servers is encrypted. Personal identity numbers are stored encrypted, photos in private storage with time-limited links, and our staff's access to sensitive data is logged, as is every change, block and export. The admin panel requires two-step sign-in. We report personal data breaches to the Swedish Authority for Privacy Protection within 72 hours when required by law and inform you if the breach poses a high risk to you.
Children
The app is intended for people aged 18 and over. We do not knowingly collect data about children.
Changes
If we change this policy, the new version is shown in the app with a new date. Material changes are announced separately.
Contact
MaxiTaxi, [ADDRESS]. Support: support@maxitaxi.se. Personal data: dataskydd@maxitaxi.se.