Things to know before downloading the SMS TAXI App
• The SMS TAXI system has been configured in accordance with the principle of data minimisation. It only collects the information necessary for the execution and efficiency of the service, in the exclusive interest of the User. No data will be processed for marketing or profiling purposes.
• The SMS TAXI APP does not ask for access to the data on your smartphone. With your consent we can only collect your GPS position as the pick-up address of the ride. Users who do not give consent to geolocation may decide to enter the pick-up location manually.
• For the identification of the customer requesting the taxi service, the SMS TAXI APP collects the user's name and telephone number during registration. No camera access or image collection is required.
• The data recorded in the SMS TAXI system are resident within the Tunisia.
• The transmission of data takes place over an encrypted network, like the data collected via APIs with other Partners applications, which enable the request of a taxi to their registered users.
A detailed information notice is provided below in compliance with the current data protection legislation.
Users may write to smstaxi47@gmail.com for further clarification of our privacy policy.
1. Purpose
We ensure that users accessing our services are aware of the personal data they provide in order to register, request, book, and pay for taxi rides.
We believe it is important to point out that in the provision of the service through the SMS TAXI APP, the only personal data of the user that will be communicated to the taxi driver (Driver) is the name (entered at the time of registration) and, with regard to the ride, the pickup address and any notes provided voluntarily by the user.
2. Users of the SMS TAXI App
Consumer Users: These are private individuals who download and register for the SMS TAXI app. We collect their data during registration, requiring only their telephone number and first name (or nickname). Consumer Users are permitted, after successfully completing the registration process (which includes sending SMS), to optionally enter additional data in their profile (such as surname and email).We do not collect information about your racial or ethnic origin, political opinions or membership of any political association, religious or philosophical beliefs, trade-union membership, genetic data, or data concerning a person’s sex life or sexual orientation.
3. Subjects Involved in Data Processing
Information You Provide
Registration and Passenger Information: This may include your first name, phone number, email, country, and city. Depending on legal requirements, we may also collect your selfie for identity verification, national ID numbers, and social media accounts for safety purposes, as well as emergency contact details. Providing this information is necessary to use SMS TAXI and its features. Optionally, you may provide your last name and profile picture.
Driver Information: This includes the driver’s full name, license details, vehicle information (type, make, model, year, color, registration certificate, license plate, vehicle image), proof of identity, state identification numbers, ID documents (such as driver's license, passport), proof of residency, address, date of birth, gender, taxation identifier, insurance details, right to work information, driving record.
Registration as a Driver requires providing this information.
Correspondence Information: This includes emails with attachments, and sms sent to us, along with related metadata.
Promotional Information: If you participate in car branding, referral programs, or other promotions, we may ask for information like your name, email, user ID, phone number, payment details, address, social media accounts, vehicle details, and images to provide bonuses or benefits.
Information We Collect Automatically
Location Information: We collect precise location data (GPS coordinates, WiFi data) from your device to facilitate rides, ensure safety, detect fraud, and comply with legal requirements. For Passengers, location data is collected when the app is open (foreground) or running in the background. Drivers have similar data collection while in Driver mode, including after the trip for insurance and incident investigation purposes.
Transaction Information: Details related to services provided via SMS TAXI, including charges, service time, route, and distance.
Usage Information: Data about your interactions with our Platform, such as access times, viewed pages, crashes, and system activity. We may use data related to third-party services used before interacting with SMS TAXI for marketing purposes.
Communications Information: Data about communications between users or with us, used for user support, dispute resolution, safety monitoring, and Platform improvement.
Device Information: Information about your device, including name, brand, model, IP address, mobile carrier, network type, time zone, language settings, advertising IDs, browser type, operating system, screen settings, battery status, installed applications, and sensor data for authentication and anti-fraud purposes.
User and Trip IDs: Automatically assigned user ID upon account creation and trip ID for each journey.
Information We Obtain from Other Sources
Third-Party Services: Our application utilizes Google Maps, Google Distance Matrix, and Google Places APIs to enhance user experience and functionality.
State Authorities: Information from law enforcement agencies and government authorities as required by law.
Other Users or Third Parties: Information provided by third parties related to referral programs, user support incidents (including audio, video, images, documents), or complaints.
4. Usage of your information
Facilitating Your Use of SMS Taxi:
Enabling users to create and manage their SMS Taxi accounts, and to request or provide taxi services.
Verifying that drivers are authorized and capable of offering services through SMS Taxi.
Preventing and addressing unsafe or illegal activities, fraud, and violations of SMS Taxi policies; suspending or deactivating users involved in prohibited actions.
Providing customer support, handling user inquiries, and sending operational communications like ride receipts and updates.
Ensuring the accessibility, security, and stability of our platform, addressing technical issues promptly.
Legal basis: Fulfillment of our contractual obligations, compliance with legal requirements, and our commitment to maintaining a secure environment for SMS Taxi users.
Improving and Enhancing SMS Taxi Services:
Conducting testing, research, data analysis, and using machine learning to develop and refine SMS Taxi features.
Gathering user feedback to continuously enhance the SMS Taxi experience.
Legal basis: Our legitimate interest in delivering optimal SMS Taxi services. Where specific uses require consent, we will obtain it separately.
Protecting Rights and Ensuring Compliance:
Adhering to licensing and regulatory requirements, as well as other applicable laws.
Responding to requests from law enforcement, government agencies, subpoenas, court orders, and legal claims.
Safeguarding the rights, interests, and safety of the SMS Taxi community and the public.
Legal basis: Necessity to comply with legal obligations and our legitimate interests in protecting SMS Taxi operations and users.
5. Automated Decision-Making
We utilize personal information to implement automated decisions in relation to your use of our SMS Taxi platform:
Pairing Drivers and Passengers based on factors like availability and proximity.
Assessing user ratings and deactivating users with low ratings.
Identifying and temporarily suspending users involved in fraud or unsafe activities, with potential for deactivation in severe cases.
Suggesting average fares considering factors such as distance, location, and time.
Where mandated by law, actions (including deactivation) resulting from these processes undergo human review and/or provide an opportunity for appeal. To contest a decision stemming from these procedures, please reach out to us at smstaxi47@gmail.com
6. Categories of Data and Purpose of Processing
Registration/Login – Logout
Consumer (Private) User: Upon downloading the SMS TAXI APP from the respective store, the user can register by providing:
Telephone number or email : required for each login.
Name and Surname: Used for identification and administrative purposes.
Registered consumer users can optionally enter additional data through their profile:
Email: Used for sending payment receipts and service notifications.
Notes for the taxi driver: Voluntarily provided to facilitate service usage.
Business User: The Business User enters their telephone number as a unique identifier within the APP. After authentication , their profile is populated by the Agreed Party, who manages this information within the SMS TAXI business system through an authorized Admin. Requests for profile changes must be directed to the Agreed Party, acting as the Autonomous Data Controller and providing contact details for this purpose.
enters the telephone number inside the APP (unique identifier) and after the authentication, he/she will find his/her profile populated directly by the Agreed Party who has entered the information inside the SMS TAXI business system through an authorized Admin. Any requests for changes to the business profile by the interested parties must be received by the Agreed Party, which has provided its contact details as Autonomous Data Controller.
7. Race data and Geolocation of User Device
Upon completion of a journey, the system assigns an ID and records the User's name, date, time, payment method, and taxi code.
Users have the option to provide their pick-up location either by consenting to GPS coordinates acquisition or by manually entering the address. The processing of GPS position data is based on specific consent provided by the User through the application's functionality. Users retain the right to withdraw consent at any time.
Business Users utilizing business payment methods within the APP are geolocated at the time of payment. The system captures the payment location as the destination point of the ride to enable verification of movements for the Contracting Company.
8. Taxi Geolocation
During the ride, we continuously collect GPS coordinates using the mobile device (smartphone) installed in the taxi. This enables us to track and record the route taken during the ride. The processing of this data is justified on the legal basis of legitimate interest. This allows us to protect both ourselves and our Users in cases of disputes related to ride fares or discrepancies noted on statements (chargebacks). Additionally, it ensures accurate ride allocation, thereby enhancing service levels for Users and correctly assigning priorities acquired by Drivers.
9. Transfer of data :
To support our global operations, we may share your information with members of SmsTaxi corporate group and other entities outside of your country of residence as described in the section “How we share your information”. We do so for the performance of our contract with you, or based on consent, adequacy decisions for relevant countries, or other transfer mechanisms and appropriate safeguards under applicable law, such as the Standard Contractual Clauses approved by the European Commission.
We will take reasonable steps to ensure that any overseas recipient deals with your personal information in a manner consistent with how we deal with it.
10. Obligatory or optional nature of conferment :
The User is under no obligation to provide his data. If the data deemed necessary are not provided, it will not be possible to perform the Service.
11. Retention period and deletion of data :
We keep your personal information for as long as you have an account with us. We may retain certain information after account termination for legitimate reasons:
We will retain transactional information (such as data about rides and payments) for as long as needed to meet our tax obligations. Tax law generally requires us to retain information for 6 months.
We will retain the information for the period required by the licensing regulator (where applicable). The retention period will vary depending on your location and the type of data.
We will retain correspondence and other documentation for as long as this is required for compliance with statutory document retention obligations. Commercial law generally requires us to retain commercial correspondence for 6 months.
If there is a legal claim or dispute or any possibility thereof, we will retain corresponding information until the claim is satisfied/dispute is resolved or the statute of limitation expires. The statute of limitation will depend on your location but will generally require retention for 1-6 months.
We will also retain data relevant to preventing fraud, ensuring user safety, and complying with our legal obligations for the period needed to fulfill these purposes.
12. Data Security :
In accordance with the law, we take appropriate technical and organizational measures to ensure data security, to protect your data and prevent it from being disclosed to unauthorized persons, accidentally or maliciously changed, lost or destroyed.
These measures are regularly reviewed and updated to the latest state of the art. The transmission of personal data from the devices used to request the service (e.g. smartphones) is encrypted.
All systems are protected by different levels of perimeter security. Both the databases and the application component machines are exposed on a segregated private network and not on the public network. The only access possible is via a API gateway exposed on the public network that redirects traffic to the relevant application component. All components, but particularly the databases, have an additional 'firewall' layer that allows access only to the application servers.
The databases are also segmented by use, with only the application components suited to a certain purpose having read/write permissions to the databases of that purpose (e.g. the management of information concerning the geo-localisation of races is delegated to an application component that is the only one with access permissions to that portion of the database. In this way, the compromise of another component reduces the risk of this data being accessed).
API system (Application Programming Interface) and integration with Google Maps
APIs are used to make the SmsTaxi APP communicate with other applications or software to enable it to function.
The API system was developed following the OWASP Principles
The API system communicates via a secure HTTPS (SSL/TLS enabled) encrypted channel
Sensitive information such as passwords and tokens are securely stored on the database, not as plain text but as hashes, using the bcrypt protocol
The system uses RBAC (role-based access control) and ACL (access control lists) criteria to validate user permissions and data
ownership
Each API call requires secure authentication using the JWT (RFC 7519) standard the SmsTaxi App uses the Here Maps API. If the User consents to the use of GPS coordinates, (the data on your GPS position will be provided to Here Maps only in anonymous form), it will be possible to see the arrival of the taxi on the maps on the SmsTaxi App.
13. Customers Rights :
Deletion or rectification of data
By entering their profile from the SmsTaxi APP, Consumer Users can modify or delete the data contained in their Account. On the other hand, it is possible to exercise the right of rectification and ask the Controller to correct inaccurate or incomplete personal data that cannot be updated personally.
Data portability and access.
Applicable law allows the User to request knowledge of the personal information held by the Controller. In addition, he/she may request
a copy of the personal information provided, in a commonly used structured and electronically readable format, and/or request us to
transmit such information to another service provider (where technically feasible).
Opposition to the processing of personal data.
The law allows Users who use the SmsTaxi APP to object to the processing of their personal information for purposes based on the legitimate interest of the holder (e.g. taxi geolocation). If you object to such processing, the owner and co-processors may no longer process your personal information for these purposes, unless you can demonstrate compelling legitimate grounds for processing or if such processing is necessary for the establishment, exercise or defense of a legal claim.
Our application requests access to SMS and Call Log permissions strictly for the following purposes:
Default SMS Handling: As the default SMS handler, our app utilizes permissions such as SEND_SMS to enable users to send, and manage SMS messages seamlessly.
Default Handler Requirement: Our app must be actively registered as the default SMS handler before prompting users to accept any SMS or Call Log permissions. The use of these permissions will cease immediately if our app is no longer the default handler.
Contact Prioritization: As the default handler, the app may use SMS and Call Log data to prioritize contacts. This includes presenting users with their most important contacts and improving the recognition and understanding of names. Contact prioritization may involve analyzing contact recency, frequency, and duration to enable user-initiated calls, texts, and actions.
Prohibited Uses: Any usage of data beyond contact prioritization, such as using one user's data to influence another user's product experience, is strictly prohibited.
Default SMS Handler: When our app is set as the default SMS handler, it can read and send SMS messages. For instance, in our taxi service app, the app can send GPS coordinates via SMS to our system to facilitate rider assignment and ensure efficient service delivery.
By adhering to these guidelines, we ensure the privacy and security of our users while providing essential functionalities through our app.
To provide our core functionality, [Your App Name] may request access to sensitive information, including but not limited to SMS messages. This access is essential for delivering specific features of the app and will be used in accordance with Google's Permissions and APIs that Access Sensitive Information policy.
Permissions Requested
SMS Permissions: SMS TAXI requires access to send and receive SMS messages. This permission is necessary for specific core functionality by sending sms contain TGPS and cordonnation of the clients to booking taxi we use sms as payment methode . To utilize this feature, our app needs to be set as the default SMS handler on your device.
The information accessed and collected by SMS TAXI is used solely to perform the functionalities described above. We do not share, sell, or disclose your SMS data to any third parties, except as required by law.
We implement appropriate security measures to protect your personal data from unauthorized access, use, or disclosure. However, please be aware that no security system can guarantee absolute security.
You have the right to control your personal information. You may revoke the permissions granted to SNS TAXI at any time through your device's settings. However, revoking permissions may limit the app's functionality.
We may update our privacy policy from time to time. Any changes will be posted in this section, and we will notify you through the app or other means if there are significant changes.
If you have any questions about this privacy policy or our data practices, please contact us at smstaxi47@gmail.com
1. Collection of Image Data
SMS TAXI may collect, transmit, sync, and store image data from your device. This data collection is necessary "uploading images to our server for.
2. Use of Image Data
The image data collected by SMS TAXI is used solely to provide the aforementioned features. We do not share or disclose your images to third parties without your consent, except as required by law.
3. Sharing of Image Data
Your images may be shared with server for storing and backing up your data" . We ensure that all third parties comply with applicable data protection laws and standards.
Before collecting image data, SMS TAXI will provide a prominent in-app disclosure. This disclosure will:
Clearly State the Data Collection: "SMS TAXI collects/transmits/syncs/stores image data to enable profile picture in settings app .
Be Displayed Within the App: The disclosure will appear during normal usage, such as when you first use the feature that requires image data access.
Be Separate from Other Disclosures: The notice will not be combined with other terms or privacy policy statements.
Affirmative Action Required: You must provide explicit consent before SMS TAXI can access or collect your image data. This will be done by tapping "Accept" or ticking a check-box in response to the disclosure.
No Implied Consent: Navigating away from the consent prompt pressing the home button will not be considered consent. We do not use auto-dismissing or expiring messages to obtain consent.
We implement appropriate security measures to protect your image data from unauthorized access, use, or disclosure. However, please note that no security system can guarantee complete security.
Users of the SmsTaxi APP may exercise their rights by contacting our privacy department by email smstaxi47@gmail.com