Effective Date: 01.02.2026

This Privacy Policy explains how MPTY Apps, the developer and operator providing the Narva Taxi application (hereinafter referred to as the Operator), processes your personal data. We act as the data controller under the GDPR and comply with the legislation of the Republic of Estonia.

By using the Application, you agree to this Policy.

1. What data we collect

• Name / Nickname — for personalization.
• Phone number — used to create an account, for communication, notifications, and authorization via a third-party SMS service.
• Geolocation — only during ride requests, to determine pickup location and route.
• Ride data — pickup/destination addresses and coordinates, time, status, price, payment method, ride history, ride rating.
• Technical data — IP address (for security and rate limiting).
• Device UUID — generated at the first launch and used to identify the device.

Purposes of processing: registration, authentication, order fulfillment, data transfer to partner drivers, service improvement, ensuring security, and compliance with laws.

2. Legal bases for processing

• Your consent.
• Performance of a contract (provision of services).
• Our legitimate interests (security, maintaining service operation).

3. Data sharing with third parties

Data is shared only with partner transportation companies (drivers and dispatchers) to fulfill your order. For authorization, your phone number may also be transferred to a third-party SMS delivery service (e.g., ClickSend or a similar provider). Transfer is carried out only to the extent necessary to send a verification code. For map display, routing, and geocoding, coordinates and address data may be shared with third-party mapping and geocoding service providers (e.g., MapTiler, locality.ee, or similar services). Data is not shared with advertising agencies or other parties unless required by law. Data protection agreements are signed with partners.

4. Data retention period

We store data as long as you use the Application or as required to fulfill legal obligations. After account deletion, personal identifiers (name, phone number, device ID) are removed or anonymized. Ride history and operational logs may be retained in anonymized/pseudonymized form for legal, accounting, safety, and dispute resolution purposes. The deletion/anonymization period is no more than 30 days, unless otherwise required by law.

5. Your rights

• Access your data.
• Correct or delete it (“right to be forgotten”).
• Restrict processing or object to it.
• Transfer your data.
• Withdraw consent.
• Submit a request to delete or obtain a copy of your data by contacting us at support@taxiservice.ee or through the application settings.
• File a complaint with the supervisory authority: Andmekaitse Inspektsioon (Estonia) — www.aki.ee

6. Data security

We use technical and organizational measures to protect data: encryption (TLS/SSL), restricted access, storage on secure servers in the EU/EEA.

7. Cookies and local storage

The Application may use technical cookies or local storage solely to ensure its functionality (e.g., maintaining a session). We do not use them for marketing or tracking. Usage is based on your consent.

8. Data transfers outside the EU

If data is transferred outside the EU/EEA, this is done only in accordance with Chapter V of the GDPR (e.g., through standard contractual clauses).

9. Limitation of liability

The Operator provides the Application solely as a technological platform and is not a carrier.

The Operator is not responsible for:

• the technical condition of vehicles.
• the licensing status of drivers or partners.
• the quality and safety of transportation services.
• the actions or omissions of third parties.
• any losses resulting from a ride or its cancellation.

All responsibility for transportation services lies with partner companies or drivers themselves. The Operator is also not responsible for the operation of third-party services used for SMS delivery or mapping and routing (e.g., ClickSend, map/routing services (e.g., locality.ee), etc.).

10. Payment for services

Payment for transportation is made directly between you and the driver. The Application does not accept payments and does not act as an intermediary.

11. Policy changes

We may update the Policy. Significant changes will be communicated separately.

12. Contact

For questions: support@taxiservice.ee

You can delete your account via the Application settings. Personal data will be deleted or anonymized within a reasonable time (usually up to 30 days), unless otherwise required by law. Ride history and operational logs may be retained in anonymized/pseudonymized form where required.

Consent

By clicking “Accept” or continuing to use the Application, you confirm that you have read this Policy and agree to the processing of your data, including sharing with partners.

If you refuse, you will not be able to use the Application.