How GAIA Taxi collects, uses, shares and retains personal data, and how you exercise your rights over it.
Version 2026-08-22
1. Data controller
GAIA Taxi is the controller of the personal data described here. Independent drivers are separate controllers for the data they hold about riders in the course of providing a ride.
2. What we collect
Account data: name, email, phone number, preferred language and currency, profile photo where provided.
Ride data: pickup and destination addresses, stops, route, distance, duration, timestamps, ride status and driver assignment.
Location data: precise device location while a ride is active — continuously for drivers who are online, and for riders during pickup and the ride — used for dispatch, tracking, safety and fare accuracy.
Payment data: amounts, currency, tax and commission breakdowns, payment method type and the provider's transaction reference. Full card numbers are handled by our payment provider and never reach our systems.
Driver compliance data: licence, insurance, vehicle documents, identity selfies and verification outcomes.
Communications: in-ride chat messages and their AI translations, voice messages and transcripts, support tickets, ratings and incident reports.
Technical data: device type, app version, language, crash and error diagnostics with identifiers removed.
3. Why we use it and on what basis
To perform the contract with you: matching rides, navigation, fares, payments, payouts, receipts and support.
For our legitimate interests: safety, fraud prevention, service quality, aggregate analytics and product improvement.
To comply with legal obligations: tax and accounting records, licensing checks, and lawful requests from authorities.
With your consent: push notifications, marketing messages and non-essential analytics. Consent can be withdrawn at any time in Account.
4. Who we share it with
The driver or rider on your ride sees the limited details needed to complete it (first name, pickup and destination, contact through the app).
Service providers acting on our instructions: the payment and payout provider, mapping and geocoding provider, AI translation and speech provider, push delivery and hosting.
Emergency services or authorities where necessary to protect life or comply with the law.
We do not sell personal data.
5. International transfers
Some providers process data outside your country. Where that happens, transfers rely on adequacy decisions or standard contractual clauses with appropriate safeguards.
6. Retention
Ride, receipt and payout records are kept for the period required by tax and transport law in the relevant market (typically up to 7 years).
Chat, voice recordings and their transcripts are kept for a short period for safety and dispute handling, then deleted.
Diagnostics are retained in scrubbed form. Account data is deleted or anonymised when you close your account, except records the law requires us to keep.
7. Your rights
You can access, correct, export, restrict or object to processing, and request erasure of your personal data. Account → Privacy provides self-service download of your data and account deletion.
Deletion anonymises rides and financial records we must retain, so historical accounting stays intact while you are no longer identifiable in it.
You may also lodge a complaint with your local data protection authority.
8. Cookies and similar technologies
We use strictly necessary storage to keep you signed in, remember your language, currency and theme, and run the offline app shell. These cannot be switched off.
Non-essential analytics and product measurement run only after you accept them in the consent banner, and your choice can be changed at any time in Account → Cookies.
9. Children
The service is not intended for children under 18. Minors may travel only when accompanied by an adult account holder.
10. Contact
Privacy questions and rights requests go through in-app Support, which routes them to the privacy team.