Privacy Policy

TaxiTao ("TaxiTao," "we," "us," or "our") is a technology platform that connects customers with independent drivers for transportation services. We are committed to protecting your privacy and handling your personal data responsibly and transparently.

By accessing or using the TaxiTao platform (web or mobile), you agree to this Privacy Policy. If you do not agree, you must stop using our services.

We collect the following categories of data:

• Account Information: Name, email, phone number, password (hashed), role (customer, driver, admin).
• Driver Profile Data: Vehicle details, plate number, subscription status, business location, profile photo, rating and review statistics.
• Ride and Booking Data: Pickup and drop-off locations, dates, times, fare estimates, completed trip details, and communication logs relevant to the booking.
• Payment & Subscription Data: Payment confirmations, subscription periods, amounts paid, and basic M-Pesa transaction references (where provided by you).
• Device & Usage Data: IP address, device type, browser, app version, and basic analytics on how you use the platform.
• Location Data: Approximate or precise location for drivers (to show availability) and for customers (to set accurate pickup points), when permission is granted.

We use your data to:

• Provide and operate the TaxiTao booking platform.
• Match customers with available drivers and manage ride requests.
• Communicate with you about bookings, account activity, and service updates.
• Verify driver subscriptions and manage access to ride details.
• Improve our services, security, and fraud prevention.
• Comply with legal obligations and respond to lawful requests.

We process your data on the following legal bases:

• Performance of a contract (providing rides you request).
• Legitimate interest (improving safety, support, and UX).
• Compliance with legal obligations under Kenyan law.
• Your consent (for optional features like marketing or GPS).

We do not sell your personal data. We share data only when necessary to provide the service:

• With drivers: Customers’ pickup/drop-off points, name, and contact phone for booked or active trips.
• With customers: Driver’s name, rating, vehicle details, and contact phone for accepted trips.
• With service providers: Cloud hosting, analytics, and communication providers under strict data protection agreements.
• With authorities: When required by law, court order, or to protect safety and prevent fraud.

We keep your data only for as long as necessary to fulfill the purposes described in this policy, including:

• Ride and booking records: kept for a reasonable period for support, disputes, and regulatory compliance.
• Driver subscription and payment records: kept for accounting and audit purposes.
• Account data: retained while your account is active. You may request deletion, subject to legal limitations.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your account and certain data.
• Object to certain types of processing (e.g., marketing).
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us using the details in the Contact section below.

TaxiTao is not intended for children under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we do, we will update the "Last Updated" date at the top of this page.

Significant changes may be communicated via email or in-app notifications. Your continued use of the platform after changes are posted constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us: