Privacy Policy
Ella Taxi — Passenger App · Effective from January 31, 2026
1. Data Controller
The controller of your personal data is Ella Taxi Brno, IČO 059 28 664, with registered address at Nové sady 988/2, Brno, 602 00, Czech Republic.
The application was developed by mobilComm Ltd.
2. Data We Collect
2.1 Personal Information
- Name, email address, phone number
- Date of birth, gender (optional)
- Profile photo (optional)
- Identity document image (for verification, if required)
2.2 Location Data
- Real-time GPS location during ride booking and tracking
- Pickup and drop-off addresses
- Background location when the app is active (for ride tracking)
2.3 Ride and Transaction Data
- Ride history (routes, times, distances, prices)
- Payment method and transaction status
- Ratings and reviews
2.4 Device and Technical Data
- Device identifier, operating system, app version
- Error logs and diagnostic data
- Push notification tokens
3. Purpose of Processing
- Providing the service — matching you with available drivers, calculating routes and prices, processing payments
- Communication — sending ride status updates, in-app messaging with drivers, support
- Safety and security — verifying identity, preventing fraud, device integrity checks
- Service improvement — analyzing usage patterns, fixing errors, improving reliability
4. Legal Basis (GDPR)
- Contract performance — processing necessary to provide the taxi service you requested
- Legitimate interest — service improvement, fraud prevention, error diagnostics
- Consent — optional data (profile photo, marketing communications)
- Legal obligation — tax and accounting records retention
5. Third-Party Services
We use the following third-party services to operate the app:
- Firebase (Google) — authentication, real-time database, security attestation
- Google Maps / Mapy.com — map display, route calculation, geocoding
- OneSignal — push notifications
- Cloudflare — API proxy and security
These services process data in accordance with their own privacy policies. We minimize the data shared and use API proxies to protect your information.
6. Data Retention
- Account data — retained while your account is active, deleted within 30 days of account deletion request
- Ride history — retained for 3 years (legal/accounting requirements)
- Location data — retained only for the duration of active rides; historical location data is stored as part of ride history
- Error logs — automatically deleted after 90 days
7. Your Rights
Under GDPR, you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data
- Restriction — limit how we process your data
- Data portability — receive your data in a structured format
- Object — object to processing based on legitimate interest
- Withdraw consent — at any time, without affecting prior processing
To exercise your rights, contact us at info@ellataxi.cz.
8. Data Security
We protect your data using:
- Encrypted local storage on your device
- Secure token-based authentication
- Firebase App Check / App Attest for app integrity verification
- HTTPS encryption for all data transfers
- API proxy layer protecting third-party API keys
9. Children's Privacy
This app is not intended for children under 16 years of age. We do not knowingly collect personal data from children.
10. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
11. Contact
For questions about this privacy policy or your personal data, contact us: