Offers, requests and messages the moment they arrive, in the TaxiDiaspora app.

Get the app

Privacy policy

Last updated: 27 October 2026

This is a translation for your convenience. The Romanian version is the legally binding one.

Data controller

  • Operator: EVITĂ AMENZI SRL
  • Tax ID (CUI): RO47006778
  • Trade Register No.: J2022003140053 (J05/3140/2022)
  • Registered office: Str. Dragoș Vodă nr. 81, Piatra Neamț, jud. Neamț, cod poștal 610054
  • Email: [email protected]

For any question about your data, write to us at [email protected].

What data we process, why and on what legal basis

  • Account data: your phone number, name, optionally a profile photo and email, the languages you speak and your preferred contact channels (for example WhatsApp or Viber). We use them for your account and for signing in with a code. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • Requests, listings and routes: pick-up and destination points, the date, the number of passengers, a description and photos of the load; for carriers, the areas covered, the vehicle and the schedule. We use them to publish requests and match them with carriers on the route. Legal basis: performance of a contract.
  • Voice and text messages: voice messages you record for a request, an offer, a listing or an SOS alert are transcribed automatically and the trip details are extracted from them; on request, messages and requests are translated automatically. Legal basis: performance of a contract.
  • Location, if you allow access to it: your device's current position, the path driven during a trip in progress, road reports and SOS alerts. We use it for nearby requests, trip tracking, road reports and SOS alerts. Legal basis: performance of a contract and, for SOS alerts, our legitimate interest in user safety (Art. 6(1)(f)). You can withdraw location access at any time in your phone settings.
  • Identity verification (carriers): a photo of your identity document and a selfie, including video, processed by our provider Didit, which compares the face in the selfie with the one on the document. We receive the result and the document details needed for it. The purpose is preventing fake accounts and fraud. Legal basis: your explicit consent, asked for before verification (Art. 9(2)(a) GDPR). Without it, your identity cannot be verified.
  • Calls: voice calls in the app are transmitted in real time and are not recorded. Legal basis: performance of a contract.
  • Billing (carriers buying paid features): your name or company name, tax ID, address, billing email, payments and the invoices issued. Card details are processed by Stripe; we do not store them. We check VAT numbers in the EU VIES system and company details with the Romanian tax authority ANAF. Legal basis: performance of a contract and our legal accounting obligation (Art. 6(1)(c)).
  • Reviews, reports and feedback: reviews left after trips, reports about users, messages or listings, and feedback you send about the app. We use them for trust between users, moderation and enforcing the terms. Legal basis: legitimate interest and our legal obligation to handle notices of illegal content.
  • Technical data: your push notification identifier, device type and app version, your IP address when you request a sign-in code (to protect against abuse) and error reports. Legal basis: legitimate interest in the security and operation of the service.
  • Usage statistics: through Google Analytics, Firebase and Meta, only if you have consented (see Cookies). Legal basis: consent (Art. 6(1)(a)), which you can withdraw at any time.

Who sees your data

  • The public: carrier profiles (name, areas, vehicle, languages, reviews), and requests and listings without the author's name or contact details.
  • Carriers: a customer's contact details (phone, email if provided, and preferred contact channels) become visible to carriers who cover the route of the request or who have sent an offer for it.
  • Our providers, who process data on our behalf under contract: Supabase (database, sign-in and file storage), Prelude (sending sign-in codes by SMS, WhatsApp, Viber, Telegram or call), Cloudflare (abuse protection), Didit (identity verification), Mapbox (maps and route calculation), ElevenLabs (voice-message transcription and reading listings aloud), OpenAI (extracting details from messages and translation), Agora (voice calls), Expo, Google and Apple (notifications), Stripe (card payments), Sentry (error reporting), Google and Meta (statistics, only with your consent).
  • Authorities, when the law requires us to.

Transfers outside the European Economic Area

The database is hosted in the European Union (Ireland). Some of the providers above, for example OpenAI, ElevenLabs, Mapbox, Agora, Expo, Google, Meta, Sentry, Cloudflare or Stripe, may also process data outside the European Economic Area, in particular in the United States. In those cases the transfer relies on the European Commission's adequacy decision for the EU–US Data Privacy Framework, for certified providers, or on the standard contractual clauses approved by the Commission. You can ask us for details of these safeguards.

How long we keep it

  • Your account, requests, listings, messages and reviews: for as long as the account exists. After you close it, we anonymise them within 30 days (see Account deletion).
  • Your current position: deleted when you close the account or after 90 days without an update. A trip's path: 90 days, except for trips under dispute, which are kept until the dispute is resolved.
  • Road reports: deleted 7 days after they expire.
  • The sign-in code log (phone number and delivery status): 90 days.
  • Identity verification: we keep the result for as long as the account exists. We do not store the document images or the selfie; Didit keeps them under its contract with us.
  • Invoices and accounting records: 10 years from the end of the financial year in which they were drawn up (Romanian Accounting Law 82/1991, art. 25).
  • Reports, disputes and feedback: until resolved and then for as long as needed to establish or defend a legal claim, usually at most 3 years (the general limitation period).

Your rights

You have the right of access, rectification, erasure, restriction, portability and to object to processing based on legitimate interest, and the right to withdraw your consent at any time, without affecting processing carried out before. We reply within one month.

The right to erasure has exceptions set by law (Art. 17(3) GDPR): we keep data the law requires us to keep, such as invoices, and data needed to establish, exercise or defend legal claims, such as unresolved disputes and reports.

Identity verification is automated. If it is rejected, you can ask for the result to be reviewed by a person on our team.

You can close your account from the app settings or request deletion of your data by following the steps on the Account deletion page. For other requests, write to us at [email protected]. You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP, dataprotection.ro) or with the data protection authority in the country where you live.