1. Introduction

Rumble Taxi is a ride-hailing platform that connects riders with independent professional drivers across Tunisia. Protecting your personal data is fundamental to our mission. This Privacy Policy describes the categories of information we collect, why we collect them, how we use and share them, and the rights you have over your personal data.

By creating an account or using the Service, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please do not use the Service. This Policy applies in addition to our Terms of Service and Cookie Policy.

2. Data Controller

Rumble Taxi acts as the data controller for the personal data processed in connection with the Service in Tunisia. You may contact our Data Protection Officer at any time at contact@rumbletaxi.com for any inquiry regarding the processing of your personal data.

3. Information We Collect

3.1 Information you provide

Account information: name, email, phone, date of birth, profile picture, hashed password; for drivers, also identity documents, driving licence, vehicle registration, insurance and bank details.
Payment information: card details processed by our PCI-DSS compliant partners (we never store the full card number), billing address, and transaction history.
Communications: messages with our support team, feedback, ratings, complaints, and any content you submit.
Trip information: pickup and drop-off locations, route, duration, fare, vehicle, ride preferences.

3.2 Information collected automatically

Location data: precise GPS while the app is in use and approximate location from IP. Disabling precise location at OS level limits functionality.
Device and technical data: device model, OS version, identifiers, network information, language, IP, crash reports, performance metrics.
Usage data: pages visited, features used, screens viewed, search queries, ride history, in-app actions, timestamps.
Cookies and similar technologies: see our Cookie Policy.

3.3 Information from third parties

Authentication providers (Google, Apple, etc.) share your basic profile if you sign in.
Background-check vendors share verification, criminal-record checks where permitted, and driving history for drivers.
Marketing and analytics partners share aggregated audience data and attribution events.
Public sources for sanctions, anti-money-laundering and fraud compliance.

4. How We Use Your Information

We use the personal data we collect to:

Create and manage your account and provide the Service.
Match riders with nearby drivers and calculate routes and fares.
Process payments, refunds and driver payouts.
Verify the identity, eligibility and ongoing compliance of drivers.
Provide customer support and respond to your inquiries, claims and disputes.
Enforce our Terms of Service and prevent fraud, harassment, accidents and misuse.
Improve, troubleshoot and develop new features through analytics and product research.
Send transactional messages and, with your consent, marketing communications.
Comply with legal obligations including tax, accounting and law-enforcement requirements.

5. Legal Bases for Processing

We rely on the following legal bases under the Tunisian Organic Act n° 2004-63 of 27 July 2004 on the Protection of Personal Data and, where applicable, the EU GDPR:

Performance of a contract: to deliver the Service you have requested.
Legitimate interests: to secure the platform, prevent fraud, develop new features and conduct analytics.
Consent: for marketing communications, optional analytics cookies and use of precise location.
Legal obligation: bookkeeping, taxation, regulatory reporting and law-enforcement requests.

We do not sell your personal data. We share it only as strictly necessary, with:

Drivers and riders: limited information required to complete a ride.
Payment processors: to process card payments securely.
Service providers: cloud hosting, mapping, SMS and email gateways, customer support, analytics and crash reporting, all bound by data-processing agreements.
Insurance partners: in case of accidents, claims or incidents during a ride.
Authorities: courts, regulators and law-enforcement when legally compelled.
Corporate transactions: in case of a merger, acquisition, financing or sale of assets, subject to confidentiality.

7. Data Retention

We retain personal data only as long as necessary, unless a longer retention period is required or permitted by law. Indicative periods:

Account data: lifetime of the account, plus 12 months after deletion to handle disputes and refunds.
Trip and payment records: 10 years, in accordance with Tunisian commercial and tax legislation.
Customer-support communications: 3 years after the last interaction.
Marketing data: until you withdraw your consent or for 3 years after your last interaction with us.

8. International Transfers

Some of our service providers process personal data outside Tunisia, including in the EU, the UK and the US. When we transfer data abroad, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or your explicit consent where required.

9. Security

We implement technical and organisational measures designed to protect your personal data against unauthorised access, alteration, disclosure or destruction: encryption in transit and at rest, role-based access controls, security audits, vulnerability scanning, employee training. No system is impervious to attack and we cannot guarantee absolute security. If we become aware of a breach affecting your data, we will notify you and the competent authority in accordance with applicable law.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: obtain a copy of the personal data we hold about you.
Rectification: correct inaccurate or incomplete data.
Erasure: request deletion subject to legal retention obligations.
Restriction: limit processing in specific circumstances.
Portability: receive your data in a structured, machine-readable format.
Objection: object to processing based on legitimate interests, including direct marketing.
Withdraw consent: at any time, without affecting prior lawful processing.
Lodge a complaint with the Tunisian INPDP or your local data-protection regulator.

To exercise any of these rights, please email contact@rumbletaxi.com. We may need to verify your identity before responding. We aim to reply within 30 days.

11. Cookies and Tracking

We use cookies, SDKs, pixels and similar technologies to operate the Service, remember your preferences, measure performance and, with your consent, deliver tailored marketing. Detailed information is available in our Cookie Policy.

12. Third-Party Services

The Service may contain links to third-party websites, applications or features. Their use of personal data is governed by their own privacy notices, which we encourage you to review. We are not responsible for the privacy practices of third parties.

13. Children's Privacy

The Service is not directed at children under 13 and we do not knowingly collect personal data from children. Riders aged 13-17 may use the Service only under the supervision of a parent or guardian who has consented to these terms. Contact us if you believe a child has provided us with personal data, so we can promptly delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the date at the top of this page and, for material changes, provide a more prominent notice (email or in-app message) at least 14 days before the changes take effect.

15. Contact Us

Questions or requests? Contact us:

Email: contact@rumbletaxi.com
Phone: +216 71 000 000
Postal address: Rumble Taxi Data Protection Office, Tunis, Tunisia.

Privacy Policy