Privacy policy

Last updated: [DATE]

Template. Fill in the bracketed details and have it checked before you publish. It describes how the site and app are built today.

Who is responsible

[Company or sole-trader name], [street address], [postcode, city], Croatia. OIB: [number]. Email: hello@fareproof.app.

What stays on your phone

Your rides, verdicts, saved taxis and settings are stored only on your own device. During a ride check, your GPS position is processed on your phone to measure distance and detect detours. It is not sent to us.

Your account

To use free checks or a pass you create an account with your email address and a password. Our server stores your email, a protected form of your password, how many checks you used and when, your passes, and, for hosts, your guest link and how many guests used it. We need this to give you the checks and passes you are entitled to (GDPR Art. 6(1)(b)). If you buy a pass in the App Store or Google Play without registering, the account has no email. You can delete your account in the app at any time (Plan and settings → Account → Delete my account); this deletes these records at once. Our server runs on Supabase (Supabase Inc.), in the EU region [Frankfurt].

What leaves your phone

• Routes. For each check, the start and destination are sent through our server to Google Maps Platform (Google Ireland Ltd. / Google LLC) to calculate routes with traffic. We do not keep the addresses. The map and the address search box are loaded from Google Maps directly. Your ride history on the phone records the city, distance, taxi and price, not the addresses. Google processes this under its own privacy policy.
• Purchases on the website. Polar (polar.sh) is the seller of record and processes your payment, billing and tax details. We receive your email address and order details.
• Purchases in the apps. Apple (App Store) or Google (Google Play) process the payment. RevenueCat Inc. confirms the purchase to us using an anonymous account number; it does not receive your email from us.
• Emails. Account emails (confirmation, password reset) are sent by [Supabase / your email provider].
• Waitlist. If you join, we store your email, whether you take taxis or host guests, and referral codes with MailerLite, to email you about the launch. Legal basis: consent (Art. 6(1)(a)). Every email has an unsubscribe link.
• Airport transfer partner link. On trips to or from an airport the app may show a link to Welcome Pickups. If you tap it, you leave Fareproof; Welcome Pickups and our affiliate network Travelpayouts may set cookies to record that the booking came from us. We send them none of your data.
• Hosting. [Cloudflare / Netlify] processes technical data such as your IP address to deliver the site.
• Fonts. Pages load typefaces from Google Fonts, so your browser connects to Google servers. [Remove if you self-host the fonts.]

We do not use analytics, advertising or tracking cookies, and we never sell data.

How long we keep it

Account data stays until you delete the account. Records of checks older than [24 months] are deleted. Payment records are kept as long as tax law requires.

Your rights

You can ask for access to, correction of or deletion of your personal data, object to processing, or withdraw consent at any time by writing to hello@fareproof.app. You can also complain to the Croatian data protection authority, AZOP (azop.hr).