Privacy Policy
Version May 2026
1. Data controller
Citiroads (Belgium, Brussels) processes personal data via the website and mobile app.
2. Data collected
Identity, trip details, driver documents, live location during rides, push tokens, payment references via Mollie.
3. Purposes & legal bases
Contract (rides), legal obligation (invoicing), legitimate interest (fraud, safety), consent (promos, optional cookies).
4. Retention
Account until deletion. GPS points: 90 days after ride. Invoices: 7 years. Share links: 12 hours.
5. Recipients
Mollie, Vercel, Expo, OpenStreetMap/Nominatim, email providers. No sale of data.
6. Your rights
Access, rectification, erasure, restriction, portability, objection. privacy@citiroads.be — DPA: APD-GBA (Belgium).