Privacy Policy
Effective Date: February 27, 2026 | Last Updated: February 27, 2026
Transportbidder ("we", "us", or "our") operates the Tbidder mobile applications (User App and Driver/Partner App) and the website transportbidder.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
1. Information We Collect
1.1 Personal Information
When you create an account or use our services, we may collect:
- Account data: Full name, email address, phone number, date of birth, gender, and profile photo.
- Driver-specific data: Vehicle information, driver's license, criminal background checks (antecedentes), and verification documents.
- Payment data: Wallet balance, transaction history. We do not store credit card numbers directly.
1.2 Location Data
We collect real-time GPS location data when you use the app to:
- Show your position on the map and find rides nearby.
- Enable live tracking during rides (for both passengers and drivers).
- Calculate route distances and estimated fares.
Drivers may share location in the background while online to receive ride requests. You can disable location access at any time in your device settings, but this may limit app functionality.
1.3 Device Information
- Device model, operating system version, unique device identifiers.
- Push notification tokens (FCM) for sending ride updates and alerts.
- Crash reports and diagnostics via Firebase Crashlytics.
1.4 Usage Data
- Ride history, bids placed and received, tour bookings.
- App interaction patterns for improving user experience.
2. How We Use Your Information
- Provide services: Match riders with drivers, process bids, facilitate rides and tours.
- Communication: Send OTP codes for verification, ride updates, receipts, and important notifications.
- Safety: Verify driver identity and documents, enable real-time tracking, and maintain safety records.
- Improvement: Analyze usage patterns to improve our app, fix bugs, and develop new features.
- Legal compliance: Comply with applicable laws and respond to legal requests.
3. Information Sharing
We do not sell your personal information. We may share data with:
- Ride participants: Riders see driver name, photo, vehicle, and real-time location during a ride. Drivers see rider name and pickup/drop-off locations.
- Service providers: Firebase (authentication, push notifications, crash reporting), AWS (hosting, email), Google Maps (mapping and geocoding).
- Legal authorities: When required by law, court order, or to protect safety.
- Business partners: Tour operators and agencies (only relevant booking data).
4. Data Storage & Security
- Data is stored on secure servers hosted on Amazon Web Services (AWS) in the ap-south-1 (Mumbai) region.
- All data transmission is encrypted using HTTPS/TLS.
- Passwords are hashed using bcrypt and never stored in plain text.
- Authentication tokens (JWT) are stored securely on device using encrypted storage.
- We implement rate limiting, helmet security headers, and input validation to protect against common attacks.
5. Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update or correct your personal information via the app profile settings.
- Deletion: Request deletion of your account and associated data by contacting us.
- Opt-out: Disable push notifications or location sharing in your device settings.
- Data portability: Request your data in a portable format.
6. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.
7. Third-Party Services
Our app uses the following third-party services that may collect data:
- Google Maps Platform — Google Privacy Policy
- Firebase (Google) — Authentication, Cloud Messaging, Crashlytics
- Amazon Web Services — Hosting, SES Email, S3 Storage
8. Data Retention
We retain your data for as long as your account is active or as needed to provide services. Ride history and transaction records are retained for up to 3 years for legal and accounting purposes. You may request earlier deletion by contacting us.
9. International Data Transfers
Your data may be transferred to and stored on servers located outside your country of residence. We ensure appropriate safeguards are in place to protect your data in compliance with applicable data protection laws.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. The "Last Updated" date at the top of this page indicates when the policy was last revised.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
- Email: contact@transportbidder.com
- Website: transportbidder.com
- Address: Lima, Peru