Privacy policy
Who we are
The data controller is Rikba Technology Ltd, registered in Malta under company number C 116597, with its registered office at 132, Office A1, Triq il-Pitkali, Attard ("Rikba", "we"). Contact us about privacy at info@rikba.eu.
What we collect
- Account details: name, mobile number, email address, profile photo if you add one, and your language.
- Ride details: pickup and drop-off points, the route, times, car type, fare, ratings and tips.
- Location: riders' location while they book and ride. For drivers, the car's location while they are online in the driver app, which we use to offer trips and show riders where the car is.
- Driver documents: driving licence, Transport Malta tag, ID, vehicle registration and insurance, and the results of our checks.
- Payments: our payment provider Stripe stores card details. We receive only the card type, last four digits and payment status. For cash rides we record the amount paid.
- Messages: in-app chat between rider and driver, and support conversations.
- Device and usage data: device type, app version, push notification token, IP address and error logs.
Why we use it
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Creating your account, matching riders with drivers, showing fares, taking payment, sending receipts | Performance of our contract with you |
| Checking that drivers and vehicles are licensed | Legal obligation, and legitimate interest in rider safety |
| Keeping ride and payment records for tax and accounting | Legal obligation |
| Preventing fraud and misuse, handling complaints and safety incidents | Legitimate interest |
| Sending offers and news | Your consent, which you can withdraw at any time |
Who we share it with
- Your rider or driver: during a ride, the rider sees the driver's name, photo, car and plate, and the driver sees the rider's name, pickup point and destination, so you can find each other and get in touch.
- Business clients: if you ride on a company account, that company sees the rides charged to it.
- Service providers that process data for us under contract: Hetzner Online (servers, Germany), MongoDB (database), Stripe (payments), Twilio (SMS codes), and Google (maps, places search and push notifications).
- Authorities, such as Transport Malta, the police or the tax authorities, when the law requires it.
Some of these providers are based in the United States. Where data leaves the EU, it is protected by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep it
- Account details: while your account is open. When you delete your account, we remove them within 30 days.
- Ride and payment records: for as long as Maltese tax and accounting law requires.
- Driver documents: while you drive with us, and for the period after that which the law requires.
- Server logs: up to 90 days.
Deleting your account
In the app, open your profile and choose Delete account. You can also email info@rikba.eu from the address or phone number on your account. We keep only the records the law requires, as listed above.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to limit or object to how we use it, or to receive it in a portable format. Email info@rikba.eu. We answer within one month.
You can also complain to the Information and Data Protection Commissioner (IDPC) in Malta, at idpc.org.mt.
Children
You must be 18 or older to create an account. A minor can ride only with an adult who holds the account.
Changes
If we change this policy in a way that matters to you, we will tell you in the app before the change takes effect.