Legal / Privacy
Privacy Policy.
This policy explains the information involved in using Sttepa and the choices available to you. Effective date: [EFFECTIVE DATE].
Set the [EFFECTIVE DATE] before publication.
Overview
Sttepa is a ride-hailing platform connecting passengers and drivers. This Privacy Policy explains how Sttepa handles personal information when people use the website, mobile application and related services. The information involved depends on whether you use Sttepa as a passenger or driver and which features you use.
Information We Collect
Account and profile information
We collect your first and last name, username, phone number, date of birth, gender, user role and information used to create, authenticate and manage your account.
Trip and ride information
We collect information about ride requests, pickup and destination, ride status, scheduled rides, driver offers and whether offers are accepted or rejected, cancellations and any reason or comment you provide, ride history, timestamps and ride-related amounts where applicable.
Location information
Depending on the feature and permissions, we collect passenger or driver current or last known location, pickup and destination coordinates, location updates during an active ride, and information used for nearby-driver discovery, ride matching and route or trip functions.
Driver and vehicle information
For people applying to drive, we collect vehicle brand, model, year, color and type; driving licence and vehicle registration information; and identity verification documents, including CIN images and a selfie. We use this information for the driver application and review process.
Safety, communications and support
We collect reports about another user, report reasons and optional comments, block or unblock actions, safety-related ride cancellations, ride-related conversations and support communications.
Device and technical information
We may collect device identifiers where provided by the platform, push notification tokens, operating system or platform details, and basic technical or log information needed to operate, troubleshoot and help secure the service. Push notifications may relate to rides, accounts or other service events.
How We Use Information
We use information as needed to:
- Create, authenticate and manage accounts.
- Provide ride-hailing functionality, match passengers and drivers, show relevant nearby drivers or ride requests, and manage ride requests, offers and active rides.
- Provide route and location functions relevant to a requested or active ride.
- Process driver applications and review information submitted for driver verification.
- Send service and ride notifications.
- Provide safety features, handle reports and blocks, and investigate safety concerns.
- Prevent abuse and fraud, provide support, and maintain and improve service reliability.
- Meet applicable legal obligations.
Location Information
Passenger location can help set a pickup point and find nearby drivers. Driver location can help show relevant ride requests and coordinate a ride. During an active ride, location updates may be used for trip status, route functions or a shared ride view. Location use depends on the relevant app feature and the permissions available on your device; this policy does not say that Sttepa continuously tracks you at all times or collects background location. You control operating-system location permissions. Some Sttepa features may not work as intended when a required permission is disabled; where supported, you may enter a location manually.
Identity and Driver Verification Information
The app's identity verification flow collects images of the front and back of a CIN and a clear selfie. Driver information also includes identity, licence, vehicle and registration details used to review an application and the information submitted. This describes Sttepa's review process and does not claim government verification, automated biometric identification or certification. Identity checks do not guarantee a particular ride outcome or personal safety.
Service Providers
Service providers may process information on Sttepa's behalf when needed to operate the service, including infrastructure, maps and routing, notifications, verification, file storage, support or security. The information involved depends on the provider's role and the feature in use.
Data Retention
We retain information only for as long as reasonably necessary to provide the service and administer accounts, address safety and security, handle disputes, prevent fraud or meet applicable legal obligations. The period depends on the type of information and the reason it is held. Some records may remain after an account deletion request where legally required or reasonably necessary for legitimate legal or security purposes.
Data Security
We use reasonable technical and organizational measures intended to protect personal information against unauthorized access, loss, alteration or disclosure. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.
User Rights
Subject to applicable law, you may be able to request access to or correction or deletion of personal information, or request restriction of or object to certain processing where applicable. You can also manage device permissions through your operating-system settings. To make a request, contact us at [email protected]. We may need to verify your identity and may be unable to fulfill part of a request where applicable law requires or permits us to retain or use the information.
Account and Data Deletion
You can request deletion of your Sttepa account and associated personal data. See our Delete Account page for instructions. Information that is no longer needed will be deleted or anonymized, while some records may need to be retained where required by applicable law or legitimate legal obligations.
Children's Privacy
The minimum age to use Sttepa is 4 years. If you believe a child below this age has provided personal information to Sttepa, contact us at [email protected] so the matter can be reviewed.
International Processing
Where service operations or providers involve processing information outside your country, your information may be processed in another jurisdiction. Where applicable, we will take steps required by law to protect it during such processing.
Changes to this Privacy Policy
We may update this policy as the service changes. The updated version will be posted here with a revised effective date. Where required, we will provide additional notice.
Contact
For privacy questions or requests, email [email protected].