ANDA

Privacy Policy

Version in force: 28 September 2026

1. Data Controller

Luiz Alberto Suares Araujo.
Contact: anda@anda.taxi

2. Data We Collect

  • Authentication: email address and password (stored as a hash).
  • Profile: full name, phone number, profile photo (optional).
  • Drivers in Portugal: driving licence number, taxi driver certificate (CMT) number, taxi licence number, municipality of the licence, vehicle registration, model, colour and year, photo of the document.
  • Drivers in Spain: driving licence number, municipal driver permit number, municipal licence number, municipality of the licence, and the same vehicle details.
  • Location: GPS coordinates while the service is actively in use, that is, during the request, the approach and the ride.
  • Notifications: push token (Expo and Firebase Cloud Messaging).
  • Ratings: stars and comments linked to the profile.
  • Technical logs: anonymous errors and events used to improve the service.

We do not collect payment data. The fare is the taximeter fare and is paid directly to the driver. ANDA does not process, charge or handle payment for rides, and therefore does not collect or store users' card or bank account details.

3. Purposes

  • Connecting the passenger to a licensed taxi and following the ride.
  • Showing the fare estimate before the request.
  • Communication between passenger and driver during the ride.
  • Verification of the driver's documents and licence.
  • User support.
  • Fraud prevention and platform security.
  • Continuous improvement of the product, using anonymised data.

4. Legal Basis (GDPR)

  • Art. 6(1)(b): performance of the contract, for operating the rides.
  • Art. 6(1)(c): legal obligation, for verifying the documents required for taxi transport.
  • Art. 6(1)(f): legitimate interest, for fraud prevention, security and service improvement.
  • Art. 6(1)(a): consent, for the profile photo, which can be removed at any time.

5. Data Sharing

We share data only with:

  • Supabase: database and storage infrastructure, with servers in the European Union.
  • Mapbox: coordinates for route calculation and map display.
  • Expo and Firebase Cloud Messaging: push token.
  • The other party to the ride: during an active ride, the passenger sees the driver's name, photo, average rating, vehicle registration and model; the driver sees the passenger's name, photo and average rating.
  • The taxi cooperative the driver belongs to, in relation to the operating data of its own drivers.

We do not sell data to third parties and we do not use it for advertising.

6. Retention Periods

  • Account data: for as long as the account is active.
  • After account deletion: personal data is deleted or anonymised within 30 days.
  • Ride records, with no identifiable personal data: kept for up to 5 years, for legal and accounting obligations.
  • Technical logs: 90 days.
  • Driver documents: while the driver is active on the platform and, afterwards, for the period required by law.

7. Deleting Your Account

You can delete your account at any time, in the app under Profile and then Delete account, or by requesting it at anda.taxi/en/delete-account.

On deletion, your name, phone number, photo, push token and driver documents are deleted or anonymised, and the sign-in account is removed. Records of completed rides are kept without personal data, to meet legal obligations and because they also concern the other party to the ride.

An account cannot be deleted while a ride is in progress.

8. Your Rights

You have the right of access, rectification, erasure, portability, objection to processing based on legitimate interest, and restriction of processing.

To exercise them, write to anda@anda.taxi with the subject "GDPR Rights". We reply within 30 days at the latest.

9. Cookies and Analytics

The mobile app does not use cookies and has no third-party analytics tracking.

The anda.taxi website likewise sets no tracking or advertising cookies. It uses Vercel Web Analytics, which works without cookies and does not identify visitors: it records page views and aggregate figures only. The site stores a single functional cookie, to remember the language you chose. The site is hosted by Vercel, which keeps technical access logs for as long as is needed for security and for running the service.

10. Supervisory Authorities

If your complaint is not resolved, you may contact:

  • Comissão Nacional de Proteção de Dados (CNPD), Portugal: www.cnpd.pt
  • Agencia Española de Protección de Datos (AEPD), Spain: www.aepd.es

11. Changes to this Policy

We announce relevant changes by email or by notification in the app. Continued use after that announcement means acceptance of the new version.