TAXIMOST DRIVER – PRIVACY POLICY

Version: 1.1

Effective date: 20 October 2026

Last updated: 20 October 2026

1. Purpose and Scope

TaxiMost Driver is an application for authorised drivers participating in the TaxiMost service.

The application supports communication with the dispatcher, driver availability, location sharing and trip management.

This Privacy Policy applies during both testing and live operation, regardless of whether the application is distributed through Google Play testing programmes or a public release.

Where available, this policy also covers the related TaxiMost Driver Portal.

The driver terms and conditions and any individual agreement are separate documents.

2. Data Controller

The controller responsible for the processing described in this policy is:

TaxiMost Korlátolt Felelősségű Társaság (TaxiMost Kft.)

Registered office: 1188 Budapest, Ady Endre utca 12/B, Hungary

Company registration number: 01-09-470282

Email: taximost@taximost.eu

Telephone: +36 70 303 6007

3. Activation and Access

The driver application is activated using a valid, individually assigned QR code.

Activation associates the application with the appropriate driver profile and configuration. Drivers must protect their activation information and must not share it with unauthorised persons.

Where the separate driver portal is available, it may require Google Sign-In. TaxiMost does not receive or store the password to the driver’s Google account.

4. Information We Process

Depending on the functions used, TaxiMost processes the following information.

Driver and vehicle information

• Driver name and driver or unit identifier.

• Telephone number and email address.

• Vehicle type, registration number and vehicle photograph.

• Activation and account association information.

Location and availability information

• GPS coordinates and location timestamps.

• Device-reported location accuracy.

• Speed and direction, where provided by the device.

• Online, offline and availability status.

• Current trip stage and capacity to receive further requests.

Operational information

• Trip identifiers and relevant pickup and destination information.

• Trip offers, assignments, acceptances and status changes.

• Relevant operational timestamps.

• Dispatcher communications and safety alerts.

• Ratings, feedback and information needed to investigate service-related enquiries.

Technical information

• Push notification tokens and application installation identifiers.

• Application version and relevant device information.

• Connection, authentication, error and security logs.

Driver portal information

Where the portal is available:

• Google account identifier, name and email address supplied through Google Sign-In.

• Personal and business information entered by the driver.

• Documents submitted or made available through the portal.

• Document versions and records identifying who acknowledged or accepted them and when.

The driver application does not collect bank card details. TaxiMost does not use the information described in this policy for advertising or marketing profiling.

5. Sources of Information

We receive information:

• Directly from the driver.

• From the driver’s device during application use.

• From authorised dispatchers and administrators.

• From passengers in connection with relevant trips, ratings, complaints or lost-property enquiries.

• From authentication and technical service providers.

6. Purposes and Legal Bases

We process personal information for the following purposes:

Providing the service: activating the application, identifying drivers, displaying availability, managing trips and delivering operational communications. The legal basis is contractual necessity where the driver is the contracting individual.

Administering business relationships: managing access and communications where a driver represents a contracting business. The legal basis is our legitimate interest in administering that relationship.

Security and support: protecting accounts, preventing misuse, resolving technical problems and investigating operational incidents. The legal basis is our legitimate interest in maintaining a secure and reliable service.

Document administration: preparing documents and recording acknowledgements and acceptances. The legal basis is contractual necessity, steps requested before entering into a contract, or our legitimate interest in maintaining evidence of relevant declarations, as applicable.

Legal obligations and claims: meeting applicable legal requirements and establishing, exercising or defending legal claims. The legal basis is the relevant legal obligation or our legitimate interest in protecting legal rights.

Where optional processing requires consent, we request it separately. Acknowledging this policy does not constitute blanket consent to all processing.

7. Location Access

The application processes location information to support:

• Dispatcher operation.

• Displaying the driver’s current location and availability.

• Identifying suitable drivers for trip requests.

• Trip management and relevant passenger tracking.

• Operational assistance and safety functions.

Location access may continue in the background when required by an enabled availability, trip or other operational function, including when the application is not visible on the screen.

Drivers can manage location permissions in their device settings. Disabling the necessary permissions may prevent location-dependent functions from operating.

Location information is not used by TaxiMost for advertising or marketing purposes.

8. Push Notifications

The application may send operational notifications concerning:

• New trip requests and opportunities.

• Trip assignments and status changes.

• Dispatcher messages.

• Safety alerts.

• Account and system information.

Delivery depends on connectivity, device settings, permissions and the notification service.

TaxiMost does not send advertising or marketing notifications through these operational functions.

9. Driver Portal and Documents

Where available, the driver portal allows drivers to provide their details, access documents and submit acknowledgements or acceptances.

The individual agreement, driver terms and conditions, and this Privacy Policy remain separate documents.

Acceptance of an agreement or terms and conditions is recorded separately from acknowledgement of this Privacy Policy.

Relevant records identify the driver, the document version and the time of the action.

10. Sharing of Information

Information may be disclosed where necessary to:

• Authorised dispatchers, administrators and support personnel.

• Passengers using relevant driver discovery or trip-tracking functions, including necessary driver, vehicle, contact and location information.

• Other drivers receiving a safety alert identifying and locating a driver requesting assistance.

• Providers of hosting, storage, authentication, notifications, mapping and other technical services.

• Professional advisers, courts or authorities where necessary or legally required.

Driver availability and location information displayed through passenger-facing functions may be accessible to people using those functions.

Personal information is not sold or shared with third parties for their own advertising purposes.

11. Google, Firebase and External Services

TaxiMost uses Google Firebase services for functions such as data storage, backend processing, authentication and push notification delivery.

These providers process information under their applicable service and data protection arrangements.

Further information is available at:

• Privacy and Security in Firebase

• Google Privacy Policy

When a driver opens an external mapping or navigation service, that provider’s privacy information also applies to its own processing.

Some providers may process information outside the European Economic Area. Where applicable, transfers must rely on an appropriate legal mechanism, such as an adequacy decision or contractual safeguards.

Drivers may contact TaxiMost for information about the safeguards relevant to their information.

12. Retention

Driver relationship and profile

We retain information necessary to administer the driver relationship while that relationship remains active.

Contractual documents and acceptance records

Following termination of the relationship, necessary contractual information, documents and acknowledgement or acceptance records are retained for a further five years, for establishing, exercising or defending legal claims.

After that period, they are deleted or irreversibly anonymised unless a legal obligation or ongoing proceeding requires longer retention.

Location and operational records

These records are retained according to their operational purpose, the need to resolve related enquiries or incidents, and any applicable legal requirements. Current availability information is updated during operation.

The five-year contractual retention period does not automatically apply to GPS records.

Technical and security records

These are retained for the period necessary to operate the service, investigate relevant incidents and maintain security, taking account of the applicable provider settings.

Backup copies may remain temporarily until the relevant backup cycle expires. Uninstalling the application does not automatically delete previously stored information.

13. Security

We use technical and organisational measures appropriate to the processing, including authentication, access controls, server-side authorisation and operational monitoring.

Administrative access is managed according to the responsibilities of the relevant users.

Drivers should protect their devices and activation information and promptly report lost devices or suspected unauthorised access.

14. Automated Matching and Review

The service uses automated rules to identify suitable drivers and manage trip opportunities. Relevant factors may include location, availability, trip stage, capacity and service eligibility.

Dispatchers may review operational situations and intervene through the available functions.

Drivers may contact TaxiMost to request human review of an allocation or access outcome they believe is incorrect.

15. Cookies and Browser Storage

Where web or portal functions use cookies or browser storage, these may be necessary for authentication, session management and security.

Any optional analytics or advertising technologies introduced will be explained separately, with consent requested where required.

16. Your Rights

Subject to the applicable legal conditions, you may request:

• Access to your personal information.

• Correction of inaccurate or incomplete information.

• Erasure.

• Restriction of processing.

• Data portability.

You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent without affecting the lawfulness of earlier processing.

Requests should be sent to taximost@taximost.eu. We may request proportionate information to verify your identity.

We normally respond within one month. If a lawful extension is necessary, we will explain the extension and its reasons.

You may complain to a competent supervisory authority. In Hungary, this is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

www.naih.hu

You may also seek a judicial remedy.

17. Required Information

Information necessary for activation, driver identification and the requested service functions must be provided to use those functions.

If required information is missing or necessary permissions are disabled, the corresponding functions may be unavailable.

18. Changes to This Policy

We may update this policy when our services, processing activities or legal requirements change.

The current version will be published on our website. Material changes will also be communicated through an appropriate channel where required.

19. Contact

TaxiMost Kft.

1188 Budapest, Ady Endre utca 12/B, Hungary

Email: taximost@taximost.eu

Telephone: +36 70 303 6007

© 2026 TaxiMost Kft. All rights reserved.