Privacy Policy

1. Introduction

This Privacy Policy describes how IE TeezBar ("TeezBar", "we", "us", or "our") collects, uses, stores, and protects personal data of users of the TeezBar Taxi mobile application (the "App" or "Service").

By using the App, you consent to the practices described in this Privacy Policy. If you do not agree with any provision herein, please discontinue use of the Service.

Data Controller: IE TeezBar, 7/2 Rakyimzhan Koshkarbayev Street, Priozersk, Karaganda Region, Republic of Kazakhstan.

Contact Email: support@teezbar.kz

2. Information We Collect

2.1. Information You Provide

• Account Data: mobile phone number (required for registration), first and last name, date of birth
• Driver Data: photograph, driver's license details, vehicle information (make, model, color, license plate number)

2.2. Information Collected Automatically

• Location Data: real-time GPS coordinates of your device for ride pickup, drop-off, and live tracking during trips
• Device Information: device model, operating system version, unique device identifiers
• Usage Data: ride history, routes, ratings, reviews, and in-app interactions
• Push Notification Tokens: Firebase Cloud Messaging tokens for delivering ride status notifications

2.3. Information from Third Parties

• Geocoding data (addresses) from mapping service providers
• Route data from routing service providers

3. How We Use Your Information

• Service Delivery: processing ride requests, matching passengers with drivers, calculating fares, facilitating communication between parties
• Safety & Security: user verification, fraud prevention, dispute resolution
• Service Improvement: analytics, route optimization, feature development
• Communication: ride status notifications, service updates, customer support
• Legal Compliance: fulfilling obligations under applicable laws of the Republic of Kazakhstan

4. Legal Basis for Processing

• Consent: provided upon registration and use of the App
• Contract Performance: necessary for providing transportation services
• Legitimate Interests: safety, security, and service improvement
• Legal Obligations: compliance with Kazakhstan legislation

5. Data Sharing

We may share your data with the following categories of recipients:

• Drivers / Passengers: contact details and location necessary to fulfill a ride
• Infrastructure Providers: cloud hosting (Supabase), push notification services (Firebase / Google)
• Mapping Services: for route calculation and geocoding
• Government Authorities: when required by a lawful request under Kazakhstan law

We do not sell your personal data to third parties for marketing purposes.

6. Data Retention

• Account Data: retained for the duration of your account and up to 3 years after deletion
• Ride History: retained for 3 years for accounting and dispute resolution
• Real-Time Location: stored only during an active ride; not retained afterward
• Driver Documents: retained in secure storage for the duration of the driver's active account

7. Secure Data Handling Procedures

TeezBar applies secure data handling procedures to all personal and sensitive user data processed by the App (including phone numbers, names, precise location / GPS data, ride history, device identifiers, push notification tokens, driver photos, and driver license / vehicle documents).

7.1. Collection and minimization

• We collect only the data necessary to provide taxi matching, trip fulfillment, payments/balance operations for drivers, safety, customer support, and legal compliance.
• Precise location is requested to arrange pick-up, drop-off, and live trip tracking. Location access can be limited by the user through device settings; without location, core ride features may be unavailable.
• Driver identity documents and photos are collected only for driver onboarding and verification.

7.2. Storage and protection

• Encryption in transit: all App–server communication uses HTTPS / TLS.
• Encryption at rest: personal and sensitive data is stored on cloud infrastructure with encryption at rest enabled by the hosting provider.
• Access control: database Row-Level Security (RLS) and authenticated sessions restrict users to their own data (and to trip-related data shared only while a ride is active).
• Least privilege: staff and service accounts receive only the minimum access required for operations and support.
• Administrative access: protected with strong authentication, including two-factor authentication where available.
• Backups: regular automated backups with restricted access.
• Monitoring: security monitoring and access auditing of production systems.

7.3. Use, sharing, and retention controls

• Personal and sensitive data is used only for the purposes described in this Policy (service delivery, safety, communication, improvement, and legal compliance).
• We do not sell personal data. Sharing with drivers/passengers, infrastructure providers (e.g. Supabase, Firebase/Google), and mapping/routing providers is limited to what is needed to operate the Service.
• Real-time location used for an active trip is not retained as a continuous tracking history after the trip ends, subject to short technical logs needed for reliability and abuse prevention.
• Retention periods are defined in Section 6; data that is no longer needed is deleted or anonymized.

7.4. Incident response

If we become aware of a personal data breach that poses a risk to users, we will investigate, take remediation steps, and notify affected users and competent authorities as required by applicable law of the Republic of Kazakhstan.

8. Your Rights

Under applicable law, you have the right to:

• Access: request information about the personal data we hold about you
• Rectification: request correction of inaccurate or incomplete data
• Erasure: request deletion of your personal data (subject to legal retention requirements)
• Restriction: request restriction of data processing
• Portability: receive your data in a structured, machine-readable format
• Withdraw Consent: withdraw your consent at any time

To exercise any of these rights, please contact us at support@teezbar.kz.

You may also request complete deletion of your account and associated data. See our Data Deletion page for instructions.

9. Children's Privacy

The TeezBar Service is intended for users aged 18 and older. We do not knowingly collect personal data from individuals under 18. If you become aware that a minor has provided us with personal data, please contact us immediately.

10. International Data Transfers

Your data may be processed on servers located outside the Republic of Kazakhstan (cloud infrastructure). We ensure that appropriate safeguards are in place to protect your data in accordance with applicable legislation.

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Material changes will be communicated through the App or via email. We encourage you to review this page periodically.

12. Contact Information

For any questions regarding this Privacy Policy or the processing of your personal data:

• Email: support@teezbar.kz
• Phone: +7 700 670 31 16
• Address: 7/2 Rakyimzhan Koshkarbayev Street, Priozersk, Karaganda Region, Republic of Kazakhstan