Viaje Rentable Pasajeros Privacy Policy

This policy explains what data we process, what for and who we share it with when you use the Viaje Rentable Pasajeros Android app (com.viajerentable.passenger) to request trips from drivers who work with Viaje Rentable's drive mode.

It does not cover drivers, who have the Drive Mode Privacy Policy, or the profitability tool, which has its own policy.

Data controller: Viaje Rentable, the trade name of its sole owner, CUIT 23-39066620-9, Irala 106, Ciudad Autónoma de Buenos Aires, Argentina. Email: contacto@viajerentable.com.ar.

Data you give us:

• Account: you sign in with your Google account; we keep your email address, a user identifier and your name.
• Mobile number: it is required to request trips. You verify it with an SMS sent by Google, and it is linked to your account.
• Identity verification (optional): if you do it, photos of your DNI and a selfie with a liveness check, processed by Didit (which also records your device's IP address).
• Content: the note for the driver, chat messages, the ratings and comments you leave, your reports, your answers to safety checks and what you write to support.

Data created when you use the app:

• Location: we use it to suggest the pickup and to request the trip, and during the trip we keep a few points, such as when you get in and out, as a record; it is not continuous tracking. The app starts this only while it is open, with a visible notification, and does not ask for background location permission.
• Trips: the pickup, stops and destination, the times, the quoted and final fare, the category, the payment method you chose (cash or transfer), the status and cancellations.
• Device and usage: app usage statistics and crash reports, linked to your user identifier.

Data from other sources:

• Google: your name and email from the account you sign in with.
• Didit: the result of your identity verification, if you do it.
• Drivers: the ratings, comments and reports they make about you, and whether they received the payment for the trip.

We use your data to:

• Provide the service: request trips, assign you a driver, show you where they are, calculate the fare and keep your history.
• Safety and fraud prevention: verify your mobile number and, if you choose, your identity, run checks during trips, review reports and prevent abuse.
• Communication: the chat with the driver during the trip.
• Support: answer your questions and resolve claims about a trip.
• Improve the app: analyse how it is used and where it fails.
• Service notices: tell you the status of your trip.
• Legal duties and claims: comply with the law, answer requests from competent authorities and defend our rights or those of others.

Some of this processing is automated, such as assigning a driver, calculating the fare and detecting risky situations during a trip. Depending on the result, we may limit your account while a person on our team reviews it. If you disagree with an automated decision, you can ask for a person to review it by writing to contacto@viajerentable.com.ar.

We process your data with your consent and, where Ley 25.326 allows it without consent, because it is necessary to provide the service you asked for or to comply with a legal duty. If you verify your identity, we ask in the app for your express consent, because your face is biometric data.

We do not sell your data. We share it only in these cases:

• With the driver of your trip: your name, your rating, whether you verified your identity, the note you write and the places of the trip; until the trip starts they see only the area of the destination. They never see your phone number or the location points we keep.
• When you share your trip: the app writes a message with the driver's name and your destination, and you send it yourself with the app you choose. What the recipient does with it is no longer up to us.
• With providers that give us server, network, identity verification, sign-in, SMS, map, place search and statistics services, only to provide them (Section 7).
• With authorities: when a law or a competent authority requires it, or to defend rights in a claim.

Some of our providers process your data outside Argentina:

• DonWeb (Brazil): the virtual private server where our server runs, which stores and processes the data described in this policy and serves our own maps.
• Cloudflare (United States, with data centres in many countries): protects and routes traffic to our server and stores its backups.
• Didit (European Union): identity verification, if you do it.
• Google (United States and other countries): sign-in and the SMS, usage statistics and crash reports (Firebase), the map (Google Maps) and the phone's address service.
• Photon (komoot) and the public OpenStreetMap routing server: they receive the text you search for and coordinates, to name places and draw roads on the map, never your name or your account. They may run outside Argentina.

We transfer to each one only what it needs for the service it gives us.

We keep your account, your profile, your trips, your ratings and the rest of the data in this policy as long as you have the account, except the following, which have their own period:

• Your request location, the trip's points and the data of safety checks: 90 days after the trip ends.
• Chat messages: 90 days after the last message.
• Open cases: what is part of a report or a claim, including the trip's points and messages, while the case is open and, afterwards, for the time needed to handle any claims about it.
• Backups: each copy of the database is kept for up to 30 days.
• Images of your identity verification: Didit keeps them; if you delete your verification or close your account, we ask Didit to delete them.

When you ask to close your account we block it at once and delete your data within 5 business days, except what Ley 25.326 (section 16) allows us to keep: data a rule requires us to keep and data that is part of an open case, only for as long as needed. The procedure is in Account deletion.

You can ask us for access to your personal data and for its rectification, update or deletion (Argentine Law 25.326, sections 14 to 16) by writing to contacto@viajerentable.com.ar from the email address you signed in with. You can also withdraw a consent you gave us; without it you may not be able to use the feature that needs it.

To close your account, follow the Account deletion procedure.

The owner of personal data has the right to access it free of charge at intervals of no less than six months, unless a legitimate interest is shown, as set out in section 14, subsection 3 of Law No. 25.326.

The Agencia de Acceso a la Información Pública (AAIP, the Argentine Agency for Access to Public Information), as the supervisory authority of Law No. 25.326, has the power to handle the complaints and claims filed by anyone whose rights are affected by a breach of the rules in force on personal data protection.

The app uses these Android permissions:

• ACCESS_FINE_LOCATION Suggesting the pickup, requesting the trip and keeping the trip's points. Android asks for it together with the approximate location (ACCESS_COARSE_LOCATION).
• FOREGROUND_SERVICE_LOCATION The service with a visible notification for the trip in progress.
• CAMERA Identity verification with Didit, if you do it.
• POST_NOTIFICATIONS The notification of the trip in progress.
• INTERNET Communicating with our server.

You can revoke them in Android settings. Without location you will not be able to request trips.

We protect your data with technical and organisational measures: connections to our server are encrypted and only the people on our team who need it for their work have access. If a security incident affects your data, we act to contain it and notify you when appropriate.

The app is only for people aged 18 or over, and we do not knowingly collect data from minors. If you know that a minor has an account, write to us at contacto@viajerentable.com.ar and we will delete it.

We may update this policy, for example if the service or the law changes. When we do, we change the «Last updated» date and, if the change affects how we process your data, we tell you in the app before it applies. If what you consented to changes, we ask for your consent again.

If you have questions about this policy, write to us at contacto@viajerentable.com.ar.