Privacy policy

Privacy Policy

This Privacy Policy describes how Tokify GmbH (“we”, “us”, or “our”) collects, uses, and processes personal data when you use the Tokify and Tokify Driver mobile applications (the “Service”).

Tokify GmbH provides these applications free of charge and for use as is.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Data Controller

The controller responsible for data processing is:

Tokify GmbH

Email: office@tokify.at

2. Personal Data We Collect

We may collect and process the following categories of personal data:

a) Account & Contact Data

Name (if provided)
Email address
Phone number

b) Location Data

Live GPS location (drivers and riders)

This data is collected:

To enable ride functionality
For real-time tracking during rides
For matching drivers and riders

Location data may be collected even when the app is closed or not actively in use (Android), where required for core functionality.

c) Trusted Contacts Feature (Tokify App only)

If you use the “Trusted Contacts” feature:

You may grant access to your contact list
You can manually select emergency contacts

When activated, the app sends an SMS containing:

Your live location
Driver name
Vehicle details

Important:

We do not store or use your contact list for marketing or any unrelated purposes.

d) Usage & Log Data

In case of errors or usage analytics, we may collect:

IP address
Device type and name
Operating system version
App configuration
Usage timestamps
Crash reports

3. Purpose of Data Processing

We process personal data for the following purposes:

Providing and operating the Service
Matching drivers and riders
Ensuring safety features (e.g., Trusted Contacts)
Improving app performance and stability
Customer support
Legal compliance

4. Legal Basis (GDPR – Art. 6)

We process your data based on:

Art. 6(1)(b) GDPR – performance of a contract (app functionality)
Art. 6(1)(a) GDPR – consent (e.g., contacts access, location tracking where required)
Art. 6(1)(f) GDPR – legitimate interest (security, analytics, service improvement)

5. Data Sharing

We do not sell your personal data.

We may share data only in the following cases:

a) Service Providers

With trusted third-party providers who:

Host infrastructure
Provide analytics or technical services

These providers are contractually bound to comply with GDPR.

b) Legal Requirements

If required by law, regulation, or legal request.

6. Location Data Protection

Your live location is used only within the platform
It is not shared with third parties for marketing or external use
It is only visible to relevant users (driver/rider during a ride)

7. Data Retention

We retain personal data only as long as necessary for:

Providing the Service
Legal obligations
Resolving disputes

You may request deletion at any time (see Section 10).

8. Cookies & Tracking Technologies

The app itself does not use cookies directly.

However, third-party libraries or services may use tracking technologies for:

Analytics
Performance monitoring

You can manage permissions through your device settings.

9. Data Security

We implement appropriate technical and organizational measures to protect your data.

However, no system is 100% secure. We cannot guarantee absolute security.

10. Your Rights (GDPR)

Under the GDPR, you have the right to:

Access your data (Art. 15)
Rectify inaccurate data (Art. 16)
Erase your data (“Right to be forgotten”, Art. 17)
Restrict processing (Art. 18)
Data portability (Art. 20)
Object to processing (Art. 21)
Withdraw consent at any time

To exercise your rights, contact:

office@tokify.at

11. Account Deletion

You may request deletion of your account and personal data at any time by emailing: