Privacy policy

1. Legal framework

• Service in Tunisia: Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data.
• Service in Greater Montréal: Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1).

This policy applies to every user of the app and the website: riders, drivers and website visitors.

2. Data controller

• Name: —
• National Business Register (RNE) ID: —
• Address: —
• Tax ID: —
• E-mail: support@arj.digital
• Phone: —
• INPDP declaration: —

For any question about your data: support@arj.digital.

3. Definitions

• “User”: anyone who uses the app or the website.
• “Rider”: the user who requests a ride.
• “Driver”: the independent taxi driver who accepts rides in the app after their documents are verified.
• “We”: Mishwar, the data controller.
• “Personal data”: any information about a natural person who is identified or identifiable, directly or indirectly.

4. Data we collect

Riders

• Account: phone number (verified by SMS code) and/or e-mail address (verified by a code sent by e-mail), name, language, whether you want receipts by e-mail. There is no password.
• Location: your precise location, only if you allow it in the phone or browser settings, to suggest the pickup point. You can type the address instead.
• Rides: pickup and destination, date and time, estimated distance and duration, estimated price and meter amount, payment method, status, ratings and comments, messages exchanged with the driver.
• Wallet: balance and every movement (top-up, ride payment, correction) with its date.
• Invoicing (optional): company name and tax ID, if you want them on your invoices.

Drivers — in addition to the above

• Identity and activity: name, phone number (required for drivers), taxi number, licensed zone.
• Vehicle: make, model, colour and plate.
• Documents: photos of the driving licence, registration, insurance, ID, professional card or taxi permit, and their verification status.
• Location: your precise location while receiving requests is switched on, including when the app is in the background (a permanent notification shows it), to dispatch nearby rides, show it to the rider during the ride, and show nearby riders, before they request, an approximate position (to about 200 m) without your name, number or plate. Only the latest position is kept, not a history. Collection stops when you switch requests off.
• Earnings: ride amounts, service fees and recorded settlements.
• Invoicing: name or business name, address, tax ID or GST/QST numbers, tax regime, and acceptance of the billing mandate.

Website visitors

• “Drive with us” form: name, phone, city, zone, taxi licence (yes/no), optional message and IP address.
• The website uses no analytics tool and no advertising tracker.

Technical data (everyone)

• IP address and time of requests, for security and abuse limits (number of code requests, for example).
• Notification token, to tell you about the stages of the ride.
• Technical error reports, without the content of rides or messages.

What we do not collect

• Bank card data, phone contacts, photos (except the documents a driver sends), microphone, call recordings.

5. Purposes

• Create, verify and secure your account.
• Run rides: estimated price, dispatch to the nearest available driver, tracking, payment, receipt and invoice.
• Verify drivers and their documents before they receive rides.
• Manage the wallet and settlements with drivers.
• Support, complaints and disputes.
• Safety, fraud and abuse prevention.
• Legal, accounting and tax obligations.
• Improve the service from error reports.

We do not send advertising messages. If that changed, it would only be with your prior consent, which you could withdraw at any time.

6. Legal bases

• Performance of the contract (the terms of use): account, rides, payment, invoicing.
• Legal obligation: keeping invoices and accounting and tax records, answering requests from competent authorities.
• Legitimate interest: safety, fraud prevention and protection of the platform, without overriding your rights.
• Your consent: location (phone permission), notifications, e-mail receipts. You can withdraw it at any time in the phone settings or in “Account”, without affecting what was done before.

7. What other users see

• The driver your request is offered to sees the pickup, destination and estimated price; after accepting, your name.
• The rider sees the driver's name, rating, the vehicle's make, model, colour and plate, and the driver's position from acceptance to the end of the ride.
• Before requesting, a signed-in rider sees on the map the available taxis around the pickup, at an approximate position (to about 200 m), without any name, number or plate, and without being able to follow a given taxi.
• Phone numbers and e-mail addresses are not shown to the other party: contact goes through the in-app chat.
• “Share trip”: whoever opens the link you send sees the pickup, destination, the driver's first name, vehicle, plate and position during the ride, but not your details. The link expires after 12 hours.

8. Recipients

• Authorised staff of Mishwar, within their tasks (support, document checks, accounting).
• Our technical providers, as processors acting on our behalf and on our instructions only:

• Hosting of the server and database.
• SMS delivery (e.g. Twilio or a telecom operator): phone number and code text.
• E-mail delivery (SMTP provider): address and message content (code or receipt).
• Notifications (Expo and Google Firebase Cloud Messaging): device token and notification text.
• Address search (e.g. LocationIQ or OpenStreetMap Nominatim): searched text and approximate position, without your identity.
• Maps: base map served by our server, or by OpenStreetMap's servers, which then receive the IP address and the area displayed.
• Error monitoring (Sentry or GlitchTip, when enabled): technical details of the error.

• Public authorities: only on a legal request, and within its limits.
• We do not sell or rent your data.

9. Transfers abroad

Some providers above, or the hosting provider, may be located outside Tunisia or Canada. Transfers are limited to what is necessary and follow the conditions of Organic Law No. 2004-63 (including the authorisation of the national personal data protection authority, INPDP, when required) and of Québec law (privacy impact assessment beforehand), with providers offering adequate protection.

10. Retention

• Account: while it is active; deleted or anonymised when the account is deleted.
• Sign-in codes: 30 days at most, and only a hash of the code is kept.
• Ride messages: 6 months.
• Driver position: only the latest one, replaced at every update.
• Driver documents: until replaced or the account is deleted.
• Website applications: 12 months at most, 6 months if declined.
• Rides, payments, wallet movements and invoices: as long as accounting and tax law require; anonymised when the account is deleted, except invoices, which stay as issued.

11. Security

Encrypted connections (HTTPS); sign-in codes stored as hashes; no passwords; driver documents in a private area reachable only by their owner and administrators; invoice and share links signed and time-limited; limits on attempts and requests; regular backups; access limited to authorised staff.

If an incident affecting your data creates a serious risk, we inform the people concerned and the competent authority as the law requires, and take the necessary measures.

12. Cookies and local storage

• Web app: a single cookie, needed for the sign-in session (app_session_id, valid one year, not readable by JavaScript).
• Website: the chosen language is remembered in the browser (localStorage).
• Android app: the session token is kept in the phone's secure storage.
• No advertising cookies and no third-party analytics. You can clear this data in the browser; you will then be signed out.

13. Notifications and messages

• SMS or e-mail: sign-in and verification codes only.
• E-mail: the receipt of each ride, if you switched it on (can be switched off in “Account”).
• Notifications: ride stages, new requests for drivers, chat messages. You can turn them off in the phone settings, at the risk of missing a stage of the ride.

14. Automated processing

A request is offered automatically to the available drivers closest to the pickup, in the same zone, one after another. No other automated decision concerns you: accepting driver documents and suspending an account are decided by a person on the team. You can ask for an explanation or a human review at support@arj.digital.

15. Your rights

• Access your data and get a copy.
• Correct or update it (name, phone and e-mail in “Account”; the rest on request).
• Object to its processing on legitimate grounds.
• Delete your account: in the app (Account → Delete account) or on the Delete account page.
• Withdraw your consent at any time.

To exercise your rights: support@arj.digital. We answer within 30 days and may ask for proof of identity.

Complaints: in Tunisia, to the national personal data protection authority (INPDP); in Québec, to the Commission d'accès à l'information. We invite you to contact us first.

16. Minors

The service is for people aged 18 and over. We do not knowingly collect data about minors; if we learn of it, the account is deleted.

17. Changes

We tell you in the app about any important change and ask you to accept the new version before continuing. The applicable version is the one published on this page; its number and effective date are shown at the top.