Privacy Policy for Drivers

Last updated: 07.07.2026

1. Introduction

This Privacy Policy describes how Toot Group OÜ ("we", "our", "us") collects, uses, and protects personal data of drivers ("Drivers") who use our ride-hailing platform (the "Service"). We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) and applicable EU regulations, including DAC7 reporting obligations.

2. Data We Collect

2.1 Account and Identity Information (KYC)

  • Full name
  • Date of birth
  • Phone number
  • Email address
  • Profile photo

2.2 Identity Verification Documents

We may collect:

  • Government-issued ID (passport or ID card)
  • Driver’s license
  • Selfie or verification images

2.3 Business and Tax Information

  • Business name (if applicable)
  • Registration number
  • VAT number (if applicable)
  • Entrepreneur or company bank account details

2.4 Vehicle Information

  • Vehicle make and model
  • Registration number
  • Insurance information
  • Vehicle documents

2.5 Location Data

  • Real-time GPS location
  • Trip routes and history

2.6 Financial and Earnings Data

  • Ride earnings
  • Payout history
  • Payment records

2.7 Device and Usage Data

  • IP address
  • Device information
  • App usage logs

2.8 Communications

  • Messages with riders
  • Support interactions

3. How We Use Your Data

We use your data to:

  • Create and manage your driver account
  • Verify your identity and eligibility
  • Match you with riders
  • Calculate earnings and process payouts
  • Ensure platform safety and prevent fraud
  • Comply with legal, regulatory, and tax obligations

4. Identity Verification and Compliance

We perform identity verification (KYC) to confirm your identity, prevent fraud, and comply with legal requirements. Verification may be conducted directly or through third-party providers.

Biometric Identity Verification

Where identity verification is enabled, the app may process biometric data (facial imagery) to verify your identity and prevent misuse. The app may use depth data for liveness detection. This depth data is processed locally on your device and is not stored or transmitted.

The app may ask you to take a selfie, which may be securely transmitted to our trusted identity verification service providers solely for verification purposes and is deleted after the verification process is completed, unless a longer retention period is required by law or for fraud prevention.

Biometric data is used exclusively for identity verification and liveness detection. It is never used for advertising, marketing, profiling, or any unrelated purposes.

Identity Verification and Face Data

Where identity verification is enabled, the app may process face data to verify your identity and prevent misuse. The app may use on-device depth data for liveness detection. This depth data is not stored or transmitted. The app may ask you to take a selfie, which is sent to our server for verification and deleted after verification is completed. Face data is used only for identity verification and liveness detection, not for advertising, marketing, or profiling.

5. Payments and Payouts

Rider payments are collected by Toot Group OÜ. Driver earnings are calculated based on completed rides and are paid out on a periodic basis (e.g. weekly) to the driver's registered business or entrepreneur bank account. We do not process payouts to personal accounts where business registration is required.

6. Tax Responsibility and DAC7 Reporting

Drivers are fully responsible for declaring and paying all applicable taxes and complying with local tax laws.

In accordance with EU DAC7 regulations, we may be required to collect tax-related information, report driver earnings and identifying data to relevant tax authorities. This may include sharing data with tax authorities in Estonia or other EU jurisdictions.

7. Fraud Prevention and Safety

We may use automated systems to detect suspicious activity, prevent fraud, and ensure safety. This may include behavioral analysis and risk scoring.

8. Tracking Technologies

We may use analytics and tracking technologies (e.g. Firebase SDK) to monitor app performance, improve reliability, and detect fraud.

9. Legal Basis (GDPR)

We process your data based on:

  • Contract performance
  • Legal obligations (including tax and DAC7 reporting)
  • Legitimate interests (fraud prevention, platform security)
  • Consent (where required)

10. Data Sharing

We may share your data with:

  • Riders (limited data such as name, photo, vehicle details)
  • Payment and banking partners
  • Identity verification providers
  • Analytics providers
  • Tax authorities and regulators (as required by law, including DAC7)

We do not sell personal data.

11. Data Retention

We retain your data for as long as necessary for service provision, legal and tax obligations, regulatory reporting (including DAC7), fraud prevention, and dispute resolution.

12. Your Rights

You have the right to:

  • Access your data
  • Correct your data
  • Request deletion (subject to legal obligations)
  • Restrict or object to processing
  • Data portability

Contact: info@tootapp.eu

13. Location Data Usage

Location data is essential for providing the Service and cannot be disabled during active use.

14. Data Security

We implement appropriate security measures, including encryption and secure storage.

15. International Data Transfers

Your data may be transferred outside the EEA with appropriate safeguards.

16. Changes to This Policy

We may update this policy. Updates will be communicated via the app.

17. Contact

Toot Group OÜ
Ida-Viru maakond, Kohtla-Järve linn, Ahtme linnaosa, Kilgi vkt 31, 31027
Email: info@tootapp.eu