Version of 01.10.2026
1. Who processes your data
1.1. The controller of personal data is Rufat Danilov, registration number 312051626.
1.2. This Policy explains what information the Movia platform collects about you, why, on what legal basis, who it is shared with and how long it is kept.
1.3. Processing is carried out in accordance with the Protection of Privacy Law of the State of Israel (חוק הגנת הפרטיות, התשמ“א-1981) and its data security regulations. Because the servers are located in the European Union, the principles of the General Data Protection Regulation (GDPR) also apply.
2. What data we collect
2.1. Data you provide at registration:
- first and last name;
- phone number;
- email address;
- for a Driver — vehicle type, make, plate number and year, and vehicle photographs (up to four);
- for a Provider — company name and address;
- additional fields if configured by the Administrator.
2.2. Data generated as you use the Platform:
- orders: pickup and destination addresses, date and time, price, payment method, comments;
- passenger contact details entered by the Provider in the order;
- history of operations with the internal Credits units;
- rating and its changes;
- action log: who did what to an order or account, with date and time;
- notifications sent to you and read receipts.
2.3. Technical data:
- device identifier (used to bind the Administrator account and to deliver notifications);
- push notification token;
- chosen interface language and theme;
- application version information.
2.4. What we do not collect:
- the Platform does not track your location and keeps no record of your movements;
- the Platform does not store bank card data — it is handled solely by the payment provider;
- the Platform does not collect biometric data or information about health, ethnicity, religious or political views.
3. Why we process data and on what basis
| Purpose | Basis |
|---|---|
| Creating and maintaining your account, signing in | Performance of the contract with you |
| Posting, distributing and fulfilling orders | Performance of the contract |
| Crediting and debiting Credits, accepting payments | Contract and accounting requirements |
| Sending the passenger an SMS about the driver’s departure | Legitimate interest — fulfilling the order |
| In-app event notifications | Performance of the contract |
| Keeping an action log | Legitimate interest — security and dispute resolution |
| Rating and blocks | Legitimate interest — service quality and safety |
| Answering support requests | Performance of the contract |
| Meeting tax and other statutory requirements | Legal obligation |
4. Who data is shared with
4.1. Other participants — to the extent needed to fulfil an order. Before accepting an order, a Driver sees only the pickup and destination cities. The full address and the passenger’s phone number are revealed only after departure is confirmed. The Provider sees the name, code, rating and vehicle details of the accepting Driver.
4.2. The Platform Administrator — information about participants, orders, Credits operations and the action log, as needed to manage the Platform and resolve disputes.
4.3. Service providers acting on our instructions:
| Who | What they receive | Where processed |
|---|---|---|
| Supabase (database and file hosting) | all Platform data | European Union, Frankfurt |
| Payment provider (Invoice4U and the connected clearing company) | amount, currency, payer contact details | Israel |
| SMS provider | passenger phone number and message text | Israel |
| Apple (notifications and address search) | notification token, address search query | United States / global |
4.4. Government authorities — where there is a lawful requirement.
4.5. We do not sell your data and do not share it with third parties for advertising.
5. Where data is stored
5.1. Platform data is stored on Supabase servers in a data centre in Frankfurt, Germany, within the European Union.
5.2. Transfers outside the EU occur only to the extent described in section 4 and only for the purposes listed there.
6. How long data is kept
6.1. Account data is kept for the life of the account and for two years after deletion, to resolve possible disputes.
6.2. Order and Credits operation records are kept for seven years in line with accounting record retention requirements.
6.3. The action log is kept for one year.
6.4. Notifications are kept for six months.
6.5. After these periods data is deleted or anonymised.
7. Your rights
7.1. You have the right to:
- know what data about you is processed and receive a copy;
- correct inaccurate data — some of it you can change yourself in your profile;
- request deletion where the basis for processing no longer applies;
- object to processing based on legitimate interest;
- withdraw consent where processing is based on consent;
- lodge a complaint with the Israeli Privacy Protection Authority (הרשות להגנת הפרטיות).
7.2. To exercise any of these rights, write to movia.service@gmail.com. We reply within 30 days.
7.3. Note: deleting an account does not remove the obligation to retain records of completed financial operations for the period required by law.
8. Security
8.1. Access to data is restricted at database level: each participant sees only what relates to them, and the passenger’s full address and contacts are revealed to the Driver only at the appropriate stage of the order.
8.2. The connection to the server is encrypted. Passwords are stored as irreversible hashes. Access keys on the device are held in the operating system’s secure storage (Keychain).
8.3. Payment keys are stored on the server and are never sent to the application.
8.4. No system is absolutely secure. If you spot a vulnerability or suspect a breach, tell us and we will act.
9. Children
9.1. The Platform is not intended for persons under 18 and does not knowingly collect their data. If such data reaches us by mistake, tell us and we will delete it.
10. Changes to this Policy
10.1. We may amend this Policy. The current version is always available in the application under “Information”.
10.2. Where the change is material, you will be asked at the next sign-in to review the new version and confirm agreement.
11. Contacts
For any question about data processing: Email: movia.service@gmail.com Phone: +972 52-530-9959