Privacy Policy
This Policy is the same for users in all countries and describes which data of BeepTrip users we process, why, how long we keep it, to whom we transfer it and what rights the user has. Terms have the meaning given in the Terms of Service. Translations of this Policy into other languages are provided for convenience; in case of any discrepancy between translations, the Russian text prevails.
1. Operator
The personal data operator is the Administration of the Service as defined in the Terms of Service (the "Operator"). Questions about personal data: support@beeptrip.net or "Support" in the Service.
2. What data we process
| Category | What exactly | Source |
|---|---|---|
| Account | phone numbers and email addresses used to sign in, name, "about me", profile photo, country, currency, language, selected role, settings (text translation, tips, hiding your number and online status, choice of emails) | you |
| Cars | make and model, licence plate, number of seats, photo | you |
| Trips | routes and stops, dates and times, prices, seats, conditions, comments, recurring trip templates, requests and bookings, route subscriptions, cancellation history | you and other users |
| Communication | chat messages, including your location if you sent it ("I'm here"); support chats and requests; reports and attached photos; reviews and replies to them | you and other users |
| Calls | who called whom and when, duration and outcome of the call, technical data needed to connect. Voice is not recorded or stored: it goes directly between devices or encrypted via our relay server | automatically |
| Documents | photos of an identity document or driving licence — only if you sent them yourself for a trust badge | you |
| Technical data | IP address, browser and device information (User-Agent), sign-in and last activity time, device tokens for push notifications, log of actions in the Service, server access log | automatically |
We do not process especially sensitive data (about health, beliefs, etc.) or biometric data used to identify a person. Do not post such information in your profile or messages.
We do not receive payment data: the Service does not accept payment for trips.
3. Why we process data
- Registration and sign-in: confirming a phone or email, protection against code guessing and hacking.
- Operating the Service: showing trips and profiles, booking, chats, calls, notifications, reviews, route subscriptions, reminders.
- Emails: confirmation codes, Service news and — only if you turned them on in your profile — notifications about events (requests, trip changes, trips on routes you subscribed to, reviews, missed calls) and about unread messages (without the message text). Every email except the one with a code has an "Unsubscribe" link; you can also choose emails in your profile ("Email notifications").
- Safety and trust: document checks for trust badges, handling reports, moderation, detecting fraud, spam and breaches of the Terms, rate limiting.
- Support: answering requests, resolving disputes.
- Translation of users' texts into the interface language (can be turned off).
- Legal compliance: responding to official requests from public authorities and regulators (section 7), protecting the rights of the Operator and users.
- Improving the Service: analysing errors and load using technical logs.
- Visit statistics in anonymised form: how many times a day the website pages were opened, how many different visitors the website had and how many different people opened the app (Android and iOS separately). They are counted by the Operator's own counter without cookies, third-party services or identifiers on the device: the IP address and browser information (for the app — the IP address and the device platform) are turned into an irreversible code with a key that changes every day and is never stored; the IP address and browser information are not stored for this. Only the daily totals are kept.
4. Legal grounds
- the user's consent — see section 13;
- performance of the Terms of Service to which the user is a party;
- obligations imposed on the Operator by law;
- processing for statistical purposes subject to mandatory anonymisation — website and app visit statistics;
- legitimate interests of the Operator and third parties — security of the Service and users.
5. What others see
- Everyone, including guests: name, photo and "about me" in your profile, rating, reviews, trust badges, your trip listings (route, time, price, comment, car details).
- Signed-in users: whether you are online right now (a green dot on your photo), unless you turned on "Hide that I am online" in your profile. Your last visit time is not shown.
- Participants of a shared trip: your phone — to the driver and their passengers of a confirmed, non-cancelled trip, for 30 days after it ends, unless you turned on "Hide my phone number" in your profile (then they can reach you by chat and in-app call). Passengers do not see each other's phones.
- Your chat partner: the messages and location you sent to the chat.
- Your email, documents and technical data are not shown to other users.
6. Automated processing and neural networks
For moderation (detecting spam and violations, checking photos and documents) and text translation the Service uses neural networks running on the Operator's servers; data is not sent to third-party AI services. Neural network decisions may be applied automatically — for example, hiding a photo or a message. Such decisions do not produce legal consequences for you: you can appeal any of them via "Support", and a human will review it.
7. Who we share data with
We do not sell personal data. Data is shared only to the extent necessary to operate the Service:
| Recipient | What and why |
|---|---|
| hosting providers, Russia | hosting of servers and the database |
| Google LLC (Firebase Cloud Messaging), USA | delivering push notifications to Android and iOS: device token and notification text (for example, the sender's name and the beginning of a message) |
| Apple Inc. (Apple Push Notification service), USA | delivering incoming call notifications to iPhone: device token, caller name |
| SMS Aero LLC, Russia | sending an SMS with a code if this confirmation method is selected: phone number and code |
| mobile operators | calls and SMS when confirming a number |
| public authorities and regulators of any country | upon an official request made in accordance with the law of the country requesting the data, to the extent necessary to fulfil the request (see below) |
Emails are sent by the Service's own mail server (sender address info@beeptrip.net): to send emails, the email address and the email text are not passed to third-party mail services — only to the recipient's mail server.
Cross-border transfer. Transfer to Google LLC and Apple Inc. (USA) is a transfer of data to another country, where the level of data protection may differ from that in your country. It is limited to the minimum necessary to deliver notifications and is based on your consent. You can turn off push notifications in your device settings; the rest of the Service keeps working.
8. Where and how long data is stored
The Service's servers and databases are located in Russia.
| Data | Period |
|---|---|
| account, trips, chats, reviews | while the account exists; after account deletion — see section 9 |
| document photos | stored encrypted; deleted 1 year after the moderator's decision |
| confirmation codes | stored only as a hash; deleted one day after expiry |
| sign-in sessions (IP, browser) | until sign-out or expiry (30 days of inactivity) plus 7 days |
| log of actions in the Service | 180 days |
| server access log and technical logs | 30 days |
| database backups | 14 days |
After these periods data is deleted automatically, unless longer storage is required by law or to protect the Operator's rights in a dispute.
9. Account deletion
You can delete your account in your profile. After 30 seconds (while deletion can still be cancelled) the account is deleted:
- all sessions are closed, you can no longer sign in, phones and email are released;
- other users see the profile as "Deleted user" — without name, photo, "about me" and contacts;
- trips that have not started are cancelled, active requests are withdrawn, subscriptions are deleted;
- if you register again with the same number within 90 days, the new account receives the reviews about you, the late cancellation rate and the blocks of the former one — deletion does not hide the trip history;
- the former name, "about me", photo, phones and email are kept in a closed archive accessible only to the administration — to handle reports and disputes about past trips and to respond to lawful requests. Reviews and messages already received by other users stay with them.
To have the archive data destroyed completely, send a request (section 11). We will destroy it within the period set by law, except for data that must be kept by law.
10. How we protect data
- data is transmitted only over the secure HTTPS protocol; call audio is encrypted;
- confirmation codes and sign-in tokens are stored only as hashes; administrator passwords as bcrypt;
- document photos are stored encrypted (AES-256), with the key kept separately from data and backups;
- photos are re-encoded on upload and their metadata (including shooting location) is removed;
- rate limiting of requests and sign-in attempts, logging of administrator actions;
- access to data is granted only to staff who need it for their work and only to that extent.
11. Your rights
You have the right to:
- receive information about the processing of your data;
- demand that data be corrected, blocked or destroyed if it is incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the stated purpose;
- withdraw your consent to processing;
- appeal the Operator's actions to the personal data protection authority of your country or in court.
In addition, you have the rights granted to you by the law of your country.
You can change or delete most data yourself in your profile. Send requests via "Support" or to support@beeptrip.net from the phone or email linked to your account so that we can make sure the request is from you. We respond within 10 working days (this period may be extended by 5 working days with an explanation).
Withdrawing consent or demanding deletion of data means deleting the account: the Service cannot work without this data. The Operator may continue processing without consent where the law permits or requires it.
12. Data on your device
The website uses one service cookie — bt_country: a country code (for example, RU) to show the service news for your country. It is kept for 1 year. It is not used for tracking or advertising; the website has no third-party analytics or advertising trackers. The browser storage (localStorage) holds only: the sign-in token, the selected language, theme and role, the translation setting and marks of shown tips. You can remove them by signing out or clearing the site data in your browser.
Visits to the website and the app are counted by the Operator's own counter without cookies — see section 3.
13. Consent to personal data processing
By pressing "Continue" when signing in or registering, the user, acting freely, of their own will and in their own interest, gives the Operator (section 1) specific, informed, conscious and unambiguous consent to the processing of their personal data:
- data — as listed in section 2;
- purposes — as listed in section 3;
- actions — collection, recording, systematisation, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (provision, access) to the persons listed in section 7, including cross-border transfer to Google LLC and Apple Inc. and to public authorities and regulators of other countries upon their official request, blocking, deletion, destruction; with or without automation, including neural networks;
- dissemination (access by an unlimited number of persons) — only of the data listed in the first item of section 5, which the user posts in their public profile and listings;
- term — until the account is deleted and the storage periods in sections 8–9 end, or until consent is withdrawn.
Consent can be withdrawn by sending a request via "Support" or to support@beeptrip.net.
14. Changes to the Policy
The Operator may change this Policy. A new version takes effect upon publication at https://beeptrip.net/privacy. If changes extend the data collected or the purposes of processing, we will announce this in the Service in advance.
15. Contacts
Email: support@beeptrip.net
For regulators: support@beeptrip.net