Privacy Policy
Privacy Policy of the Niloo App
Last updated: July 1, 2026
The protection of personal data is an important concern for Niloo GmbH. This privacy policy explains how personal data is processed when using the Niloo app.
The Niloo app is used to arrange, manage and carry out taxi and mobility services between passengers, taxi companies and drivers.
Personal data is processed exclusively to provide, carry out, secure and improve our services. Niloo does not use personal data for personalized advertising and does not carry out cross-app tracking within the meaning of Apple’s App Tracking Transparency Framework (ATT).
1. Controller
Niloo GmbH
Alemannenweg 23
61381 Friedrichsdorf
Germany
Email: support@niloo.io
2. Legal Bases for Processing
Personal data is processed in accordance with the requirements of the General Data Protection Regulation (GDPR).
Depending on the processing, we rely in particular on the following legal bases:
- Art. 6(1)(a) GDPR – Consent
(e.g. when voluntarily sharing location data) - Art. 6(1)(b) GDPR – Performance of a contract
(e.g. arranging and carrying out rides) - Art. 6(1)(c) GDPR – Compliance with legal obligations
- Art. 6(1)(f) GDPR – Legitimate interests
(e.g. security, fraud prevention, stability and improvement of our services)
3. What Data We Process
3.1 Passengers
In particular, we may process the following personal data:
- First and last name
- Email address
- Phone number
- GPS location data (only with explicit consent)
- Pickup and destination address
- Booking information
- Ride history
- Payment information via our payment service provider Stripe
- Communication between passenger and driver
- Ratings
- Device information
- Technical usage and diagnostic data
3.2 Drivers
In particular, we may process the following personal data:
- Name
- Contact details
- Driver profile
- Vehicle data
- Driver’s license information
- Company affiliation
- Location during active rides
- Availability status
- Ride history
- Billing data
- Ratings
3.3 Taxi Companies
In particular, we may process the following personal data:
- Company data
- Contact person
- Contact details
- Licenses
- Vehicle data
- Driver assignments
- Contract and billing data
4. Purposes of Processing
We process personal data in particular for:
- Creating and managing user accounts
- Arranging rides between passengers and drivers
- Assigning suitable drivers
- Carrying out and managing booked rides
- Calculating routes and arrival times
- Payment processing
- Customer support
- Communication between users and drivers
- Sending push notifications
- Improving the stability, security and quality of our platform
- Fraud prevention
- Compliance with legal obligations
Personal data is not used to track users for advertising purposes or to create user profiles for advertising.
5. Location Data
The Niloo app uses location data only with the user’s consent.
Location data is required to provide essential functions of the app, in particular:
- Determining the current pickup location
- Suggesting a starting point for a ride
- Searching for available drivers nearby
- Displaying maps and routes
- Calculating arrival times
- Carrying out and managing booked rides
Location data is not used for personalized advertising, advertising profiles or cross-app tracking.
6. Third-Party Providers and Technical Service Providers Used
We use technical service providers to provide our services.
They receive personal data only to the extent necessary to provide the respective technical function.
Firebase (Google)
We use Firebase services for:
- Authentication
- Push notifications
- Technical error analysis
- Performance monitoring
Firebase services are not used to track users for advertising purposes or to deliver personalized advertising.
Mapbox
We use Mapbox for:
- Map display
- Location display
- Routing
- Navigation
- Calculation of ride routes
Location data is processed exclusively to provide the map and mobility functions of the app.
Twilio
We use Twilio for:
- SMS communication
- Technical communication services
- Verification processes, where applicable
Stripe
We use Stripe for:
- Secure payment processing
- Processing of payment information
Niloo does not store complete payment data such as credit card numbers.
Hetzner
We use Hetzner for:
- Hosting
- Server operation
- Cloud infrastructure
- Backend services
Where personal data is processed by service providers outside the European Economic Area, appropriate safeguards are implemented in accordance with the GDPR, in particular through appropriate guarantees such as EU Standard Contractual Clauses.
7. Disclosure of Personal Data
Personal data is disclosed only if this:
- is necessary to carry out our services,
- is necessary for the use of technical services,
- is required by law,
- or explicit consent has been given.
Possible recipients are:
- Drivers
- Taxi companies
- Payment service providers
- Hosting and cloud providers
- Communication service providers
- Technical service providers
- Authorities on the basis of legal obligations
Niloo does not sell personal data.
Niloo does not disclose personal data to third parties for advertising purposes.
Niloo does not use personal data to create advertising profiles and does not carry out cross-app tracking.
8. Storage Duration
Personal data is stored only for as long as necessary for the respective purpose or as long as statutory retention obligations exist.
Once the respective purpose no longer applies, personal data is deleted or anonymized.
9. Data Security
We use technical and organizational security measures to protect personal data.
These include in particular:
- Encryption of data transmission
- Access restrictions
- Secure authentication
- Regular security updates
- Protected server infrastructure
10. Rights of the Data Subjects
Users have in particular the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to withdraw consent
Requests can be sent to:
11. Account Deletion
Users can have their account deleted at any time within the app or by email to support@niloo.io.
Personal data is then deleted, unless statutory retention obligations prevent this.
12. Push Notifications
The Niloo app may use push notifications for:
- New rides
- Booking confirmations
- Status changes
- Important information
- System messages
Push notifications can be deactivated at any time in the device settings.
Push notifications are not used for advertising purposes.
13. Tracking and Advertising
Niloo does not use personal data for personalized advertising.
Niloo does not sell personal data.
Niloo does not disclose personal data to advertising networks or data brokers.
Technical services such as Firebase Crashlytics or comparable diagnostic tools may be used to detect errors, improve stability and ensure the security of the app.
These technical services are not used to track users across different apps or websites.
Niloo does not carry out tracking within the meaning of Apple’s App Tracking Transparency Framework (ATT).
14. International Data Transfers
Where service providers process personal data outside the European Economic Area, this is done only in compliance with appropriate data protection safeguards in accordance with the GDPR.
These include in particular:
- EU Standard Contractual Clauses of the European Commission
- Appropriate technical and organizational safeguards
15. Changes to This Privacy Policy
This privacy policy may be amended if legal, technical or organizational changes occur.
The current version is available within the Niloo app and on our website.
16. Contact
Niloo GmbH
Alemannenweg 23
61381 Friedrichsdorf
Germany
Email: support@niloo.io
