Privacy Policy — Shaheen Taxi
Effective date: March 2026 · Last updated: March 2026
1. Overview
Shaheen Taxi ("we", "us", or "our") is a taxi service operating in Charlottetown, Prince Edward Island, Canada. We are committed to protecting the privacy of our customers, drivers, and all users of our platforms in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy law.
This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have over your data.
2. Scope of This Policy
This policy applies to all Shaheen Taxi platforms:
- Shaheen Taxi Customer App — a Flutter-based mobile application for booking rides.
- Shaheen Driver App — a Flutter-based mobile application for drivers to receive and complete rides.
- Shaheen Taxi Admin Website — a web-based dashboard used by Shaheen Taxi staff to manage drivers, customers, and operations.
Sections that apply specifically to one platform are marked with Customeror Driver badges.
3. Personal Data We Collect
Customer Customer App
| Category | Data Collected | Purpose |
|---|---|---|
| Account information | Full name, email address, phone number (verified via SMS) | Account creation and authentication |
| Location | Device GPS coordinates (only while the app is active and a ride is being booked or in progress) | Set pickup point, match with nearby drivers, track ride |
| Payment | Tokenized payment card reference (via Square — no raw card numbers are ever stored by us) | Process ride payments |
| Ride history | Pickup address, drop-off address, fare, date and time of completed rides | In-app receipts, customer support, fraud prevention |
| Device token | Push notification token (Firebase) | Deliver ride status notifications |
Driver Driver App
| Category | Data Collected | Purpose |
|---|---|---|
| Account information | Full name, email address, phone number | Account creation and authentication |
| Location | Real-time GPS coordinates, continuously while the driver is online | Dispatch, customer-facing driver tracking during active rides |
| Verification documents | Government-issued ID, vehicle registration, insurance documents (photos uploaded through the app) | Driver identity and vehicle verification by Shaheen Taxi admin |
| Payment credentials | Square OAuth credentials (stored server-side only; never accessible to customers or other drivers) | Receive ride payments directly via Square |
| Ride history and earnings | Completed ride records, fare amounts, payout history | Earnings tracking, business records, dispute resolution |
| Device token | Push notification token (Firebase) | Deliver dispatch alerts and ride notifications |
4. How We Use Your Data
We use the personal information we collect strictly to operate and improve the Shaheen Taxi service. Specifically:
- Service delivery: Match customers with available nearby drivers, facilitate pickup, and complete rides.
- Payment processing: Charge customers and remit fares to drivers via Square.
- Driver onboarding: Verify driver identity, vehicle eligibility, and licensing before activation.
- Notifications: Send ride confirmations, driver arrival alerts, dispatch messages, and service-related push notifications.
- Fraud prevention and safety: Detect and prevent fraudulent bookings, abuse, or safety incidents.
- Customer support: Investigate complaints, resolve disputes, and respond to inquiries.
- Service improvement: Analyse anonymised usage patterns to improve app performance and service quality.
- Legal compliance: Meet obligations under applicable Canadian law.
We do not use your personal data for advertising purposes, and we do not sell your personal information to third parties.
5. Data Sharing and Disclosure
We share your personal data only in the following circumstances:
- Between customers and drivers during an active ride:A customer's pickup location and a driver's real-time GPS position are shared with each other only for the duration of the matched ride.
- With Shaheen Taxi administrators: Staff access data to verify drivers, manage accounts, and respond to support requests.
- With service providers: We share data with the third-party services listed in Section 6 solely to operate the platform.
- Legal requirements: We may disclose data if required by law, court order, or a lawful government request.
- Safety: Where we believe disclosure is necessary to protect the safety of any person.
We do not sell, rent, or trade personal information.
6. Third-Party Services
The Shaheen Taxi platform relies on the following trusted third-party providers. Each has its own privacy policy, linked below.
| Provider | Purpose | Data Involved | Privacy Policy |
|---|---|---|---|
| Square | Payment processing and driver payouts | Card tokenization (customers); OAuth credentials and payout info (drivers) | squareup.com/legal/privacy |
| Google Maps Platform | Mapping, routing, and address search | Location data, address queries | policies.google.com/privacy |
| Twilio | SMS phone number verification | Phone number | twilio.com/legal/privacy |
| Firebase (Google) | Push notifications | Device push notification tokens | firebase.google.com/support/privacy |
| Railway | Backend server and database hosting | All server-side user data (hosted on Railway infrastructure in Canada/US) | railway.app/legal/privacy |
| Netlify | Admin website hosting | Admin session data | netlify.com/privacy |
7. Location Data
Customer Customer Location
- Location access is requested only when the app is open and you are actively booking or tracking a ride.
- Your location is used solely to set your pickup point and display ride progress on the map.
- Your precise coordinates are not stored on our servers; only the pickup address you confirm is recorded as part of the ride record.
Driver Driver Location
- Your device's GPS position is collected continuously while you are marked as online in the Driver App.
- During an active ride, your real-time location is shared with the matched customer so they can track your arrival and progress.
- Outside of an active ride, your location is visible only to Shaheen Taxi dispatch systems and administrators.
- Your last known location is stored server-side to support dispatch continuity. This data is permanently deleted when your account is deleted.
8. Payment Data
Shaheen Taxi uses Square to handle all payment processing. We are designed so that we never receive, store, or transmit raw payment card numbers.
- Customer When you add a payment method, your card details are submitted directly to Square, which returns a secure token.
- Driver Driver payouts are processed via Square's OAuth flow. Your Square credentials are stored server-side in encrypted form.
For information about how Square handles your payment data, review Square's Privacy Policy at squareup.com/legal/privacy.
9. Data Storage and Security
Where Your Data Is Stored
- All account, ride, and operational data is stored in a PostgreSQL database hosted on Railway, located in Canada or the United States.
- Driver verification documents are stored on the Railway server filesystem and are accessible only to Shaheen Taxi administrators.
- The admin website is hosted on Netlify.
Security Measures
- All communication between our apps and servers is encrypted using HTTPS/TLS.
- Passwords are hashed using bcrypt before storage. We never store passwords in plaintext.
- Access to backend systems is restricted to authorised Shaheen Taxi personnel.
- Payment card data is tokenized by Square and never passes through or rests on our servers in raw form.
While we take reasonable precautions to protect personal information, no system is completely secure. Contact us immediately at info@shaheentaxi.ca if you suspect unauthorised access to your account.
10. Data Retention
| Data Type | Retention Period |
|---|---|
| Account profile data (name, email, phone) | Retained while your account is active; deleted within 30 days of an account deletion request |
| Ride history | Retained for 3 years from the date of the ride, for business and legal purposes |
| Driver verification documents | Deleted within 30 days of account deletion |
| Driver location history | Last known position purged upon account deletion |
| Payment tokens | Retained while account is active; deleted upon account deletion (Square retains its own records per their policy) |
| Push notification tokens | Refreshed automatically; removed upon account deletion or app uninstall |
To request deletion of your account and personal data, use our account deletion request form or contact us at info@shaheentaxi.ca. We will complete deletion within 30 days of a valid request, except where retention is required by law.
11. Your Rights (PIPEDA)
Under PIPEDA, Canadian residents have the following rights with respect to their personal information:
- Right to access: You may request a copy of the personal information we hold about you.
- Right to correction: You may request that we correct inaccurate or incomplete information.
- Right to withdraw consent: You may withdraw consent where we rely on it to process data.
- Right to deletion: You may request deletion of your personal data, subject to legal retention obligations.
- Right to complain: You may lodge a complaint with the Office of the Privacy Commissioner of Canada.
12. Children's Privacy
The Shaheen Taxi platform is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If you believe a minor has provided personal information, contact us and we will promptly delete that information.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When we make material changes, we will notify users through the app, by email, or by updating the effective date at the top of this page.
We encourage you to review this policy periodically. Your continued use of Shaheen Taxi services after any changes constitutes your acceptance of the updated policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us:
We aim to respond to all privacy-related inquiries within 10 business days.