Privacy policy
Last updated: 26 September 2026
This page describes the data that the Gapyda Taksi and Gapyda Sürüjü apps, and the server at admintaksi.gapyda.com, actually collect. Gapyda matches taxi rides in Türkmenabat. Payment is cash.
Operator: +99361269766. You can also write from inside the app, under Operator and suggestions.
The apps
- Gapyda Taksi is the passenger app for Android and iOS.
- Gapyda Sürüjü is the driver app for Android and iOS.
- Both apps use the same server.
What we collect from a passenger
- Phone number. Sign-in is an SMS code. There is no password.
- Name.
- An optional profile photo from the camera or the gallery.
- Pickup and drop-off addresses and their coordinates.
- Location while you book and while the trip is active, so the app can show nearby taxis and the pickup point. This is used while the app is open. The passenger app does not keep sending location in the background.
- Trip status, the cash fare, a rating, and a comment.
- Chat messages between the passenger and the driver.
- Support messages: a category and the text.
- A device token for notifications, and whether the phone is Android or iOS.
- The language you choose.
What we collect from a driver
- Phone number and name.
- Passport number and home address.
- Driving licence number and expiry date.
- Photos of the passport, the licence, a selfie, the vehicle registration, and the vehicle from the front, back, left, right, and inside.
- Vehicle brand, model, year, colour, plate, and class.
- Location while the driver is online. If the driver is online, the app also sends location in the background so passengers can see the taxi on the map and the offer can reach that driver. The server keeps the latest point. If the phone stops sending, the short-lived presence copy expires after about 150 seconds.
- The cash fare and the platform share. Nothing is charged to a card. The passenger pays cash. The number in the app is the driver’s share.
- Road alerts, chat messages, support messages, and the notification token.
What we do not collect
- No bank card, online payment, or account number. The fare is cash in the taxi.
- No advertising identifier and no advertising SDK.
- We do not read the phone’s contacts or SMS inbox. The sign-in code is only sent by SMS.
Who can see it
- The driver who accepts a ride sees the passenger’s name, phone number, and pickup and drop-off. The passenger sees the driver’s name, phone number, vehicle, and map location.
- If a second passenger joins a shared ride, the other party sees that passenger’s name and pickup and drop-off addresses. The phone number is not shown there.
- A Gapyda operator sees accounts, driver documents, trip records, and support messages in the admin panel.
- We do not sell this data and we do not give it to advertisers.
- Twilio receives the phone number in order to send the sign-in SMS.
- Google Firebase Cloud Messaging is used only to deliver trip notifications. The device token is stored on our server. Firebase is not used for analytics or advertising.
- Pickup and drop-off coordinates are sent to the OSRM routing service (router.project-osrm.org) to draw the road. Name and phone number are not sent.
- If an address is not in our own list, the search text and nearby coordinates may be sent to Photon (photon.komoot.io).
- Our server fetches map images from OpenStreetMap, CARTO, and Esri. Those requests do not include your name or phone number.
Why we use it
- To open an account and confirm it with an SMS code.
- To find a taxi, show the route and fare, and match a driver with a passenger.
- So an operator can review driver documents.
- To record the cash fare and the commission share.
- For support, chat, and trip notifications.
- To limit abusive sign-in attempts.
How long we keep it, and deletion
- We keep the data while the account exists. The driver’s map point is overwritten with the latest position. We do not keep a second-by-second location history.
- A passenger can delete the account in Gapyda Taksi, from the profile screen.
- The driver app has no delete button. To delete a driver account, call the operator number above. The same deletion runs.
- Deletion removes the profile, phone number, name, profile photo, sign-in sessions, notification tokens, support messages, and the SMS log for that phone number. The driver’s document and vehicle photo files are deleted too.
- A passenger’s trips — addresses, fare, time, and chat — are deleted with the account.
- If a driver account is deleted, a completed trip remains on the passenger’s account, but the driver’s account and documents are removed. A trip that is still in progress is cancelled.
- An SMS log for a number that requested a code before an account existed (phone number, time, and result) is kept so we can limit abuse.
Security and children
- The app talks to the server over HTTPS. Sign-in uses an SMS code and a session token.
- The service is not meant for children. An account is opened with a phone number.
Changes
- If this page changes, the date above changes with it. Continuing to use the apps accepts the updated text.