Privacy Policy — QuickPickups Driver App
Last updated: June 12, 2026
1. Data Controller
QUICKPICKUPS S.L. (VAT B22944938), based in Barcelona, Spain, is the controller of the personal data collected through the QuickPickups Driver mobile app ("the App"). DPO contact: [email protected].
2. Data we collect
The App collects the following types of data: • Identification data: name, surname, email, phone, ID (DNI/NIE), profile photo. • Professional data: BTP/VTC license, photos of documents (driving license, ITV, insurance). • Vehicle data: license plate, make, model, photo. • Tax data: company tax ID, IBAN for payments. • GPS location: your position in real time when you are working. • User-generated content: photos of luggage, no-show evidence, notes. • Technical identifiers: push notification token (FCM), device model, app version. • Usage data: rides accepted/rejected, quality score, payment history.
3. Purpose of processing
We process your data to: • Manage your driver account and validate your identity. • Assign you transport services and coordinate them in real time. • Share your location with the manager and the client of the active ride. • Process your payments and issue monthly invoices. • Send you push notifications about new rides, changes, and urgent alerts. • Share your professional data (license, photo, vehicle) with partner travel agencies and booking platforms to validate the service. • Comply with legal obligations (tax, labor, insurance).
4. When we share your location
Your location is ONLY shared in these situations: (a) When you press "I AM ONLINE" in the App: your position is visible to your manager on the Fleet Map and allows you to be assigned urgent services based on proximity. (b) When you have an active ride: your position is sent to the client tracking system and the partner agency for the entire duration of the service, so the client can see where you are and the ETA is calculated. When you are NOT working (OFFLINE + no active ride), the App does NOT send any location data. You control when you are visible by activating or deactivating the ONLINE toggle.
5. Legal basis
The processing of your data is based on: • Contract performance (Art. 6.1.b GDPR): to manage your collaboration as a driver. • Compliance with legal obligations (Art. 6.1.c GDPR): for tax, labor, and VTC regulations. • Legitimate interest (Art. 6.1.f GDPR): for fraud prevention, service improvement, and operational security. • Consent (Art. 6.1.a GDPR): specifically for push notifications, marketing, and location tracking during shift.
6. Data sharing with third parties
Your data may be shared with: • Partner travel agencies and booking platforms that send us rides: only the data strictly necessary to provide the service (name, photo, vehicle and location during the ride), always under the corresponding data processing agreements. • End clients who have the ride with you: only name, photo, make/model/license plate of the car, and your location during the service. • Technology providers: Google (Firebase Cloud Messaging for push, Maps for routes), Mapbox (maps), Brevo (emails), Stripe (end-client payments). All signed as data processors under GDPR. • Tax Authority and Social Security: when required by law. We do NOT sell your data to third parties for marketing purposes.
7. Retention
We retain your data for the duration of the collaboration relationship and, subsequently, for the applicable legal periods (minimum 5 years for tax data, 4 years for labor data). After these periods, the data is irreversibly deleted or anonymized.
8. Your rights (GDPR)
You have the right to: • Access your data. • Rectify it if incorrect. • Request its erasure when no longer needed. • Object to certain processing. • Data portability. • Restrict processing. • Withdraw your consent at any time (this may affect your ability to operate). To exercise these rights, write to [email protected] with a copy of your ID. We will respond within a maximum of 30 days. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.
9. Security
We apply technical and organizational measures to protect your data: • Encrypted communications with TLS 1.2+. • Passwords stored with secure hash. • Restricted access to data only for authorized personnel. • Audit logs for critical actions. • Mock-location detection (Fake GPS) to prevent fraud. However, no system is 100% infallible. We recommend not sharing your password and logging out when using the App on a shared device.
10. Minors
The App is exclusively for professional drivers over 18 years old. We do NOT collect data from minors. If we detect that a minor has created an account, we will delete it immediately.
11. Operating system permissions
The App requests the following permissions on your Android device: • Precise location (foreground and background): to share your position when you are ONLINE or have an active ride. When you are OFFLINE it is not accessed. • Camera: so you can take photos of your profile, vehicle, documents, and service evidence (luggage, no-shows). • Storage (read): to upload photos from your gallery. • Notifications: to alert you of new rides, changes, and messages from the manager. • Network / Internet access: to communicate with our servers. You can revoke any of these permissions in Settings → Apps → QuickPickups Driver → Permissions, but some features of the App may stop working.
12. Changes to this policy
We may update this policy. When we do, we will notify you through the App (banner) and by email. Significant changes will require your new acceptance within the app before you can operate.
13. Contact
For any inquiries about this policy or your personal data: • DPO Email: [email protected] • General support: [email protected] • Web: https://quickpickups.es