Transitour Driver — App Privacy Policy

Last updated: 31 August 2026

This Privacy Policy describes what data the Transitour Driver mobile application (package es.transitour.driver, the "App") collects, why it collects it, and who it is shared with. It applies to the App on Android and iOS.

The App is a professional tool. It is not aimed at the general public: it is used by drivers employed or contracted by a transport operator that subscribes to the Transitour platform (the "Operator"). Drivers do not create their own accounts — the Operator creates them.

Data collected through the transitour.com website is covered by a separate policy.

1. Who Is Responsible for Your Data

Two different roles apply, depending on the data:

Data	Data Controller	Our Role
Your identity as a driver, your work assignments, your location while on duty, receipt photos, and everything else recorded in the course of your work	Your Operator (your employer, or the company that contracted you)	Unimedia acts as Data Processor on the Operator's instructions
Sign-in credentials, crash reports, technical diagnostics and security logs	Unimedia Technology S.L.U.	Unimedia acts as Data Controller

This means that questions about why your working day is recorded, and requests to access or delete your work records, are decided by your Operator — we carry out their instructions. Questions about the App itself can be sent to us directly.

Company Name: Unimedia Technology S.L.U.
CIF: B66934365
Registered Office: C/Esteve Terradas, 1, 111A – Mediterranean Technology Park (PMT) – 08860 Castelldefels, Barcelona, Spain
Data Protection Contact Email: transitour@unimedia.tech
Phone: +34 936 01 40 40

2. Applicable Legislation

General Data Protection Regulation (EU) 2016/679 ("GDPR")
Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights ("LOPDGDD"), including Article 90 on the use of geolocation systems in the workplace
Spanish Workers' Statute (Royal Legislative Decree 2/2015), Article 20.3, on the employer's power to monitor the performance of work duties

3. Data the App Collects

The list below is exhaustive: it is the complete set of data the App transmits from your device, and it matches the App's Data safety declaration on Google Play.

3.1. Sign-In Data

Phone number — the primary way to sign in. You enter your number and we send a single-use sign-in link by SMS.
Email address or username, and password — an alternative sign-in method for drivers whose Operator has issued them credentials instead of using SMS. Providing an email address is optional; it is transmitted only if you use this method or the "forgot password" flow.

Passwords are never stored by the App, and never stored in readable form by us; they are handled by Amazon Cognito, our identity provider.

3.2. Location Data — Precise, Including in the Background

While you have a job in progress, the App records your precise location and sends it to your Operator's Transitour account. This is set out in full in Section 5.

3.3. Photos

When you record an expense that requires a receipt, the App opens the camera so you can photograph it, and the photograph is uploaded and attached to that expense. The App takes a photo only when you tap to do so, and it does not read your photo gallery.

3.4. Identifiers

Push notification token — issued by Google Firebase Cloud Messaging so we can notify you when a job is assigned or changed. Registered only after you grant notification permission.
Your driver ID and your Operator's ID — attached to crash reports so a fault can be traced back to the account that hit it. Your name, phone number and email address are deliberately excluded from crash reports.

3.5. Crash Logs and Diagnostics

When the App crashes or handles an unexpected error, a report is sent to Sentry, our error monitoring provider. It contains the error, the code path that produced it, the screen you were on, and the device model and operating system version. Before any report leaves the device it is filtered to strip out phone numbers, email addresses, coordinates, authentication tokens and sign-in links.

3.6. Work Records

In the ordinary course of using the App you record data about the work itself: job start and end times, passenger counts, the vehicle you are driving, kilometres, expenses and charges, notes, and your duty status. This is your Operator's business data, and it is linked to you as the driver who recorded it.

3.7. What the App Does Not Collect

No advertising identifier, and no advertising of any kind.
No contacts, calendar, SMS or call log access.
No microphone or audio recording.
No access to your photo gallery or other files on the device.
No health, biometric-template or financial data. If you enable biometric unlock, the fingerprint or face check is performed by your device's operating system and never leaves it.
We do not sell your data, and we do not share it with data brokers.

4. Purposes and Legal Bases for Processing

Purpose	Data Used	Legal Basis (Art. 6(1) GDPR)
Signing you in and keeping your session secure	Phone number, email/username, password	Contract (b) — providing the App you were given to do your job
Sending you your assigned jobs and notifying you of changes	Driver ID, push notification token	Contract (b); legitimate interest of the Operator (f) — organising transport work
Showing your Operator where the fleet is, so dispatch can respond to delays and incidents	Precise location while on duty	Legitimate interest of the Operator (f), within the limits of Art. 90 LOPDGDD and Art. 20.3 of the Workers' Statute
Proving service delivery and resolving disputes with the Operator's clients	Job timestamps, route driven, passenger counts	Legitimate interest of the Operator (f); legal obligation (c) where transport law requires records
Recording and reimbursing expenses	Expense entries, receipt photos	Contract (b); legal obligation (c) — accounting and tax records
Keeping the App working and diagnosing faults	Crash logs, diagnostics, driver and Operator ID	Legitimate interest (f) — operating and securing the service
Preventing unauthorised access	Sign-in events, access logs	Legitimate interest (f) — security

5. Location Tracking — What Is Recorded, and When

The App requests permission to access your precise location, including while the App is in the background or closed. This is the most sensitive thing the App does, so it is described here in full.

5.1. What It Is For

Live fleet visibility — your Operator's dispatch screen shows where each vehicle on duty is, so they can answer a client asking where the coach is, and react when a job is running late.
The route actually driven — the trace of a completed job is stored against that job as the record of the service performed and the distance covered.

5.2. When It Records

Recording starts when you start a job in the App.
Recording stops when you complete or cancel that job.
Between jobs, and while you are off duty or signed out, the App does not record your location.
Background recording exists because a driver's phone sits in a cradle or a pocket for hours at a time. Without it the trace would break every time the screen locked, and the record of the journey would be worthless.

5.3. Who Can See It

Only authorised staff at your own Operator, through their Transitour account. Location data is never shown to other Operators, never sold, and never used for advertising or profiling.

5.4. Your Control

Location permission is granted by you in the operating system, and can be withdrawn at any time in your device settings. If you withdraw it the App keeps working — you can still see and complete your jobs — but the route will not be recorded, and your Operator will be able to see that tracking is off. Because location recording is part of how your Operator manages transport work, please raise it with them rather than only switching it off.

6. Data Sharing

We do not sell, rent or trade your Personal Data. It is shared only with the recipients below.

6.1. Your Operator

Everything described in Section 3, apart from crash logs and diagnostics, is visible to authorised staff at the Operator you drive for. Each Operator's data is isolated from every other Operator's.

6.2. Sub-Processors / Service Providers

Provider	Purpose	Data Location
Amazon Web Services EMEA SARL	Application hosting, database, receipt photo storage	EU-West-1 (Ireland), EEA
Amazon Web Services EMEA SARL (Amazon Cognito)	Identity provider — credentials, sign-in, password reset	EU-West-1 (Ireland), EEA
Google Ireland Ltd. (Firebase Cloud Messaging)	Delivering push notifications to your device	EEA and United States
Functional Software, Inc. (Sentry)	Crash and error monitoring	United States
Amazon Web Services EMEA SARL (Amazon SNS)	Delivering the SMS sign-in link, which is then handed to your mobile network operator	EU-West-1 (Ireland), EEA

6.3. Other Recipients

We may also disclose data to: (a) professional advisors (legal, accounting) under confidentiality obligations; (b) competent authorities where required by law; (c) a successor entity in the event of a corporate transaction.

7. International Data Transfers

Your work records — including location traces and receipt photos — are stored within the European Economic Area, on AWS EU-West-1 (Ireland).

Crash reports are processed in the United States by Sentry, and push notification delivery may involve US infrastructure operated by Google. These transfers are safeguarded by Standard Contractual Clauses adopted by the European Commission and, where the provider is certified, by the EU–US Data Privacy Framework. Crash reports are stripped of contact details and coordinates before they leave the device.

8. Data Retention

Data Category	Retention Period
Location traces attached to a job	Kept with the job record for as long as your Operator retains it. The Operator sets this period and can delete the record.
Job records, expenses and receipt photos	As set by your Operator, subject to the minimum periods Spanish accounting and tax law impose on them (generally 4–6 years for documents supporting an invoice)
Your driver account	Until your Operator deactivates it; deactivated accounts are deleted or anonymised within 12 months
Push notification token	Deleted when you sign out, or when the operating system replaces the token
Crash logs and diagnostics	Up to 90 days, then automatically deleted by Sentry
Sign-in and access logs	12 months from collection

9. Security

All traffic between the App and our servers uses TLS (HTTPS); the App does not permit unencrypted connections.
Session tokens are held in the device's hardware-backed keystore (Android Keystore / iOS Keychain), not in ordinary app storage.
Data is encrypted at rest on our infrastructure.
Each Operator's data is logically isolated, and every request is checked against the account it belongs to.
You may enable biometric unlock for an extra check before the App opens. The comparison is performed by your device and never leaves it.
Signing out revokes your session on the server, not just on the device.

10. Your Rights

Under the GDPR and the LOPDGDD you have the right to:

Access (Art. 15) — obtain a copy of your data and information about its processing
Rectification (Art. 16) — correct inaccurate or incomplete data
Erasure (Art. 17) — request deletion where applicable
Restriction (Art. 18) — limit how your data is processed in certain circumstances
Portability (Art. 20) — receive your data in a structured, machine-readable format
Object (Art. 21) — object to processing based on legitimate interests
Withdraw consent — for any processing based on consent, at any time; and to withdraw an operating system permission (location, notifications, camera) at any time in your device settings

How to Exercise Your Rights

For your work records — jobs, location traces, expenses, your driver account — the Data Controller is your Operator. Please address your request to them, because they hold the decision. If you contact us instead, we will forward your request to them and tell you that we have done so.

For the App itself, its crash reporting and its sign-in system, contact us:

Email: transitour@unimedia.tech
Post: Unimedia Technology S.L.U., C/Esteve Terradas, 1, 111A – Mediterranean Technology Park (PMT) – 08860 Castelldefels, Barcelona, Spain

We will respond within one (1) month, extendable by two further months for complex requests (Art. 12(3) GDPR). We may request proof of identity to protect your data.

11. Account and Data Deletion

Driver accounts are created and closed by the Operator, so the App has no "delete my account" button — a driver cannot unilaterally erase records their employer is required to keep. To have your account closed and your personal data deleted:

Ask your Operator to deactivate your driver account. They can do this themselves at any time.
If you want your personal data erased rather than merely deactivated, send that request to your Operator, or to us at transitour@unimedia.tech and we will pass it on.

Once erasure is approved we delete your account, your contact details and your location history. Records that Spanish accounting, tax or transport law requires the Operator to keep are retained for the legal minimum period and then deleted. Uninstalling the App removes everything stored on your device, including your session, but does not delete data already held by your Operator.

12. Device Permissions the App Requests

Permission	Why	Required?
Precise location	Recording the route of a job, and showing the vehicle to dispatch	The App works without it, but no route is recorded
Background location	Continuing to record while the phone is locked or the App is not on screen — see Section 5	Same
Notifications	Telling you that a job has been assigned or changed	Optional; without it you must open the App to see changes
Camera	Photographing a receipt for an expense	Optional; requested the first time you add a receipt
Biometrics	Optional unlock check before the App opens	Optional; off unless you enable it

13. Children's Privacy

The App is a professional tool for licensed drivers and is not directed at children. We do not knowingly collect Personal Data from anyone under 18. If we become aware that we have, we will delete it promptly.

14. Changes to This Privacy Policy

Unimedia reserves the right to update this Privacy Policy. Changes are posted on this page with an updated "Last updated" date. Where a change materially affects what the App collects, we will make it visible in the App as well.

15. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you may complain to:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6 – 28001 Madrid, Spain
Website: https://www.aepd.es
Phone: +34 901 100 099

If you are located in another EU/EEA Member State, you may complain to the supervisory authority where you habitually reside (Art. 77 GDPR). We encourage you to contact us first at transitour@unimedia.tech so we can try to resolve your concern directly.

16. Contact Information

Unimedia Technology S.L.U.
C/Esteve Terradas, 1, 111A – Mediterranean Technology Park (PMT)
08860 Castelldefels, Barcelona, Spain
Email: transitour@unimedia.tech
Phone: +34 936 01 40 40
Website: https://www.unimedia.tech