Privacy policy (draft – to be checked by a lawyer)

Brao AS ("Brao") runs the Brao app: taxi, shops, delivery and booking. Brao is responsible (data controller) for the personal data in this policy.

What we keep

Account: name, email, phone number and password (only as a secure hash). Orders: pickup, stops and destination, times, price, payment method (never the full card number), ratings, tips and receipts. Location: the driver's position while online and on a trip; the customer's position only when you share it. Chat messages and call logs between customer and driver (calls are never recorded). Drivers and taxi companies: papers needed by law (kjøreseddel, driving licence, løyve, insurance) and photos for the daily check-in.

Why

To carry out the trips and orders you ask for (contract), to keep bookkeeping as Norwegian law requires (bokføringsloven: 5 years), for safety (SOS, trip sharing, disputes) and to stop fraud (legitimate interest). Offers by push only when you said yes (consent, which you can take back in your profile).

Who sees it

The driver and taxi company of your trip see your first name, pickup and destination; your phone number stays hidden. Payment providers (Stripe, Vipps) handle payments. We never sell personal data.

How long

Account data until you delete your account. Receipts and bookkeeping data 5 years. Chat and call logs 12 months. Check-in selfies 90 days.

Your rights

You can download your data and ask for your account to be deleted in the app (Profile → My data). You can ask us to correct wrong data. You can complain to Datatilsynet (datatilsynet.no).

Contact

Brao AS, post@brao.no