Taxxi 私隱政策 / Privacy Policy

1) 我們收集的資料 / Data We Collect

- 帳戶及聯絡資料：電話、姓名、電郵（如提供）、登入及驗證記錄。

- 司機審核資料：的士駕駛資格、身份及車輛文件與覆核記錄。

- 行程資料：上落車點、必要定位、訂單狀態、路線、咪錶車資、附加費及付款／爭議參考。

- 支援及系統資料：客服對話、feedback、事故資料、裝置及安全／錯誤記錄。

- Account and contact data: phone number, name, email if provided, sign-in and verification records.

- Driver review data: taxi driving eligibility, identity and vehicle documents, and review records.

- Trip data: pickup and drop-off points, necessary location, order status, route, metered fare, surcharges, and payment or dispute references.

- Support and system data: support conversations, feedback, incident data, device records, and safety or error records.

2) 資料用途 / How Data Is Used

資料用於帳戶驗證、持牌的士配對、行程執行、車資核對、通知、客服、安全、防詐騙、爭議及法定記錄。

Data is used for account verification, licensed-taxi matching, trip execution, fare checking, notifications, support, safety, fraud prevention, disputes, and legal records.

定位用於上落車點、附近訂單顯示、行程路線及安全支援；手機號碼用於帳戶驗證及行程聯絡。用戶可在裝置設定調整權限，但關閉定位會令部分叫車或接單功能不可用。

Taxxi 不會出售個人資料，亦不會把個人資料用於第三方自行營銷。

Taxxi does not sell personal data or use it for third-party direct marketing.

2A) 司機證件相片與人像 / Driver Document Photographs and Portraits

司機註冊或補交文件時，我們會收集你選擇上載的司機證件相片；相片可能包含證件上已印有的人像。我們並不要求自拍、人臉掃描或活體偵測，亦不建立人臉特徵向量、生物辨識模板或作人臉比對。

When a driver registers or resubmits a document, we collect the driver-document photograph they choose to upload. It may contain the portrait already printed on that document. We do not require selfies, facial scans or liveness detection, and do not create facial embeddings or biometric templates or perform facial matching.

整份文件影像用於司機資格及文件完整性核實、審核覆查，以及文件文字辨識的品質改善。現行自動審核在 Taxxi 管理的伺服器上執行影像處理及光學文字辨識（OCR），讀取姓名、證件號碼及有效日期；它不分析人臉身份、情緒或其他面部特徵，亦不用作訓練人臉辨識模型。

The complete document image is used to verify driver eligibility and document completeness, review decisions and improve document text-recognition quality. Current automated review performs image processing and optical character recognition (OCR) on Taxxi-managed servers to read the name, document number and expiry date. It does not analyse facial identity, emotion or other facial characteristics, or train facial-recognition models.

文件影像及審核記錄存放於 Taxxi 的受限制後端資料庫；現行應用程式託管於 Render 的美國 Oregon 區域，異地備份使用 Cloudflare R2。這些託管及備份供應商按服務需要處理所儲存的資料，資料可能在香港以外處理。文件及內含人像不會向其他乘客或司機公開，也不會出售、供第三方自行營銷，或傳送至外部人臉辨識服務。現行文件 OCR 不會把影像傳送至外部生成式 AI 服務。

Document images and review records are stored in Taxxi's restricted backend database. The current application hosting provider is Render in Oregon, United States, with off-site backups in Cloudflare R2. These hosting and backup providers process stored data as needed to provide their services, and processing may occur outside Hong Kong. Documents and their portraits are not made public to other passengers or drivers, sold, provided for third-party direct marketing or sent to external facial-recognition services. Current document OCR does not send images to external generative-AI services.

文件相片連同內含人像會在司機帳戶存在期間保留，以支援上述核實及覆查用途；我們不另設人臉資料庫。完成帳戶刪除時，營運資料庫內的帳戶證件相片及相關 OCR 影像、審核和學習記錄會一併清除。備份內的舊副本按備份輪替程序移除，並不隨即逐份改寫；備份保留按成功完成的快照數量而非固定日數計算。如涉及第 5 節所述法律、安全或爭議保留要求，相關受限制記錄按該用途繼續處理。你可聯絡 [email protected] 查詢或要求刪除證件影像。

Document photographs, including any printed portrait, are retained while the driver account exists for the verification and review purposes above; there is no separate facial database. Completed account deletion clears the account's document photograph and associated OCR images, review and learning records from the operational database. Old backup copies are removed through backup rotation rather than immediately rewriting each backup; backup retention is based on the number of successfully completed snapshots, not a fixed number of days. Restricted records subject to the legal, safety or dispute-retention requirements in section 5 continue to be handled for that purpose. Contact [email protected] with questions or requests to erase document images.

3) 是否共享第三方 / Third-Party Sharing

為提供行程及支援服務，所需資料可能向獲配對的乘客或司機顯示，或由託管、地圖、通知、支付、文件審核及客服等受委託服務供應商按指示處理；亦可能因法律、安全或爭議處理要求而披露。Taxxi 不會出售個人資料或交由第三方自行作營銷用途。

Data needed for a trip or support may be shown to the matched passenger or driver, processed on instructions by service providers for hosting, maps, notifications, payments, document review or support, or disclosed where required for law, safety or dispute handling. Taxxi does not sell personal data or give it to third parties for their own marketing.

部分供應商可按其基礎設施在香港以外處理資料。Taxxi 只提供完成指定功能所需的資料，並以權限限制、傳輸加密、服務合約及供應商安全措施保障跨境處理。

Some suppliers may process data outside Hong Kong according to their infrastructure. Taxxi provides only the data needed for the specified function and protects cross-border processing through access limits, encryption in transit, service contracts, and supplier security measures.

4) 權限管理 / Permission Management

你可在裝置系統設定調整定位及通知權限。關閉定位後仍可在允許的流程手動輸入上車點，但附近接單、即時位置或部分安全功能可能不可用。

5) 保留、查閱、更正及刪除 / Retention And Data Rights

刪除帳戶不代表所有記錄即時硬刪除：與行程、財務、安全、爭議或法律義務有關的記錄可在有需要期間受限制地保留，並與日常帳戶使用分隔。

一般非受保護營運記錄及已處理異常以 180 日為目標；已完結訂單事件以 365 日為目標；已處理的 crash 記錄及 feedback 圖片以 90 日為目標。付款、帳目、供應商、安全、私隱、備份、行程、事故及爭議資料可因會計、欺詐防止、申索、法律責任或 legal hold 保留較長時間。

當用途完結且無保留義務，資料會透過受控保留程序刪除或去識別化。備份副本會按輪替週期被取代；資料不會因帳戶刪除而重新用於一般服務或營銷。

用戶可要求確認 Taxxi 是否持有其資料、申請查閱或更正，以及提出帳戶刪除要求。為保障帳戶安全，我們會先核對身份及要求範圍，再按適用香港法律處理。

- Privacy enquiries: [email protected]

- Formal legal notices: [email protected]

- Support email: [email protected]

- Support WhatsApp: 65382835

官方資料 / Official Reference