This policy covers the CDS Driver app for Android and iPhone that works with CDS in the cloud (app.cabdispatchsystem.com). If your office uses CDS Desktop, your app is the older one, and its policies are here for Android and iPhone.
Who we are, and who your office is
CDS Driver is made by Cab Dispatch System (CDS), Worcester Park, London. Contact: cds@deltatechglobal.co.uk.
You use the app because a taxi or private hire office that runs on CDS works with you. Your office creates your account and decides how your information is used for its business: it is the controller. CDS runs the system for the office and handles your information on its behalf: we are its processor. There is no public sign-up, and we don't use your information for anything else.
What the app collects
Your account
Your name, email address and phone number, and your licence, vehicle and document details, as your office entered them. Your email and password sign you in.
When you sign in, we record the time, the app and its version, the phone's operating system, and the internet address the request came from, with the country and town that address points to. This helps keep accounts safe, and we keep it for 12 months.
Your location, only while you are online
When you tap GO, the app explains what it shares and then asks to use your phone's precise location. While you are online or on a job, it sends your position to your office regularly, also when the screen is off or you are using another app. A notification shows while this happens. When you go offline, it stops. Nothing is sent while you are offline.
Your office uses your position to offer you jobs near you and to see where its drivers are. We keep only your latest position, plus the position recorded when you arrive at the pickup, pick the passenger up and finish a job, which stays with that job's record.
On iPhone you can choose to allow location "Always", so iOS can keep sharing if it closes the app while you are online. It is optional, and the app works without it. On Android, the app never asks to use your location in the background on its own: sharing runs only after you go online, while the notification shows.
Jobs and messages
When you accept or decline an offer, and at each step of a job, the app records what you did and when. Messages you send to your office, and its replies, are kept with your office's records.
Document photos
If you send a photo of a renewed licence, MOT or insurance, the app uploads that photo and the new expiry date for your office to check. The app uses the camera only when you tap Take a photo, and only the photo you choose leaves your phone.
Notifications
To ring you with job offers, the app registers your phone for notifications and sends us a notification token for your phone. Signing out removes it. Offers and messages are delivered through Expo's notification service and Google's Firebase Cloud Messaging (Android) or Apple's Push Notification service (iPhone).
Crash reports
If the app crashes, it sends a report to Sentry (sentry.io) so we can fix it. The report has the error, the phone model, the operating system and the app version. It doesn't have your name, email, phone number, internet address, passengers' details, screenshots or what you typed.
What it doesn't do
- No advertising, no advertising ID and no tracking across other apps or websites.
- We don't sell your information or share it for marketing.
- The app doesn't read your contacts, files, microphone or other apps.
Who else handles it
- Your office sees your account, location while you are online, jobs, messages, documents and pay.
- OVHcloud hosts the CDS servers and database.
- Expo delivers notifications and app updates; Google (Firebase Cloud Messaging) and Apple carry the notifications to your phone.
- Google Maps draws the map on Android, and Apple Maps on iPhone. When you tap Navigate, the address goes to the navigation app you choose (Waze, Google Maps or Apple Maps), and its own privacy policy applies.
- Sentry receives crash reports, as above.
Each of them handles the information only to provide its service to us. Some are based outside the UK; where information leaves the UK, it is protected by the safeguards UK data protection law requires.
Keeping it safe
Everything the app sends travels encrypted (HTTPS). Your sign-in tokens are kept in the phone's secure storage. Each office sees only its own drivers.
How long it is kept
Your account and its information are kept while you work with the office. When the office removes you, your account is closed. Job records, with the positions recorded at each step, are kept as long as your office needs them: private hire operators must keep booking records for the time their licensing authority sets (at least 12 months in London). Sign-in records are deleted after 12 months.
Your rights and deleting your information
Under UK data protection law you can ask for a copy of your information, ask for it to be corrected, and ask for it to be deleted. Because your office is the controller, start with your office. You can also email us and we will pass your request on and help them deal with it. How to ask for your account and information to be deleted.
You can turn off location or notifications for the app at any time in your phone's settings. Without location, you can't go online.
If you are unhappy with how your information has been handled, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
The app is for licensed drivers, all 18 or over. It is not meant for children.
Changes
If the app starts collecting something new, we will update this page and the date at the top before the new version is released.