This policy explains how Voltinha handles personal data in the passenger and driver apps, in the partner associations’ dashboards and on this website, under Brazil’s General Data Protection Law (LGPD, Law 13.709/2018). The Portuguese version prevails in case of any difference.
Who is responsible
Voltinha, operated by to be defined, CNPJ to be defined, is the controller of the data processed on the platform. Partner associations only access the data they need to curate their area.
What data we process
- Passengers: name, phone number (verified), email and ride history.
- Drivers: name, CPF, driver’s license (CNH) with the paid-activity note, vehicle document, criminal record certificate, verification selfie and payout details.
- Rides: pickup, destination, times, price, driver, passenger, pickup PIN, ratings and incidents.
- Location: the passenger’s when requesting and during the ride; the driver’s while their shift is open.
- Payment: processed by a payment partner. Voltinha does not store the full card number.
- Website: the data you send through the contact and opening-notification forms and, if you accept, analytics cookies (see below).
What we use it for
- Making the ride happen: requesting, tracking, confirming boarding, charging and paying the driver.
- Verifying drivers before their first ride and keeping the platform safe.
- Applying the criteria and blocks set by partner associations in their areas.
- Supporting passengers, drivers and associations and looking into incidents.
- Meeting the legal, tax and regulatory obligations of app-based transport.
Legal bases: performance of a contract, compliance with a legal or regulatory obligation, legitimate interest in the safety of the service and, where applicable, consent.
Location
We do not use location outside the service. The passenger’s location is used when requesting and during the ride; the driver’s, only while their shift is open.
Cookies and analytics on the website
The website only uses cookies that are needed for it to work. Analytics cookies (Google Analytics, loaded through Google Tag Manager) are only set if you click “Accept” on the cookie notice; until then, analytics stays off. We use them to understand which pages are visited and to improve the website, never for advertising. Your choice is stored in your own browser and you can change it at any time through “Cookie preferences” at the bottom of every page.
Who we share it with
- Between passenger and driver, only what the ride needs: first name, photo, pickup point, vehicle and plate.
- With the area’s partner association: drivers who serve the area, incidents and indicators. Never a resident’s ride history.
- With the payment partner and infrastructure providers, under contract.
- With authorities, when the law requires it.
We do not sell personal data.
How long we keep it
While the account is active and, after that, for the period required by law or needed to look into incidents.
Your rights
You can request access, correction, anonymization, portability or deletion of your data, information about sharing and the review of automated decisions. A driver blocked by an association can request a review of the block in the app.
Contact
Data protection officer: to be defined · to be defined