Privacy Policy

1.Who is responsible#

The controller of your data is Kwiker, a company registered in the Republic of Kosovo [registered name, registration number, address]. Contact: info@kwiker.app. We follow the Law on Protection of Personal Data of Kosovo (No. 06/L-082) and, where it applies, the EU GDPR.

2.What we keep#

• Account: name, email, phone number, country, language, and — for travellers — gender, used only for the passenger list on night lines and never shown to other travellers.
• Bookings: the trips you hold and book, seats, the names of the passengers you add, what is owed and whether it was paid.
• Messages with operators, reviews you write, and the notifications we send you.
• Device: a push-notification token for the app, and technical logs of errors.

3.Why, and on what basis#

• To hold and book seats and give the operator a passenger list — to perform the contract.
• To send booking, trip and message notifications — to perform the contract; offer notifications only if you switch them on.
• To keep the service safe, prevent fraud and enforce the no-show rule — our legitimate interest.
• To keep booking records the law requires — a legal obligation.

4.What operators see#

The operator of a trip you booked sees the passenger names, seats, your phone number, what is owed and whether you boarded. The operator uses them to carry you and is responsible for them as a separate controller.

Other travellers see only your first name on a review.

5.Service providers#

We use providers who process data on our behalf, under contract: Supabase (database, sign-in, storage), Expo, Apple and Google Firebase Cloud Messaging (push notifications), Google Maps (places), Hostinger (website hosting and email) and Sentry (error reports). We do not sell your data and show no third-party advertising.

6.Transfers abroad#

Some providers store data outside Kosovo, including in the EU and the United States, under safeguards such as standard contractual clauses.

7.How long we keep it#

Your account data for as long as the account exists. Booking records are kept for 6 years with your name removed, because operators and tax rules need them. When you delete your account we erase it within 30 days; backups roll over within a further 30 days.

8.Your rights#

You can see and correct your details in Profile, export everything we hold about you from the app (Settings → Your data), and delete your account from Profile or the app. You may also object to processing or ask us to restrict it. Write to info@kwiker.app; we answer within 30 days.

9.Security#

Data is encrypted in transit, access is limited by row-level rules in our database, and staff access is logged. No system is perfect; tell us at once if you notice something wrong.

10.Children#

Accounts are for people 18 and over. A child’s name appears only as a passenger on a booking made by an adult.

11.Cookies and browser storage#

The website keeps your sign-in in your browser and remembers which conversations you have read. The language is part of the address (/en for English). We use no analytics or advertising cookies.

12.Changes#

If we change this policy the date at the top changes; important changes are announced in the app.

13.Complaints#

Please write to us first. You may also complain to the Information and Privacy Agency of Kosovo (ivp-rks.org), or to the data-protection authority where you live.