Privacy Policy for the "Tasymaldau" App
1. General
This Policy describes the processing of personal data in the "Tasymaldau" mobile application (the "App"). The App provides a public baggage-tracking service: any user can check the status, route, and movement history of a baggage item by its tag code, free of charge and without registration. In addition, staff of transport organizations sign in to perform operational tasks (acceptance, loading, unloading, hand-over).
App Developer: Ubee AI LLP, BIN 250140005103, address: 10 Utepova St., Almaty, Kazakhstan, email: privacy@ubee.ai.
Personal Data Controller (determines the purposes of processing): Passenger Transportation JSC (AO «Пассажирские перевозки»). Ubee AI acts as a processor on behalf of the Controller under a contract.
2. What Data Is Processed
2.1. Baggage tracking (all users, no registration):
- The tag code you type or scan with the camera is sent to the server to retrieve baggage status. No personal data of the person performing the tracking is collected, and no account is required.
- Technical device data required for operation (OS type, app version) — limited to the minimum necessary.
2.2. Staff access (behind login):
- Account data: phone number, password (stored encrypted on the server), session token.
- Employee data: name, position/role, organization, assigned station.
- Scan data: baggage-tag code, operation type, station, date and time; identifier of the employee who performed the scan.
3. Camera Access
The App requests camera access solely to scan QR codes and barcodes on baggage tags — both for public tracking and for staff operations. Camera images are processed locally on the device in real time, are not stored, and are not shared with third parties; only the recognized tag code is sent to the server.
4. Purposes of Processing
Providing the public baggage-tracking service by tag code; employee authentication; tracking baggage movement and status changes; building the operations log; ensuring security and preventing abuse.
5. Legal Basis
Public tracking is carried out to provide the stated service and at the user's own request (by entering a tag code). Processing of employee data is carried out within the employment/contractual relationship with the Controller. All of the above is in accordance with the Law of the Republic of Kazakhstan "On Personal Data and Its Protection" No. 94-V; where necessary — on the basis of the data subject's consent.
6. Data Sharing
Data is shared with the Controller (employer) and the server-infrastructure provider (hosting). Baggage-status notifications to sender-customers are sent by the Controller through its own channels. Data is not sold and is not used for advertising.
7. Storage and Localization
Personal data of citizens of the Republic of Kazakhstan is stored on servers located within the territory of the Republic of Kazakhstan. The retention period is determined by the Controller and by legal requirements; upon expiry, data is deleted or anonymized.
8. Security
Data is transmitted over a secure channel (HTTPS), with role-based access, session tokens, and per-operation restrictions on employee permissions.
9. Data Subject Rights
Baggage tracking requires no account, and no personal data of the user is stored for it. Employees have the right to request access to, correction or deletion of their data, and to withdraw consent. Staff accounts are created by the employer; to delete your account and data, contact the Controller or write to privacy@ubee.ai. Requests are processed within the time limits set by law.
10. Children
The baggage-tracking feature is available to a general audience. The App is not directed to children and does not knowingly collect data from minors.
11. Changes
This Policy may be updated; the current version is published at https://ubee.ai/legal/baggage-privacy.