Privacy Policy

Effective date: 1 November 2026
Last updated: 3 November 2026

1. Who processes your personal data

Controller: Moesia VCC (Моезия ДПК)
UIC: 208426032
Address: 28 Bratya Miladinovi Str., Floor 6, Apt. 16, Varna, Bulgaria
Email: support@vozyme.eu

This policy describes which personal data VozyMe collects, what it uses the data for, how long it keeps the data and what rights you have.

VozyMe has two parts:

  • Travel search on vozyme.eu and in the app. One search shows BDZ trains, buses and shared rides. You do not need an account to search.
  • Shared rides in the VozyMe app. Drivers publish rides and passengers book seats. For this you need an account.

2. What data we collect

2.1 When you search for a trip

We record every search in a search log. The record contains:

  • the time of the search;
  • the origin and the destination;
  • the travel date;
  • where the search was made: in the app or on the website;
  • the number of options found for each way to travel, and whether the result is partial.

When you open a train or bus result, we also record the click-out to the seller. The record contains the time, the seller, the way to travel, the origin and the destination, the travel date, the website we send you to, where the search was made, the affiliate program if there is one, whether the link is sponsored and a random click number.

These two logs contain no name, email, user number, IP address, device number or session number. So we cannot link a record to a person. For the same reason we cannot find, give you or delete the records of your searches on request. We delete the records automatically after 13 months.

2.2 Technical records

The VozyMe server (api.vozyme.eu) records the requests it receives. The record contains the IP address and the type of browser or app (User-Agent). We use these records for security and to fix errors.

Daily count of visitors and users. From each request the server also counts how many people use VozyMe each day, separately for the iOS app, the Android app and vozyme.eu:

  • A visitor without an account is counted by a code made from the IP address and the type of browser. The key of this code changes every day, so the codes of two days cannot be linked. We keep no IP address for this count.
  • A signed-in user is counted once a day by the user number.

We keep only the number of different codes and user numbers per day, not the codes or the numbers themselves. We set no cookie and store nothing in your browser for this count. Search engine robots are not counted.

2.3 When you have an account

Account data:

  • email address;
  • first and last name;
  • phone number, if you publish a ride (we need it for verification);
  • profile photo, if you upload one;
  • car model, colour and licence plate, if you enter them as a driver.

If you sign in with Google, Apple or Facebook, we receive your name, your email and your user number with that service. This happens only if you choose that way to sign in.

Usage data:

  • published and booked rides;
  • ride requests: dates, origin and destination;
  • ratings and reviews between users;
  • messages between users to arrange a ride;
  • records of sign-in attempts: email, IP address, type of browser or app, time and whether the sign-in worked;
  • the time of your last activity in the app or on the website;
  • the language you chose for the app, the emails and the notifications;
  • the source of your registration: the utm tags (source, medium, campaign) of the link that brought you, if the link had them;
  • the push token of your device and its platform (iOS, Android or web), if you allow notifications. With the token we keep the app version, the operating system version and the device model that the app reports. We use them for support and to fix errors.

2.4 What we do not collect

  • your real-time location or a GPS track of your rides;
  • payment card data, because VozyMe takes no payments;
  • driving licence data;
  • biometric data;
  • data about payments between users;
  • social media data, except the name, email and user number when you sign in with Google, Apple or Facebook.

3. Legal basis

We process your personal data on these grounds:

  • Performance of a contract: your account and shared rides.
  • Legitimate interest: the security of the service, fraud prevention, the technical records, the daily count of visitors and users, and the search and click-out logs that help us run and improve the search.
  • Consent: when we ask for your consent for an additional feature. You can withdraw it at any time.
  • Legal obligation: when Bulgarian or EU law requires the processing.

4. What we use the data for

4.1 Purposes

We use your personal data only to:

  • run the search and improve it;
  • know how many people use the service each day, in the apps and on the websites;
  • create and maintain your account;
  • let users contact each other for a shared ride;
  • suggest suitable rides based on place and date;
  • protect the service from fraud and abuse;
  • meet our legal obligations and help with safety investigations.

4.2 What we do not do with your data

  • We do not sell personal data.
  • We do not use your personal data for advertising.
  • We do not give personal data to advertising or marketing companies, or to the partners that links in the search lead to.
  • We do not track your location.

Some links to ticket sellers may be affiliate links. For these links the seller receives from us only the random click number. This number contains no personal data. When you open the seller's website, the seller processes your data under its own rules.

4.3 Security monitoring

We monitor activity in the service to detect fraud, abuse and security threats. For this we may review account activity, requests to the server and content that users publish, when we suspect a breach of the Terms of Service.

5. Who we share data with

We share personal data only in these cases.

With other users:

  • your name, when you publish a ride or book a seat;
  • the contact details needed to arrange the ride.

With service providers that process data on our behalf:

  • a cloud hosting provider for the VozyMe server and database, under a data processing agreement;
  • Vercel, which hosts the vozyme.eu website;
  • Expo, which sends push notifications (through the Apple and Google services) and app updates;
  • Sentry, which receives crash and error reports from the app. The data is stored in the EU. A report contains a description of the error, the device model, the operating system and the app version. We do not send your name or email to Sentry;
  • Google, Apple and Facebook, only if you choose to sign in with them;
  • an email service provider for the emails that VozyMe sends.

6. Storage and security

6.1 Where we store data

  • We store data mainly in the European Economic Area (EEA).
  • Some providers may process data outside the EEA. In that case the transfer relies on the provider's standard contractual clauses or on an adequacy decision of the European Commission.

6.2 How long we keep data

  • Account: while the account is active.
  • Ride history: 2 years after the ride.
  • Messages between passenger and driver before a booking: we delete their text 7 days after the request is confirmed, declined or cancelled.
  • Group chat of a ride: the chat closes 3 days after the ride ends. We delete the text of the messages 90 days after it closes.
  • Ratings: kept with no time limit, because they are part of the trust system.
  • Deleted account: anonymised at once (see section 8).
  • Technical records: 90 days.
  • Daily count of visitors and users: 40 days.
  • Push token: until you log out on the device, turn notifications off, the token stops working or you delete the account.
  • Search log and click-out log: 13 months.

7. Your rights

7.1 Rights

You have the right to:

  • access your personal data and information about how we process it;
  • rectify inaccurate or incomplete data;
  • erase your data (the "right to be forgotten");
  • restrict processing in certain cases;
  • data portability in a machine-readable format;
  • object to processing based on legitimate interest;
  • withdraw consent when processing is based on consent.

You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection.

7.2 How to use your rights

  • Write to us at support@vozyme.eu.
  • We will reply within 30 days.
  • We may ask you to confirm your identity.

The records in the search log and the click-out log contain no data that identifies you. So we cannot find them for an access or erasure request.

8. Account deletion

You can delete your account in the app: Profile, then Account Settings and Delete Account. You can also write to us at support@vozyme.eu. The Delete Account page has the details.

When you delete your account, we at once:

  • replace your name with "Deleted User";
  • delete your email and phone number;
  • delete your profile photo;
  • delete your car details;
  • delete the link to Google, Apple or Facebook, if you signed in with them;
  • delete the push tokens of your devices;
  • delete the time of your last sign-in and your last activity, your language and the source of your registration;
  • deactivate the account, so nobody can sign in with it.

Rides, bookings, ratings and messages stay in the system, because they are part of the other users' history. They are no longer linked to your personal data. Other users see "Deleted User" instead of your name.

If you only searched for a trip, you have no account and there is nothing to delete.

9. Children

  • Only a person aged 18 or over can have a VozyMe account.
  • We do not knowingly collect data from minors.
  • We close accounts that minors created.

10. Cookies and browser storage

  • The vozyme.eu website sets strictly necessary cookies only when you log in to your account.
  • vozyme.eu keeps the utm tags of the link that brought you in the browser for up to 30 days, so that your registration has a source.
  • We use no analytics cookies and no outside analytics service. The server counts visitors without cookies (see 2.2).
  • The mobile app uses no cookies. It keeps your login data in the device's secure storage.

The Cookie Policy has the details. We use no advertising cookies, no third-party marketing cookies and no cross-site tracking.

11. Automated decisions and profiling

  • We suggest suitable shared rides based on the origin, the destination and the date.
  • We order search results by departure time. We use no personal data for this order.
  • These processes have no legal or similarly significant effects on you.
  • You can ask for a human review or object to an automated result.

12. Contact

Email: support@vozyme.eu
Address: Moesia VCC, 28 Bratya Miladinovi Str., Floor 6, Apt. 16, Varna, Bulgaria
UIC: 208426032

We aim to answer privacy questions within 5 business days.

By using VozyMe, you confirm that you have read and understood this policy.