1. Purpose

FAB is a mobile application for aggregating and comparing rideshare prices (VTC — private hire vehicles). It allows users to view, compare and access offers from multiple transport providers — Uber, Bolt, Heetch, G7, LeCab, Freenow and Comin — from a single interface.

FAB does not provide any transportation service. The application acts solely as a technical intermediary displaying prices and redirecting to partner apps for booking.

2. Acceptance

Using FAB implies full acceptance of these terms of use. If you do not accept these terms, please do not use the application.

3. Registration and account

To access comparison features, users must create a FAB account via email or Google/Apple sign-in. Users are responsible for keeping their credentials confidential.

Users may connect their rideshare provider accounts (Uber, Bolt, etc.) to personalize results. Provider login credentials are encrypted and stored securely.

4. How the service works

FAB queries rideshare provider APIs and services in real time to display prices. Displayed prices are indicative and may vary between the time of consultation and actual booking on the provider's platform.

FAB does not guarantee:

• Permanent availability of prices from each provider
• Absolute accuracy of displayed fares (dynamic pricing)
• Driver availability at the time of booking

5. Intellectual property

All elements of the FAB application (design, code, brand, logo) are the exclusive property of FAB. Rideshare provider trademarks (Uber, Bolt, etc.) belong to their respective owners.

6. Liability

FAB cannot be held responsible for transport services provided by partner providers. Any dispute relating to a ride must be addressed directly to the relevant provider.

FAB strives to ensure service availability but does not guarantee uninterrupted operation. Maintenance or updates may cause temporary interruptions.

7. Pricing

FAB is free to use. FAB reserves the right to introduce paid premium features, which will be clearly identified before any purchase.

8. Termination

Users may delete their account at any time from the application settings. Deletion results in the erasure of all personal data and provider connection tokens.

9. Changes to terms

FAB reserves the right to modify these terms. Users will be informed of any substantial changes. Continued use after modification constitutes acceptance.

10. Governing law

These terms are governed by French law. Any dispute shall be submitted to the competent courts of Paris.

1. Data controller

FAB is an application published in France by an independent developer.

2. Data collected

FAB only collects data necessary to operate the service:

• Account — email address, name (if provided via Google or Apple)
• Trip addresses — pickup, drop-off, and intermediate stops entered for comparison
• Location data — GPS coordinates of your pickup point, while using the app only, to autofill your address and adapt the service to your city. No background geolocation.
• Phone number — only when connecting to a ride-hailing provider that authenticates via SMS (Bolt, Heetch), transmitted to the relevant provider to initiate authentication
• Authentication tokens — ride-hailing provider login tokens, encrypted before storage on our servers
• Trip history — booked rides, prices, chosen provider
• Internal usage analytics — anonymized product events (onboarding steps completed, features used). No advertising tracking, no profiling.
• Technical data — device type, OS and app version

3. Purposes of processing

• Display and compare ride-hailing provider prices in real time
• Manage your account and preferences
• Encrypted sync of your provider connections across devices
• Track your trip history and spending
• Send transactional emails (welcome, account recovery)
• Continuously improve the service through anonymized analytics

4. Legal basis

Processing of your data is based on:

• Performance of the contract — providing the price comparison service
• Your consent — voluntary connection of your provider accounts
• Legitimate interest — application security and service improvement

5. Storage and security

• Authentication — Supabase, project hosted in Europe
• Backend infrastructure — Railway, US West region (California, United States), with TLS-encrypted communications
• Provider tokens (server-side) — AES-256-GCM encryption before storage, never kept in plaintext at rest
• Sensitive local storage — certain information required to connect to providers may be stored in iOS Keychain or Android Keystore via Expo SecureStore
• General local storage — some preferences and session data may be stored locally on your device within the application sandbox
• Transactional email — Resend (sending welcome emails on account creation; tracking limited to delivery status, to help you recover your account if the email is invalid)
• Geocoding — Google Maps Platform via our backend, with a temporary 7-day cache and rounded coordinates where possible
• Server error tracking — Sentry, backend only, to identify technical errors. No personal user data is intentionally transmitted.

6. Data sharing

FAB never sells your data. No data is shared for advertising purposes. Your data is only transmitted to:

• Ride-hailing providers — trip addresses, as part of price requests
• Supabase — authentication and encrypted storage, project hosted in the EU
• Railway — backend infrastructure (US West)
• Google Maps Platform — addresses and coordinates, for geocoding and autocomplete (our backend acts as an intermediary)
• Resend — sending transactional emails and tracking deliverability (bounce status only)
• Sentry — backend technical error logs

7. Transfers outside the European Union

Some subprocessors may process data outside the European Union, notably in the United States. This is the case for Railway, Resend, Google Maps Platform, and Sentry. Where required, FAB relies on the safeguards provided by GDPR, such as the Data Privacy Framework when the provider participates in it, or Standard Contractual Clauses.

8. Data retention

• Active account — data retained for the duration of use
• Account deletion — full erasure within 30 days
• Provider tokens — deleted immediately upon disconnecting a provider or deleting your account
• Backend geocoding cache — 7 days, with rounded coordinates where possible
• Server error logs (Sentry) — 90 days

9. Your rights

Under GDPR, you have the following rights:

• Access — obtain a copy of all your data
• Rectification — correct inaccurate information
• Erasure — delete your account and all your data
• Portability — receive your data in a structured format
• Objection — object to certain processing
• Restriction — request temporary restriction of certain processing

To exercise these rights, contact us at contact@fabapp.fr. Maximum response time: one month.

10. Minimum age

FAB is not intended for users under 16 years of age. We do not knowingly collect data concerning minors under 16.

11. Cookies and trackers

The FAB mobile app uses no cookies or advertising trackers. No third-party behavioral analytics (Google Analytics, Facebook Pixel, etc.). Our internal analytics are only anonymized product events.

12. Installed app detection

To adapt onboarding and suggest relevant ride-hailing providers, FAB checks whether certain apps (Uber, Bolt, Freenow, G7, LeCab, Heetch, Comin) are installed on your phone via the system URL schemes mechanism (iOS) or Package queries (Android). This check returns only a yes/no boolean per app — no usage data from these apps is read, and the check never leaves your device.

13. Apple Sign-In relay service

If you sign in with Apple Sign-In and choose to hide your email address, Apple generates a relay address (xxx@privaterelay.appleid.com) that forwards our emails to your real address. We only see the relay version; you retain control in your Apple ID settings.

14. Changes

This policy may be updated. In case of substantial changes, you will be informed via the application.