Last updated: [22 July 2026]; version 1.1.0
RideBrisa (“RideBrisa,” “Brisa,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit www.ridebrisa.com, use the RideBrisa Rider mobile app, create an account, request rides, manage memberships, purchase guest or family access passes, or contact us.
RideBrisa is operated by Brisa Mobility S.L. (“Brisa”).
Registered address: AVDA FUENGIROLA, NUM 9 ESC. 2, PUERTA D 29640 FUENGIROLA - Malaga, Spain
Website: https://www.ridebrisa.com
Operating region: Spain / European Union
Privacy contact: hello@ridebrisa.com
For GDPR purposes, Brisa is the data controller for the personal data described in this Privacy Policy.
We may collect the following categories of personal data:
Account and profile data:
full name
email address
phone number
community, residence, or access eligibility details
preferred language
account identifiers and authentication details
Ride and booking data:
selected pickup and destination points
ride request time, pickup time, scheduled ride time, ride status, and ride history
trip duration, route, driver or vehicle assigned, and cancellation details
QR code or ride validation information used to start or complete a ride
Location data:
approximate or precise device location, if you allow location access
pickup and drop-off locations
route and service-area information
Membership, family, and guest pass data:
membership or subscription status
family member access passes purchased, invited, redeemed, or cancelled
guest pass cards purchased, available, redeemed, or expired
access codes, redemption dates, and the user who redeemed a pass
Payment and billing data:
Stripe customer ID
payment confirmation, transaction ID, invoice or receipt references
subscription, membership, and purchase status
billing plan, price, currency, and renewal/cancellation information
We do not store full payment card details. Payments are processed by Stripe or another authorized payment provider.
Device and technical data:
device type, operating system, app version, and browser type
push notification tokens and device push metadata
usage analytics
Communication data:
customer support messages
service updates
marketing preferences and consent status, where applicable
We use your personal data to:
create and manage rider accounts
provide RideBrisa transportation services
process ride requests, scheduling, routing, pickup, and drop-off
match riders with available drivers and vehicles
manage memberships, family member passes, guest passes, and ride entitlements
process payments, subscriptions, invoices, and receipts
send ride updates, scheduled ride reminders, service notices, and important account notifications
provide customer support
improve safety, reliability, performance, and service quality
prevent fraud, misuse, and unauthorized access
comply with legal, tax, accounting, and regulatory obligations
send marketing communications only where permitted or consented to
We do not sell your personal data.
Under the GDPR, we process personal data based on:
Contractual necessity:
To create your account, provide the service, process ride requests, manage memberships, and handle payments.
Consent:
For optional permissions or communications, such as device location access, push notifications where required, and marketing messages.Legitimate interest:
To improve and secure our services, prevent misuse, manage operations, provide support, and analyze app performance.Legal obligations:
To comply with tax, accounting, regulatory, consumer protection, and legal requirements.
We may share personal data with trusted service providers that help us operate RideBrisa, including:
Stripe, for payments, subscriptions, invoices, and receipts
AWS and related infrastructure providers, for hosting, authentication, databases, and backend services
Expo, Apple, and Google, for push notifications
Google Maps or routing providers, for maps, routes, and location-based features
analytics, diagnostics, monitoring, or crash-reporting providers, if used
customer support, legal, accounting, or compliance providers, where necessary
RideBrisa drivers may see the ride information needed to complete a trip, such as rider name or identifier, pickup point, destination point, pickup time, route, and ride status.
Authorized RideBrisa administrators and support staff may access account, ride, membership, guest pass, family pass, and payment-status information when needed to operate, support, secure, or improve the service.
We require service providers to protect personal data and process it only according to our instructions and applicable data protection laws.
Some service providers may process personal data outside the European Economic Area. Where this happens, we use appropriate safeguards, such as adequacy decisions, standard contractual clauses, data processing agreements, or other lawful transfer mechanisms required by GDPR.
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.
Examples:
account data is kept while your account is active
ride history may be kept for support, safety, operations, dispute resolution, and service improvement
payment, invoice, and transaction records may be kept as required by tax, accounting, or legal obligations
push notification tokens are removed or replaced when no longer valid, after logout where applicable, or when account data is deleted
location data is kept only as needed to provide the service or as part of ride records, safety records, support history, or legal requirements
When data is no longer needed, we delete, anonymize, or securely archive it.
If you are in the European Union or another region with similar privacy rights, you may have the right to:
access the personal data we hold about you
correct inaccurate or incomplete data
download or receive a copy of your personal data
request deletion of your account and personal data
restrict or object to certain processing
request data portability
withdraw consent where processing is based on consent
object to direct marketing
Riders can use the in-app options to download their personal data and request account deletion.
Instructions for deleting your RideBrisa account are also available here: https://www.ridebrisa.com/delete-account
You can also exercise your privacy rights by contacting us at hello@ridebrisa.com.
We may need to verify your identity before completing a request. Some data may be retained where required for legal, tax, accounting, fraud-prevention, dispute, safety, or compliance reasons.
You also have the right to lodge a complaint with a data protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD): https://www.aepd.es
RideBrisa may use cookies or similar technologies on our website to:
enable core website functionality
understand website usage
improve performance and reliability
support security and fraud prevention
You can manage cookies through your browser or device settings.
We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
No digital service can be guaranteed to be completely secure, but we work to protect your data and limit access to people and providers who need it.
RideBrisa is not intended for children under 16 without appropriate authorization from a parent, guardian, resident account holder, or community administrator. If we learn that we have collected personal data from a child without appropriate authorization, we will take steps to delete it where required.
RideBrisa may link to third-party websites or services. We are not responsible for the privacy practices of those third parties. Please review their privacy policies before using their services.
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last updated” date and a version number. Where required, we may notify you in the app or ask you to accept updated terms or privacy notices.
If you have questions about this Privacy Policy or your personal data, contact:
RideBrisa / Brisa Mobility S.L.
Email: hello@ridebrisa.com
Website: https://www.ridebrisa.com