Delete CroCab Driver data or account

Who handles the request?

Accounts are created by authorised CroCab administration. Signing out or disabling access is not data deletion. CroCab handles the platform request and, where necessary, coordinates with your transport partner. Partner employment records are subject to that employer's separate duties.

How to submit a request

1. Email crocab@crocab.com, preferably from the address linked to your Driver account. If you cannot access that address, provide a contact where we can reply.
2. Use the subject CroCab Driver – data deletion request. Give your name, the account email or phone number, and describe the information you want deleted.
3. State whether you want to keep the account and delete selected information, or request account closure and deletion of all information not subject to a retention obligation.
4. We will respond and may request proportionate additional identity confirmation. Do not send a password, PIN or identity-document copy without a reasoned request from us.

If no email app opens, copy crocab@crocab.com into your email service. You can submit a request without installing the app or signing in to this page.

Response and your rights

We inform you of action taken without undue delay and within one month of receiving your request. Where justified by the complexity or number of requests, the response deadline may be extended by two further months; we inform you within the first month and explain why. Eligible information is deleted without undue delay. The response deadline does not shorten statutory record-retention duties.

You may also request access, rectification, restriction and portability, or object where applicable. If part of a request cannot be fulfilled, we explain why and your further options. You may complain to the Croatian Personal Data Protection Agency (AZOP).

What is deleted, what is retained and for how long?

Deletion covers information whose processing purpose has ended. The accounting retention period does not automatically apply to all GPS history, all messages or an entire profile. Where there is no single statutory period, we use the following criteria:

Driver profile, contact, photograph and documents

Information required for sign-in and proof of eligibility is retained while Driver account access is authorised. After access ends or a valid request, information no longer needed is removed. Only the portion required to evidence a completed service, comply with law or address a specific dispute is retained for the applicable period below. Deleting information essential to the account may end access to the app.

Location, ride status, messages, ratings and support

These are retained while needed to perform the ride or handle the request. Where a specific record is needed for an open complaint, collection, safety incident or legal claim, only the necessary part is retained until the matter is closed and the applicable period to establish or defend that claim ends. Our response identifies the retained records, the reason, and the deadline or event that ends retention. Stopping location transmission does not automatically erase existing records.

Fiscal receipts and accounting documents

Documents underlying entries in the journal, general ledger or subsidiary books are retained for at least 11 years, starting on the final day of the financial year to which the books containing those entries relate. This includes required issuer, operator, service, amount and payment details forming part of the document. Fiscalised structured eInvoices have a special period of six years after the end of the year of issue where the Fiscalisation Act's conditions apply. An ordinary receipt PDF or printout is not, by itself, such an eInvoice. Accounting books and other related records have their own retention requirements.

Diagnostics and notifications

Firebase Crashlytics retains crash records and associated identifiers for 90 days before starting removal from live and backup systems. Requests may cover CroCab notification tokens and device identifiers no longer needed. Firebase retains installation identifiers until deletion is requested through its API; removal from live and backup systems then takes up to 180 days under the provider's policy. These periods are not blanket automatic deletion of all CroCab data.

Limited retention and backups

A dispute or legal retention duty is assessed for the specific record, not used as an unlimited reason to keep all information. Retained information has restricted access; unnecessary links are removed or pseudonymised where possible without changing legally required documents. We send appropriate deletion requests to processors and inform you of the applicable backup cycle and any later completion of removal.

Sources and applicable rules

• GDPR — Articles 5, 12–14, 17, 19, 21
• Accounting Act — Articles 10 and 13; NN 151/2025, Article 2
• Fiscalisation Act — Article 35
• Firebase Privacy and Security