Your data, fully transparent.

NSC Digital operates the Towik (for drivers) and Towik Pro (for providers) mobile apps, as well as the towik.app website. Towik is a platform that connects stranded drivers with professional roadside assistance providers.

As data controller, NSC Digital determines the purposes and means of processing your personal data, in accordance with the General Data Protection Regulation (GDPR — EU 2016/679) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

Data you provide

• Identity: first and last name.
• Contact details: email address and phone number.
• Vehicle: make, model, year, colour, fuel and gearbox type, licence plate (optional).
• Assistance request: type of problem and information useful for the job.
• Photos and videos: images of the breakdown, sent voluntarily.
• Messages: content of the chat between the driver and the provider.
• Providers only: company name, services offered, vehicles and, if you choose to have it verified, company number.

Data collected automatically

• Precise location: see the “Location” section below.
• Notification identifier: technical token used to send you push notifications.
• Job usage data: timestamps and statuses (pending, accepted, completed…).

What we do not collect

• No data for advertising or marketing profiling.
• No health data, political opinions or other sensitive categories.
• We never sell your data to third parties.
• We do not store your card numbers: they are processed directly by Stripe.

Location is the most sensitive data Towik processes. Here is exactly how it is used:

• Drivers: your position is used to show nearby providers when you make a request. During an active job, it is shared with the provider who accepted it, including when the app is in the background, so they can reach you. Sharing stops when the job ends.
• Providers: your position is shared while you are “on duty”, including in the background, so nearby drivers can find you and follow your arrival. It is no longer shared once you go off duty.
• Storage: location is stored in Firebase (Google, EU) for as long as the service requires, then removed from active data.
• Sharing: your location is never sold or shared for marketing purposes.

Towik is free for drivers. Providers pay €3 incl. VAT per completed job: no completed jobs, no charge.

• Payments (saving a card and the monthly charge for jobs) are handled by Stripe, a PCI-DSS certified payment provider.
• Towik never sees or stores your card numbers. We only keep your Stripe customer ID and the history of jobs billed.
• Billing data is kept for the period required by accounting law.

We share your data only with the following providers, strictly for the purposes described:

Within a job, the driver and the provider see the information needed for the intervention (name, location, vehicle, messages). We do not transfer personal data outside the European Economic Area without appropriate safeguards, such as the European Commission’s standard contractual clauses.

• Account data: for as long as you are registered, then deleted within 30 days of account deletion.
• Job history and billing: 3 years from the job, or longer if accounting law requires it.
• Breakdown photos and videos: 90 days after the job is closed.
• Real-time location: not kept beyond the service (active job or “on duty” period).
• Technical logs: 90 days.

Under the GDPR, you have the following rights:

• Access (art. 15): obtain a copy of your personal data.
• Rectification (art. 16): correct inaccurate data.
• Erasure (art. 17): delete your account and your data.
• Portability (art. 20): receive your data in a structured format.
• Objection (art. 21): object to processing based on legitimate interest.
• Withdrawal of consent: at any time, for processing that relies on it (notifications, for example).

You may also lodge a complaint with the Belgian Data Protection Authority.

We implement appropriate technical and organisational measures to protect your data:

• Communications encrypted in transit (TLS).
• Data encrypted at rest by Firebase.
• Access controlled by strict security rules: authentication required, everyone only accesses their own data and that of their jobs.
• Passwords are never accessible to our team: authentication is handled by Firebase Auth.
• Photos and videos accessible only to the parties involved in the job.

The Towik apps do not use cookies. The towik.app website sets no advertising or analytics cookies. It only remembers, in your browser, the language you chose. The website fonts are loaded from Google Fonts, which sends your IP address to Google when the page loads.

Towik is not intended for people under 18. We do not knowingly collect data about minors. If you believe a minor has sent us data, write to privacy@towik.app: we will delete it as soon as possible.

We may update this policy. Any significant change will be announced by notification (if enabled) or by email at least 15 days before it takes effect. The date of the last update is shown at the top of this page.

For any question about this policy or your personal data: