Privacy Policy

We collect several types of information to provide and improve our carpooling services: Personal Information: • Name, email address, and phone number • Profile photo • Date of birth (for age verification) • Government-issued ID for identity verification Driver-Specific Information: • Driver's license number and verification • Vehicle information (make, model, year, license plate) • Insurance information Location Data: • Pickup and drop-off locations • GPS data during active rides (for safety and route optimization) Payment Information: • Credit/debit card details (processed securely through third-party payment processors) • Transaction history Usage Data: • App usage patterns • Device information (type, operating system, unique identifiers) • IP address • Trip history and ratings

We use your information to: • Facilitate carpooling connections between drivers and passengers • Verify user identities and driver qualifications for safety • Process payments and maintain transaction records • Provide customer support and respond to inquiries • Improve our services through analytics and usage patterns • Send important service updates, notifications, and promotional communications • Prevent fraud, ensure platform safety, and investigate violations • Comply with legal obligations and enforce our Terms of Service • Enable rating and review features to maintain service quality We will never sell your personal information to third parties for marketing purposes.

We share your information in the following circumstances: With Other Users: • Your name, photo, and ratings are visible to users you ride with • Trip details are shared between drivers and passengers for coordination With Service Providers: • Payment processors for transaction handling • Identity verification services • Cloud storage and hosting providers • Customer support tools and analytics services Legal Requirements: • We may disclose information to comply with laws, regulations, or legal processes • To respond to government requests or protect our rights and safety Business Transfers: • In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity

We implement industry-standard security measures to protect your personal information: • Encryption of data in transit and at rest • Secure authentication and access controls • Regular security audits and vulnerability assessments • Restricted employee access to personal data on a need-to-know basis Data Retention: • We retain your personal information for as long as your account is active • Transaction records are kept for 7 years to comply with tax and financial regulations • After account deletion, certain data may be retained for legal compliance, safety investigations, or fraud prevention While we strive to protect your information, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

You have the following rights regarding your personal information: • Right to Access: Request a copy of the personal data we hold about you • Right to Correction: Request correction of inaccurate or incomplete information • Right to Deletion: Request deletion of your account and associated data (subject to legal retention requirements) • Right to Data Portability: Receive your data in a structured, machine-readable format • Right to Withdraw Consent: Opt out of marketing communications or data processing based on consent • Right to Object: Object to processing of your data for certain purposes To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.

We use cookies and similar technologies to: • Remember your preferences and settings • Analyze platform usage and improve functionality • Deliver personalized content and advertisements • Maintain security and prevent fraud You can control cookie settings through your browser, but disabling certain cookies may limit platform functionality.

Our platform integrates with third-party services (payment processors, mapping services, analytics providers). These services have their own privacy policies, and we encourage you to review them. RideEco is not responsible for the privacy practices of third-party services.

RideEco is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information promptly.

Your information may be transferred to and processed in countries outside of your residence. We ensure appropriate safeguards are in place to protect your data in compliance with applicable privacy laws, including GDPR and PIPEDA.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes through the app or via email. Your continued use of RideEco after such changes constitutes acceptance of the updated policy.