Privacy Policy

We collect the following types of information:

• Account information: Name, email address, and profile photo when you register or sign in via Google.
• Listing data: Photos, descriptions, prices, and location data you provide when creating listings.
• Communications: Messages sent through our built-in messaging system.
• Transaction data: Deal history, payment amounts, and ratings.
• Usage data: Pages visited, features used, and general analytics to improve the service.
• Device information: Browser type, operating system, and IP address for security purposes.

• To provide and maintain the Platform's services
• To facilitate transactions and communications between users
• To display listings to other users, including location-based search
• To verify your identity and prevent fraud
• To send notifications about your transactions and account
• To improve and optimize the Platform
• To enforce our Terms of Service

We do not sell your personal information. We may share your information in the following cases:

• Other users: Your name, profile photo, ratings, and listing information are visible to other users.
• AWS (Amazon Web Services): Hosting, database, and file storage. Data is stored in AWS data centres.
• OAuth providers: When you sign in with Google, Facebook, Apple, or Twitter, we receive your email, name, and profile photo from them and they receive a sign-in confirmation from us.
• OpenStreetMap (tile.openstreetmap.org): Map tiles for displaying locations on listings and rides.
• Legal requirements: We may disclose information when required by law or to protect our rights and safety.

Your data is stored securely on AWS infrastructure. We use encryption for data in transit (HTTPS) and at rest. Passwords are hashed using bcrypt. While we take reasonable measures to protect your data, no system is 100% secure.

We use the following client-side storage in your browser:

• localStorage: Stores your session token (so you stay signed in), language preference, theme choice, recently-viewed listings, and other UI preferences. This data stays on your device and is not sent to third parties.
• Cookies: A short-lived csrf_token cookie may be set for security against cross-site request forgery on certain endpoints.
• No tracking cookies: We do not use Google Analytics, Facebook Pixel, or other third-party advertising or analytics trackers.

You can clear this data at any time via your browser’s site settings, which will sign you out and reset preferences.

When creating a listing, you may provide location data (via browser geolocation or manual entry). This is used to show your listing to nearby users and for distance-based matching. Your exact coordinates are stored but only an approximate location is displayed publicly.

If you grant permission, the Platform may send push notifications to your browser or mobile device for messages, listing matches, carpool ride updates, deal status changes, and similar transactional events. We use a device token (provided by your browser or operating system’s push service — e.g. Apple Push Notification Service, Firebase Cloud Messaging) to deliver these. You can disable notifications at any time in your settings or via your browser/device permissions.

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Export your data
• Withdraw consent for optional data processing

To exercise these rights, visit your account settings or contact us.

The Platform is not intended for users under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the Platform after changes constitutes acceptance.

If you have questions about this Privacy Policy or your data, please reach out through our contact page or visit the FAQ.