# Privacy Policy for Ridyfy
**Last Updated: July 15, 2026**
Dua Arshad and Samreen Karamat ("we", "our", or "us") operates the Ridyfy mobile application (the "App"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our App and the choices you have associated with that data.
By downloading and using Ridyfy, you agree to the collection and use of information in accordance with this policy.
---
## 1. Information We Collect
To provide and improve our carpooling service, we collect several different types of information for various purposes.
### A. Personal Data Provided Voluntarily
While using our App, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). This includes:
* Email Address: Used for account registration, authentication, and communication.
* First Name and Last Name: To identify you to other users (drivers/passengers) within the carpooling network.
* Phone Number: Required for users to coordinate rides and communicate regarding trip details.
### B. Location Data
Because Ridyfy is a carpooling application, we require access to your location to provide core features:
* Precise Location (GPS): We collect and use your precise geographical location to show nearby rides, calculate routes, and track active carpool trips.
* Background Location: Depending on user settings, we may access your location when the app is closed or not in use to ensure real-time route tracking works seamlessly during an active trip. You can enable or disable location services at any time through your mobile device settings.
### C. Automatically Collected Data
We may also collect information that your device sends whenever you use our App:
* Device Information: Device model, operating system version, and unique device identifiers.
* App Performance Data: Crash logs and performance diagnostics to help us fix bugs and improve app stability.
---
## 2. Use of Data
Ridyfy uses the collected data for the following purposes:
* To register, authenticate, and manage your user account.
* To match passengers with drivers heading along similar routes.
* To display maps, determine optimal paths, and coordinate pick-up and drop-off points.
* To notify you about changes, updates, or active ride details.
* To provide customer support and troubleshoot technical bugs.
---
## 3. Data Storage and Third-Party Services
We do not sell your personal data. To run the App securely and efficiently, we work with trusted third-party cloud and infrastructure providers:
* Supabase: We use Supabase for secure user authentication and database storage. Your login credentials (passwords are securely hashed) and profile data are stored on Supabase's secure cloud servers.
* Render: Our backend API is hosted on Render. When your App communicates with our server, data is transmitted over encrypted HTTPS channels to Render's hosting environment.
* Google Maps API: We utilize Google Maps services to render maps, search locations, and calculate routes. Google may collect and process location data in accordance with the [Google Privacy Policy](https://policies.google.com/privacy).
---
## 4. Security of Data
The security of your data is of paramount importance to us. All data transmitted between the App, our Render backend, and Supabase is encrypted in transit using industry-standard Secure Socket Layer/Transport Layer Security (SSL/TLS) protocols. While we strive to use commercially acceptable means to protect your Personal Data, no method of transmission over the Internet or electronic storage is 100% secure.
---
## 5. Your Data Rights and Deletion
We believe you should have control over your personal data. You have the right to:
* Access, update, or correct the personal information we hold about you.
* Request the complete erasure/deletion of your account and associated personal data from our active Supabase database.
If you wish to delete your account or request data removal, please contact us at the email address provided below, and we will process your request within a reasonable timeframe.
---
## 6. Children's Privacy
Ridyfy does not address anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from children. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us so we can take immediate steps to remove that information from our servers.
---
## 7. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this document. You are advised to review this Privacy Policy periodically for any changes.
---
## 8. Account and Data Deletion Request
Ridyfy values your privacy and allows users to request the permanent deletion of their account and associated personal data. Account deletion requests are accepted only via email and must be sent from the email address registered with your Ridyfy account to verify account ownership. To request deletion, send an email to ridyfy89@gmail.com with the subject line "Account Deletion Request." Once your request has been received and verified, your account and associated personal data will be permanently deleted within 3 business days. Anonymous operational and financial records may be retained where required for legal, security, or analytical purposes; however, these records do not contain any personally identifiable information and cannot be linked back to you.
---
## 9. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us:
* By Email: ridyfy89@gmail.com