Privacy Policy

Categories of personal information we collect

• Identifiers & contact data: parent name, email, phone, home address.
• Children's information: name, age, school, grade, allergies/notes, car-seat needs, and an optional photo.
• Sensitive personal information: precise geolocation during active rides, photographs of children and of authorized adults, and government ID images of authorized pickup persons and of the parent.
• Commercial information: bookings, plans, and payment records (card details are handled by Stripe; we do not store full card numbers).
• Safety records: authorized pickups, emergency contacts, pickup/drop-off scans with time, location, photo and signature.

How and why we use information

We use this information only to schedule and operate rides, verify who may collect a child, send notifications, process payments, respond to emergencies, and keep an auditable child-safety record. We use sensitive personal information solely for these purposes and not to infer characteristics about you. We do not sell or share personal information (as "sell" and "share" are defined under the CCPA/CPRA), and we do not use it for cross-context behavioral advertising.

Children's information

Children's data is provided by a parent or guardian and used solely to deliver the service safely. Photos and identity documents are stored in private buckets and accessed only through short-lived signed links; handover proof media is written by the driver and cannot be altered by parents.

Retention

We keep personal information only as long as needed for the purposes above:

• Handover proof media (drop-off selfies, signatures, signed PDF sheets) and the ID/photo of inactive authorized pickups are purged after 90 days.
• Live driver location is only shared during an active ride and is cleared from the ride once it ends; we do not keep a continuous location trail.
• Immutable safety-journal entries (who was picked up/dropped off, and to whom) are retained as a legal and safety record; on deletion they are de-identified rather than removed.
• Account and booking data are kept while your account is active.

Storage & security

Data is stored with our infrastructure provider (Supabase) using encryption in transit and row-level access controls, so each family can reach only its own data. Sensitive files live in private storage buckets.

Sharing / service providers

We disclose personal information only to the service providers needed to run My-SafeRide — Supabase (hosting/database), Stripe (payments), Resend (email), Twilio (SMS), Google Maps (maps) — under contracts limiting their use to providing those services, and to emergency services when a child's safety requires it. These disclosures are not sales.

Your California privacy rights (CCPA/CPRA)

You have the right to:

• Know / access the categories and specific pieces of personal information we hold about you.
• Delete your personal information. Because we operate a child-safety service, we honor deletion by erasing identifying data and de-identifying the retained safety journal, keeping only what the law permits us to retain.
• Correct inaccurate personal information.
• Opt out of sale/sharing — not applicable, as we do not sell or share personal information.
• Limit the use of sensitive personal information — we already use it only as necessary to provide the service.
• Exercise these rights without discrimination in price or service.

To exercise a right, email us (below). We will verify your identity before acting, respond within the timelines set by the CCPA/CPRA, and you may use an authorized agent.

Contact

Questions or requests? Email privacy@my-saferide.com.