This policy explains what personal data Rydars collects, why we collect it, who it is shared with, and what you can do about it. Rydars is a carpooling app that connects passengers with drivers travelling the same way.
Rydars operates the Rydars mobile application and the rydars.com website. For any question about this policy or your data, contact admin@rydars.com.
| Data | Why |
|---|---|
| Name, email address, phone number, password | To create and secure your account, and to contact you about it. |
| Whether you are a driver or a passenger | To show you the right features. |
| Identity and eligibility documents — passport, national identity card, driving licence, a selfie, vehicle licence and vehicle photo, and the details typed from them (document number, expiry date, date of birth, nationality) | To verify that drivers are who they say they are and are entitled to drive, and to keep the service safe. Verification is reviewed by our staff. |
| Vehicle details — make, model, year, colour, registration plate, number of seats | So passengers know what they are getting into. |
| Location — the departure and destination of trips you create, and your device location while using map features | To match trips and show them on a map. We do not track your location in the background. |
| Trips, invitations and their status | To operate the matching between passengers and drivers. |
| Device push token | To send notifications about invitations and trips. Note that only one device at a time can receive notifications for an account. |
| Purchase and token records — app-store order identifiers, the token packs bought, and a ledger of tokens added, spent and refunded | To credit purchases correctly, to prevent the same purchase being credited twice, and to resolve refund and billing disputes. |
| Profile photo (avatar) | Shown to other users once it has been reviewed and approved. |
Other users of Rydars can see your display name, your profile photo (once approved), your vehicle details if you are a driver, and the trips you publish including their departure and destination. Your identity documents are never shown to other users — they are visible only to our verification staff.
We do not sell your personal data, and we do not use it for third-party advertising.
You can delete your account at any time:
Deletion is immediate and cannot be undone. Any unused tokens in your balance are lost and are not refundable.
Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to object to or restrict how we use it, to receive a copy in a portable form, and to withdraw consent. To exercise any of these, email admin@rydars.com. You also have the right to complain to your local data-protection authority.
Access to the database is restricted and uses least-privilege credentials. Passwords are stored hashed, never in readable form, and so are the tokens behind account-deletion links. Identity document images are stored outside the public web directory and are served only to authorised staff. No system is perfectly secure, and we cannot guarantee absolute security.
Rydars uses service providers that may process data in countries other than your own. Where that happens, we rely on the safeguards those providers offer for international transfers.
Rydars is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
If we change this policy we will publish the new version here with a new version date, and where the change is significant we will ask you to accept it again in the app. We keep a record of which version you accepted and when.