Effective date: March 26, 2026 · Last updated: March 26, 2026
When you create an account we collect your name, email address, and optionally your phone number and general neighborhood or city. When you post a route we store the pickup area, destination, departure time, seat count, and any notes you add. We do not collect your precise GPS location at any time.
We also collect standard technical information that any web service receives: your IP address, browser type, and the pages you visit within the app. This is logged automatically by our hosting infrastructure.
Your name and general area are displayed on your public profile so other users can identify you when browsing routes or messaging. Your email is used only for account authentication and transactional notifications (new message, request approved). Your phone number, if provided, is used only for optional SMS verification — we do not use it for marketing.
We do not use your data to build advertising profiles, sell to third parties, or train AI models.
Your data is stored on Supabase (PostgreSQL), hosted on AWS infrastructure in the United States. All data is encrypted in transit (HTTPS/TLS) and at rest. Authentication tokens are managed by Supabase Auth with industry-standard security practices.
We take reasonable measures to protect your data but cannot guarantee absolute security. If you become aware of any security issue please contact us immediately at privacy@carpool1.com.
Your name, neighborhood, rating, and trip count are visible to any logged-in user on your profile. Routes you post are visible to all users browsing the app. Ride requests you send are visible to the driver of that route. Your email and phone number are never displayed publicly.
We do not share your personal data with any third parties except as required to operate the service (Supabase for database hosting, Twilio for SMS verification). We do not share data with advertisers.
Direct messages between users are stored in our database and are visible only to the sender and recipient of that conversation. Carpool1 staff can access message content only as required to investigate safety reports or legal requests. We do not read messages for advertising purposes or to build behavioral profiles.
Carpool1 does not sell, rent, or trade your personal information to any third party for any purpose, including advertising. This applies to all users including California residents under CCPA.
You can request full deletion of your account and all associated data at any time. See our account deletion page for details, or email privacy@carpool1.com with the subject "Delete my account." We will process your request within 30 days. Deletion removes your profile, routes, requests, messages, and ratings from our systems. Some anonymized aggregate data (e.g. total trip counts) may be retained for operational purposes.
We use only essential cookies required for authentication (session tokens). We do not use advertising cookies, tracking pixels, or third-party analytics services. We do not use Google Analytics or any similar tracking tool.
For any privacy-related questions or requests contact us at privacy@carpool1.com. We will respond within 5 business days.