GoGoKar Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

When you register and use GoGoKar, we collect the following personal information:

• Account Information: Name, email address, phone number, date of birth, and password
• Profile Information: Profile photo, bio, preferences, and user type (driver or passenger)
• Driver-Specific Information: Vehicle details (make, model, color, year), license plate number, driver's license information
• Payment Information: Payment methods processed securely through Stripe (we do not store your complete credit card information)
• Identity Verification: Documents and information required to verify your identity for safety purposes
• Communication Data: Messages sent through our in-app chat system, support inquiries, and correspondence with other users

1.2 Photos and Camera Access

With your permission, we may access:

• Camera: To take photos for your profile picture, vehicle photos (for drivers), or identity verification documents
• Photo Library/Gallery: To select existing photos from your device for profile pictures or vehicle photos
• Photo Storage: Profile photos and vehicle images are stored securely in our cloud storage and may be visible to other users as part of your public profile

You can control camera and photo library permissions in your device settings. These permissions are optional but required if you wish to add photos to your profile.

1.3 Information Collected Automatically

When you use GoGoKar, we automatically collect:

• Location Data: Real-time GPS location when the app is open or in use to facilitate ride matching, pickup/dropoff services, and route tracking. Location access is required for core functionality.
• Device Information: Device type, operating system, unique device identifiers, mobile network information, and device settings
• Usage Data: App features used, pages viewed, time spent on pages, ride history, search queries, and interaction with other users
• Log Data: IP address, browser type, access times, pages visited, and crash reports
• Push Notification Tokens: Device tokens (Expo Push Tokens) to send you important notifications about rides, messages, and booking updates

1.4 Information from Third Parties

• Payment Processing: Stripe processes payments and may share transaction data with us
• Location Services: We use Google Places API to provide location search and autocomplete functionality
• Authentication Services: If you sign up with Google or Facebook (future feature), we receive basic profile information from these services
• Maps and Navigation: We use mapping services to display routes and locations
• Notification Services: Expo push notification service to deliver notifications to your device

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Core Services

• Create and manage your account
• Match drivers with passengers for ridesharing
• Facilitate communication between drivers and passengers
• Process payments and booking fees
• Track and complete rides
• Display routes and locations on maps
• Send notifications about ride requests, bookings, and messages

2.2 Safety and Security

• Verify user identity and prevent fraud
• Enforce our Terms of Service and community guidelines
• Investigate and resolve disputes
• Detect, prevent, and address technical issues
• Ensure platform safety and compliance with laws

2.3 Service Improvement

• Analyze usage patterns to improve our services
• Develop new features and functionality
• Conduct research and analytics
• Personalize your experience
• Send service announcements and updates

2.4 Communication

• Email Notifications: Send you booking confirmations, ride updates, account-related emails, service announcements, and newsletters
• Push Notifications: Send real-time notifications about new ride requests, booking confirmations, ride status changes, incoming messages, payment confirmations, and important updates
• In-App Messages: Facilitate communication between drivers and passengers through our secure chat system
• Customer Support: Respond to your inquiries and support requests
• Administrative Communications: Provide policy updates and important service information

2.5 Legal and Compliance

• Comply with legal obligations and law enforcement requests
• Protect our rights and property
• Respond to verified requests relating to criminal investigations
• Enforce our agreements and terms

3. Information Sharing and Disclosure

3.1 With Other Users

• Drivers and Passengers: When you book or offer a ride, we share relevant information (name, profile photo, pickup/dropoff locations, contact information through in-app chat) with the other party
• Ratings and Reviews: If you rate other users, your ratings may be visible to those users and aggregated in their public profiles

3.2 With Service Providers

We share information with trusted third-party service providers who assist us in operating our services:

• Stripe: Payment processing (governed by Stripe's privacy policy)
• Supabase: Database and backend services hosting
• Expo: Mobile app development platform and push notification services
• Google Places API: Location search and autocomplete services
• Cloud Storage Providers: Secure storage of photos and documents

3.3 For Legal Reasons

We may disclose your information to courts, law enforcement, governmental authorities, or authorized third parties if required by law or if such disclosure is reasonably necessary to:

• Comply with legal processes and court orders
• Respond to verified requests relating to criminal investigations or alleged illegal activity
• Enforce and administer our Terms of Service or other agreements
• Protect the rights, property, or personal safety of GoGoKar, our employees, users, or the public
• Prevent fraud, security risks, or technical issues

We will attempt to notify users about legal requests unless: (i) providing notice is prohibited by law or court order, or (ii) we believe notification would be futile, create risk of injury or harm, or increase risk of fraud.

3.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the successor entity.

3.5 With Your Consent

We may share information for other purposes with your explicit consent.

4. Device Permissions

4.1 Location Data

How We Use Location Data:

• Match you with nearby drivers or passengers
• Provide accurate pickup and dropoff services
• Display your location on maps
• Calculate distances and estimated arrival times
• Track rides in progress for safety
• Improve our services and route optimization

Location Permissions:

• iOS: We request "When In Use" location permission to show your location on the map and connect you with nearby drivers, and "Always" permission to track your ride and provide accurate pickup/dropoff services
• Android: We request ACCESS_FINE_LOCATION and ACCESS_COARSE_LOCATION permissions
• Control: You can control location permissions in your device settings, but disabling may limit core app functionality

4.2 Camera and Photo Library

How We Use Camera/Photos:

• Take or select profile photos
• Upload vehicle photos (for drivers)
• Capture identity verification documents
• All photos are stored securely and only used for stated purposes

Camera Permissions:

• iOS: We request camera access and photo library access when you choose to add or update photos
• Android: We request camera and storage permissions when needed
• Control: These permissions are optional and only requested when you attempt to add photos. You can deny or revoke these permissions in device settings

4.3 Push Notifications

Types of Notifications We Send:

• Ride Requests: Drivers receive notifications when passengers request rides
• Booking Confirmations: Confirmation when a ride is booked or a request is accepted/declined
• Ride Updates: Status changes, driver arrival, ride start/completion
• Messages: New messages from drivers or passengers
• Payment Notifications: Payment confirmations and receipts
• Service Announcements: Important app updates and safety alerts

Notification Permissions:

• iOS: We request notification permissions through the system prompt
• Android: We create notification channels for different types of notifications (Ride Requests, Messages, Default)
• Expo Push Notifications: We use Expo's push notification service to deliver notifications
• Control: You can disable push notifications in your device settings or within the app's notification preferences. Note that disabling notifications may cause you to miss important ride updates

Notification Tokens:

• We collect and store Expo Push Tokens (device-specific identifiers) to send notifications to your device
• Tokens are automatically removed when you log out or delete your account
• Tokens do not contain personal information but are linked to your user account

5. Cookies and Tracking Technologies

5.1 Cookies

We use cookies and similar tracking technologies to:

• Keep you logged in
• Remember your preferences
• Analyze usage patterns and trends
• Track user movement through the app
• Gather demographic information

5.2 Managing Cookies

You can control cookies through your device settings. Rejecting cookies may limit some features but you can still use core services.

6. Data Security

6.1 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication using Supabase Auth
• Payment processing through PCI-compliant Stripe
• Secure cloud storage with access controls
• Regular security audits and monitoring

6.2 Your Responsibility

You are responsible for maintaining the confidentiality of your account credentials. Please use a strong password and do not share your login information.

6.3 No Guarantee

While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

7.1 Active Accounts

We retain your personal information for as long as your account is active or as needed to provide services.

7.2 Deleted Accounts

When you delete your account:

• Your account is flagged as inactive
• Personal information is deleted within a reasonable time period
• Some information may be retained for legal, safety, or business purposes (e.g., transaction records, fraud prevention)
• You may reactivate your account during the retention period

7.3 Legal Requirements

We may retain information longer if required by law or to protect our legal rights.

8. Your Rights and Choices

8.1 Account Information

• Access: View your account information in Profile Settings
• Update: Edit your profile, preferences, and settings at any time
• Delete: Close your account through Account Settings > Close account or by contacting us

8.2 Communications

Email Communications:

• Transactional Emails: Booking confirmations, receipts, ride updates, and account security notifications (cannot be disabled as they are essential to the service)
• Service Announcements: Important updates about the app, policy changes, and safety information (cannot be disabled)
• Marketing Emails: Newsletters, promotions, and tips (you can opt out via unsubscribe links in emails)
• Opt-Out: Click the "unsubscribe" link in any promotional email to stop receiving marketing communications

Push Notifications:

• Control in Device Settings: Disable all push notifications through your iOS or Android device settings
• Control in App: Manage notification preferences within the app's settings (if available)
• Types You Can Control: You may be able to selectively enable/disable certain notification types while keeping others active
• Impact: Disabling notifications may cause you to miss time-sensitive ride requests, booking updates, and messages

8.3 Location Data

• Disable: Turn off location permissions in device settings (may limit functionality)
• When In Use: Choose to only share location when using the app

8.4 Additional Rights

Depending on your jurisdiction, you may have additional rights including:

• Right to access your personal data
• Right to correct inaccurate data
• Right to delete your data (right to be forgotten)
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent

To exercise these rights, please contact us at support@gogokar.ca.

9. Children's Privacy

GoGoKar is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using GoGoKar, you consent to the transfer of your information to Canada and other countries where we operate.

11. Updates to This Privacy Policy

11.1 Notification of Changes

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top
• Email a link to the updated policy to all registered users
• Provide notice through the app

11.2 Continued Use

Your continued use of GoGoKar after changes become effective constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

GoGoKar Rideshare Inc.
Email: support@gogokar.ca
Phone: 437-778-2110
Address: 310, Bagot St., Kingston, ON K7K 3B5, Canada

13. Consent

By registering for and using GoGoKar, you consent to:

• The collection, use, and disclosure of your information as described in this Privacy Policy
• The use of your data on any existing or future platforms operated by GoGoKar
• The transfer of your data internationally for processing and storage
• Receiving service-related communications

You can withdraw consent at any time by closing your account, though this will prevent you from using our services.