Privacy Policy

• ·Phone number: carpool features use an E.164 phone number for contact and record identification, preserving the phone-based flow without registration. Personal kitchen cloud backups are separated by authenticated account identity; entering a phone number does not grant access.
• ·Personal kitchen cloud backup (optional): kitchen items are stored in your device's browser by default, without sign-in. When you sign in with an email or Google account and explicitly upload a backup, we store your current item snapshot under your authenticated account identity, including names, dates, quantities, barcodes, statuses and optional inventory images. It may also include consumed or discarded records. Backups are not automatically shared with others; signing in does not upload your items, and restoration is your choice. This uploads and restores a current snapshot; it is not real-time synchronization and does not guarantee version history. Clearing browser data deletes local records. Editing or deleting local items does not automatically update an uploaded backup.
• ·Name: the name or nickname you enter, shown to the other party.
• ·Trip details: a driver's origin, destination, date/time, seats, suggested cost-share, car model, spoken language, and notes; a rider's bookings and ride requests.
• ·Email (optional): only if you provide it, used for trip notifications.
• ·Private Bookkeeping & Receipts (optional): saved transactions, business profiles and receipt images are isolated by user identity. In AI shopping tasks, text and images you submit are sent to the AI service in use; that provider's policies govern its retention and use of data. This task does not store the original image or conversation in our database. Confirmed transactions go to your private cloud ledger; selected foods go to the fridge space shown in the interface. Household members can see those foods, but this does not grant access to your private transactions. This shared inventory used by shopping tasks is separate from personal kitchen cloud backups; uploading a personal backup does not automatically add items to that shared inventory.
• ·AI Interactions & Recharge (optional): core carpool matching is 100% payment-free. If you choose to recharge AI assistant credits, payments are securely processed by Stripe (we never see or store your payment card details), and conversations are routed to your selected LLM provider (DeepSeek, OpenAI, Anthropic, Google).
• ·Birth dates & life notes (optional): only what you actively save in the Life in Weeks view — your own birth date; the relation, name (optional) and birth date of family members you add; and your own "life milestones" (a date plus a short title, e.g. "Married, 2015"). Used solely to sync that visualization across your devices; each entry can be deleted anytime.
• ·Life in Weeks photos (device-only): photos you add to the grid are stored only in your current device's browser (IndexedDB). They are never uploaded to our servers and we cannot access them. They won't appear on another device, and they vanish if you clear your browser data or delete them on the page.
• ·Optional account sign-in (email / Google / phone codes when enabled): account credentials are handled by our identity provider, Supabase, and our business data is stored under the relevant identity identifiers. Phone-based carpool access without registration and local kitchen use remain available. Personal kitchen cloud backups require an authenticated account, without requiring a linked phone number. Signing in alone does not upload local items.
• ·Ratings: the stars you give the other party, and the reason you enter when below 5 stars.
• ·Location (optional): only if you tap “use my current location,” we do a one-time city-level lookup from your device coordinates (via the third party BigDataCloud), keeping only the city name — coordinates are not stored.
• ·Essential cookies: for driver phone-number sign-in and to remember your phone number on your device (both signed, httpOnly cookies). Not used for ads or cross-site tracking.
• ·Feedback (optional): what you write in the feedback form, and any contact you choose to leave (phone or email), used only to reply to you.
• ·We do not collect: carpool payment/bank information, ID numbers, in carpool matching we do not collect photos or avatars, precise location tracks, or race/ethnicity info.

• ·Phone numbers are used to connect drivers and riders. Public trip listings never contain any phone number.
• ·After a rider books, their phone number is shown to that trip's driver so they can make contact.
• ·A driver's phone number is shown to a rider only after the driver confirms that booking.
• ·When you post a ride request, your phone number is shown to signed-in drivers (you are told this before posting).
• ·A driver's average star rating is shown publicly to help riders choose; written reasons are visible to the platform only and are not shown publicly.
• ·Private bookkeeping and receipt data is strictly visible and accessible only to you when logged in.
• ·We do not sell your personal information, nor use it for purposes unrelated to the above.
• ·Some outbound links on the "Picks" page are affiliate links (e.g. Amazon): if you click and buy, the author may earn a small commission at no extra cost to you. Once you click, the merchant handles things under its own policy; we collect no extra information about you from this and place no ad-tracking cookies.

• ·Riders can look up and cancel bookings or ride requests anytime under “My Bookings” using their phone number.
• ·Drivers can manage or cancel their own posted trips from the console.
• ·Cancellation is a soft delete; expired trips are removed from public listings.
• ·Bookkeeping records and receipts can be deleted individually or wiped anytime.
• ·To permanently delete all data tied to your phone number or account, or to access what we hold about you, contact us at the email below.

To run the platform we use: Vercel (hosting), Supabase (database & authentication), Stripe (optional AI credit processing), Resend (email notifications when enabled), LLM API providers (DeepSeek/OpenAI/Anthropic/Google, only when using AI features), and BigDataCloud — a one-time reverse lookup of device coordinates to a city name — when you choose “use my current location.” These services process only the data necessary to provide the service, in line with this policy.

For North American users: under applicable laws (such as Canada's PIPEDA and provincial privacy laws, and California's CCPA/CPRA), you have the right to access, correct, and delete the personal information we hold about you, and to object to its use beyond the purposes above. Exercising these rights will not affect your normal use of the platform.

For privacy inquiries or deletion requests, contact us at the email below. We may update this policy from time to time; significant changes will update the effective date at the top of the page.