Privacy Policy

How we collect, use, and protect your personal information

Last updated: December 2024

1. Privacy Policy Overview

At Herdy, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our carpooling platform, mobile application, and website (collectively, the "Service").

By using Herdy, you consent to the data practices described in this Privacy Policy. If you do not agree with our practices, please do not use our Service.

Key Point: We are committed to protecting your privacy while providing a safe and efficient carpooling experience.

2. Information We Collect

Personal Information You Provide

  • Account Information: Name, email address, phone number, profile photo
  • Identity Verification: Government-issued ID, driver's license information
  • Vehicle Information: Make, model, year, license plate
  • Payment Information: Credit card details, billing address (processed by Stripe)
  • Profile Details: Bio, preferences, photos

Information Collected Automatically

  • Location Data: GPS coordinates, origin/esdtination locations, route information
  • Device Information: Device type, operating system, unique device identifiers
  • Usage Data: App interactions, ride history, search queries
  • Log Data: IP address, access times, pages viewed, app crashes
  • Communication Data: Messages between users (for safety and support purposes)

Information from Third Parties

  • Social Media: Profile information if you connect social accounts
  • Background Checks: Safety verification from third-party providers
  • Payment Processors: Transaction data from Stripe and other payment partners
  • Public Records: Driver License/Passport for verification purposes

3. How We Use Your Information

We use the information we collect for the following purposes:

Service Operations

  • Facilitate ride matching and bookings
  • Process payments and transactions
  • Provide customer support
  • Send service-related notifications

Safety & Security

  • Verify user identity and eligibility
  • Conduct background checks
  • Monitor for fraudulent activity
  • Investigate safety incidents

Service Improvement

  • Analyze usage patterns
  • Improve app functionality
  • Develop new features
  • Optimize matching algorithms

Legal Compliance

  • Comply with legal obligations
  • Respond to legal requests
  • Protect our rights and property
  • Ensure platform safety

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

With Other Users

To facilitate carpooling, we share limited information with other users:

  • First name and profile photo
  • User ratings and reviews
  • Vehicle information (for drivers)
  • Origin and destination locations for confirmed rides

With Service Providers

We work with trusted third-party providers:

  • Payment Processing: Stripe for secure payment transactions
  • Background Checks: Authorized screening providers
  • Cloud Services: Supabase, Google Cloud for data storage and processing
  • Analytics: Google Analytics, Mixpanel for usage insights
  • Customer Support: Zendesk, Intercom for support services

Legal Requirements

We may disclose information when required by law, court order, or to protect our rights, property, or the safety of our users.

5. Data Security

We implement comprehensive security measures to protect your personal information:

Security First: We use industry-standard security measures including encryption, secure servers, and regular security audits.

  • Encryption: Data encrypted in transit and at rest using AES-256
  • Access Controls: Role-based access with multi-factor authentication
  • Regular Audits: Annual security assessments and penetration testing
  • Secure Infrastructure: SOC 2 compliant data centers and cloud services
  • Employee Training: Regular privacy and security training for all staff
  • Incident Response: 24/7 monitoring and rapid incident response procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

6. Location Data

Location data is essential for our carpooling service. Here's how we handle it:

Location Permission: You can control location sharing through your device settings at any time.

How We Use Location Data

  • Match you with nearby drivers and passengers
  • Calculate accurate ride distances and costs
  • Improve route optimization and ETAs

Location Data Controls

  • You can disable location services in your device settings
  • Some features may be limited without location access
  • We do not track your location when the app is not in use
  • Your rides details are only shared between passenger/driver once ride has been confirmed by both parties.

7. Third-Party Services

Our Service integrates with various third-party services to enhance functionality:

Payment Services

We use Stripe for payment processing. Stripe has its own privacy policy governing the collection and use of your payment information.

View Stripe Privacy Policy

Analytics Services

We use Google Analytics and other analytics services to understand app usage and improve our service.

View Google Privacy Policy

Social Media Integration

Herdy does not currently offer social media integration features. However, we may add this functionality in the future. If we do, those platforms' privacy policies will apply to any information they collect.

Advertising Partners

We do not currently display third-party advertisements, but may do so in the future with appropriate privacy controls.

8. Your Privacy Rights

You have several rights regarding your personal information. Depending on your location, these may include:

Access Rights

  • Request a copy of your personal data
  • View your ride history and account information
  • Download your data in portable format

Correction Rights

  • Update incorrect or outdated information
  • Correct profile and account details
  • Modify privacy preferences

Deletion Rights

  • Request deletion of your account
  • Remove specific data categories
  • Note: Some data may be retained for legal purposes

Restriction Rights

  • Limit how we process your data
  • Object to certain data uses
  • Withdraw consent for optional features

How to Exercise Your Rights

To exercise any of these rights, contact us at privacy@herdy.com. We will respond within 30 days.

9. Data Retention

We retain your personal information for different periods depending on the type of data and legal requirements:

Data Type Retention Period Reason
Account Information Until account deletion Service provision
Ride History 7 years Legal, tax, insurance requirements
Payment Data 7 years Financial regulations
Location Data 2 years Safety, support, service improvement
Communication Records 3 years Safety investigations, support

10. Children's Privacy

Age Restriction: Our Service is not intended for children under 18 years of age.

  • We do not knowingly collect personal information from children under 18
  • If we become aware of such collection, we will delete the information immediately
  • Parents or guardians can contact us if they believe their child has provided personal information
  • Account holders must be at least 18 years old to use our Service

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own:

  • We primarily store data in secure facilities within your country/region when possible
  • Some service providers may process data internationally
  • All transfers comply with applicable privacy laws and regulations
  • We use appropriate safeguards like Standard Contractual Clauses

By using our Service, you consent to the transfer of your information to these countries, which may have different data protection laws than your country.

12. Changes to Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws:

  • Material changes will be notified via email or app notification
  • Minor updates may be posted without additional notice
  • Updated policy will include the "Last Updated" date
  • Continued use after changes constitutes acceptance of the new policy
  • You can always find the current version on our website

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Privacy & Data Protection Inquiries

privacy@herdy.com

General Support

support@herdy.com

Response Time

Within 30 days