RouteDrift Privacy Policy

• Account: full legal name, email, password and phone number.
• Optional emergency contact: name, phone number and relationship.
• Profile: photo, bio, ride preferences (quiet or chatty, music), language and theme.
• Identity verification: your date of birth (you must be 18 or older), your street address, city, province and postal code, a photo of a government ID and a selfie holding it.
• Driver verification: driver’s licence (front and back), vehicle registration, insurance, vehicle photo, make, model, year, colour, seats and licence plate.
• Rides and bookings: routes, pickup, stop and drop-off points, times, prices, seats, ride policies, booking requests, cancellation and rejection reasons, and reviews.
• Parcels: a photo and description of the item, its size and declared value, and the recipient’s name, phone number and note. For the handover: the photos the driver takes at pickup, at delivery, at a later hand-over or when it can’t be delivered, the time of each step, the driver’s confirmation that the fare was paid, the reasons given if it is refused or not delivered, the agreed place and time of a later hand-over, the name and phone number of another person if the recipient names one, and the recipient’s “on my way” and “at the stop” check-ins and any damage report.
• Support: reports, messages and photos you send to the safety team.

• Location — drivers: when a driver taps “Start trip”, the app shares the driver’s live location (including in the background, with the “All the time” permission) with the confirmed passengers of that trip only. Sharing stops as soon as the driver ends or completes the trip, or if the ride is cancelled, and automatically 30 minutes after the estimated arrival at the latest. While sharing, RouteDrift also stores one position per minute as trip evidence (see “How long we keep information”). When the driver marks their arrival at the drop-off, marks a parcel as not delivered, or stops sharing the trip, the phone’s position at that moment is recorded so support can check it.
• Location — SOS: if you use Emergency SOS, the app reads your current location to prepare a text message to your emergency contact. The message is sent from your own phone; RouteDrift does not send it. The app also records that SOS was used on that trip (not your location), so the safety team treats any report about that trip as an emergency.
• Trip timeline: we record the events of each ride — when it was posted or changed, booking requests, acceptances, refusals and cancellations with their reason, and when the trip started, ended and was completed.
• Device: push notification token, operating system, app version and language.
• Crash and error reports (through Sentry), used only to find and fix problems in the app.
• Face ID / fingerprint: if you turn on App Lock, your phone checks your biometrics. RouteDrift never receives them.
• Parcel recipients: when the recipient taps “I’m at the stop” on the tracking page, the browser may share their position once (only if they allow it), so the driver and support can see they were there. It is kept with the parcel’s handover record.

RouteDrift charges only its service fee and passenger passes, through Stripe. Stripe collects and processes your card details; RouteDrift never sees or stores your full card number.

We keep the payment records needed to run the service: amounts, status (authorized, paid, released, refunded, waived), Stripe references, the related booking, pass changes, and refund requests with their reason and the staff members who handled them.

The driver fare is paid directly to the driver (cash or e-transfer). RouteDrift does not collect or record those payments.

• Create and secure your account, confirm your email and keep you signed in.
• Verify identities, drivers and vehicles before people can book, post rides or send parcels.
• Show rides, calculate fares and service fees, manage seats by route segment, and run bookings, cancellations and completion.
• Calculate route distances to suggest fair cost-sharing prices and enforce the maximum price per seat.
• Share live trip location with confirmed passengers and support the SOS tool.
• Send in-app and push notifications, in the language you chose, about requests, confirmations, seat conflicts, ride changes, payments, refunds, reminders and reviews.
• Investigate reports, prevent fraud and abuse, enforce the Terms and Community Agreement, and meet legal obligations.

• Anyone viewing a ride: the driver’s name, photo, rating, number of rides and verification badges, the route, times, price, seats and ride policies.
• Signed-in members can open your public profile: your name, photo, bio, month you joined, ride preferences (chatty or quiet, music), verification badges, rating and reviews, number of rides, and your achievement level and badges. It never shows your contact details, address, documents or payments.
• After a driver accepts your booking: the driver’s phone number and the vehicle’s licence plate become visible to you, and your contact details to the driver.
• When a trip is completed, contact details are locked again.
• A shared ride link (routedrift.com/routes/…) shows a public preview of the ride, without phone numbers, licence plates or passenger details.
• Parcel tracking link: the sender can share a private link with the recipient. Anyone with the link sees the parcel’s status and description, the drop-off stop and estimated time, the 4-digit handover code, the driver’s first name and car (make, model, colour), the place and time of a later hand-over if one is agreed and, only between pickup and delivery, the driver’s live position. It never shows phone numbers or the licence plate. The link stops working 24 hours after the parcel is handed over, 9 days after a failed delivery, or 7 days after a ride the parcel didn’t leave on.

We use trusted providers that process data only to run RouteDrift:

• Supabase — database, accounts, file storage and server functions. Hosted in the United States (Oregon).
• Stripe — service-fee payments and passenger-pass subscriptions.
• Google — Maps and Places for address suggestions and maps, Routes to calculate trip distances for price guidance, and Firebase Cloud Messaging for Android push notifications.
• Apple — push notifications on iPhone. Expo — delivery of push notifications and app updates to your device.
• Sentry — crash and error reporting.
• Resend — account confirmation, password-reset and other account emails.
• Firebase App Hosting (Google) — hosts this website.

We may preserve or disclose information when reasonably necessary to comply with the law or a valid legal request, to investigate a safety incident, fraud or abuse, or to protect our members or the public. We never sell personal information or share it for advertising.

• When you report a problem, we store your description, any photos you add (up to 3) and your messages with support. Only the RouteDrift safety team can see them.
• To investigate, the safety team can see the ride’s details: who booked or requested it, cancellations and their reasons, the trip timeline, service-fee payments and refunds, reviews, other reports about the same trip, and the past reports involving the people concerned. Trip positions can only be opened by a manager or the staff member handling the case, and every opening is logged.
• For a parcel in transit, a parcel not yet handed over after a failed delivery, or up to 24 hours after a parcel was handed over, RouteDrift support can view the driver’s live position and the route of the last 2 hours to help with a delivery problem, even without a report. Each viewing requires a written reason and is logged with the staff member’s name. For a lawful police request or a serious dispute, a manager can export the parcel’s full record (steps, photos, positions, the people’s names and contact details, the vehicle); every export is logged.
• If you are reported, support may ask for your account of what happened. You are told that a report was made about a trip or contact with you, but not who made it or what they wrote, and the person who reported you does not see your answer.
• A report can also be about a member’s profile (for example a fake profile), without a trip.

• Account and profile: while your account is open. When you delete it, the information listed on our Account deletion page is erased.
• Live location: only the latest position is shown, and only during the trip. Trip evidence (one position per minute) is deleted 72 hours after the trip, unless someone reports that trip; it is then kept until 12 months after the case was last updated, and only the safety team can see it.
• Trip timeline: kept with the ride’s history, like trips and bookings.
• Notifications: most are shown for 7 days; achievement and support notifications for 30 days. Then they are removed.
• Achievements: calculated from your completed trips, reviews and account, and kept while your account is open.
• Trips, bookings and reviews: kept so trip history stays accurate for other members; your name is removed if you delete your account.
• Parcel handover photos and the positions recorded for a parcel (driver’s arrival, “couldn’t deliver”, recipient’s check-in): deleted 90 days after the parcel’s case is closed, unless a report about that trip is still open. The steps and times stay with the booking history. A failed delivery’s trip positions are kept until the parcel is handed over or its case is closed.
• Payment records: as long as tax and accounting law requires (generally six years in Canada).
• Safety and support reports: as long as needed for investigations, disputes or legal claims.

• Access your information or get a copy in a commonly used format.
• Correct inaccurate information — most of it directly in the app.
• Delete your account in the app (Profile → Delete account) or by email — see the Account deletion page.
• Withdraw consent, for example by turning off location or notifications in your phone settings. Some features (live trip sharing, SOS, alerts) then stop working.
• Ask questions or make a complaint at support@routedrift.com.

RouteDrift has designated a Privacy Officer who is responsible for protecting personal information and for handling access, correction, deletion, and consent-withdrawal requests, as required by Canada’s PIPEDA and Québec’s Act respecting the protection of personal information in the private sector (Law 25).

Contact the Privacy Officer at support@routedrift.com with the subject line “Privacy request”. We answer written requests within 30 days and may ask you to confirm your identity first.

If you are not satisfied with our answer, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Québec, the Commission d’accès à l’information (cai.gouv.qc.ca).

Your data is encrypted in transit. Database access rules let each member see only their own private information; identity documents and private photos are stored in private storage and opened through short-lived links; account deletion requires your password; and staff access is limited, protected by two-factor authentication and logged. Refunds and other money decisions by staff require a manager and are recorded. No system is perfectly secure, so please use a strong password and turn on App Lock.

The public RouteDrift website does not use advertising or analytics cookies. It only uses storage that is strictly necessary for the site to work, such as remembering your language choice.

RouteDrift is only for people 18 and older.

We may update this policy when the app or the law changes. We will show the new date at the top and, for important changes, notify you in the app. Questions: support@routedrift.com.