Privacy Policy — Boomeride

Introduction

At Boomeride, your privacy matters. We built this carpooling platform to connect people heading the same way, not to sell your data.

This Privacy Policy explains what information we collect, how we use it to run Boomeride, and what control you have over your personal information.

By using Boomeride, you agree to this Privacy Policy. We've done our best to keep it simple and transparent because no one likes legal jargon.

1. Why We Collect Information

We collect information to make Boomeride work properly — safe, reliable, and customized for your needs. This includes:

Creating and managing your account securely
Matching riders and drivers efficiently
Enabling trip coordination and communication
Processing payments and refunds
Verifying phone numbers and email addresses and preventing fraud
Measuring performance, fixing issues, and improving reliability
Sending real-time notifications, updates, and trip alerts
Showing in-app advertising
Complying with legal requirements

We do not sell, rent, or trade your personal data under any circumstances.

2. Information We Collect

We collect information in three ways: directly from you, automatically from your device and usage, and from trusted service providers who help us operate safely and effectively.

A. Information You Provide

When you use Boomeride, you may provide:

Account details: name, email address, and phone number (a phone number verified by SMS code is required for every account). If you sign in with Google or Apple, we receive basic account information from that provider, such as your name and email address.
Profile information: profile photo, bio, and vehicle information (for drivers).
Trip details: origin, destination, date, price, in-app chat messages, and the ratings and comments you give or receive.
Driver documents (drivers only): vehicle details and a vehicle photo, a licence-plate photo, your driver's licence number and photos of the front and back of your licence, a vehicle registration photo, an insurance photo, and your confirmation of the insurance and cost-sharing declaration. We do not currently review or verify these documents, and we do not collect government ID or selfies from riders or drivers.
Payment data: if you pay by card, your payment is processed securely by Stripe; Boomeride does not store your full payment details. You may instead pay the driver directly in cash.
Waitlist sign-ups (website): your email address, whether you want to ride, drive, or both, and your city or area if you give them, together with a record of your consent to receive launch emails (the wording you agreed to and when), your IP address, and your browser type.
Feedback and support messages: information you share when contacting support, including messages sent through the website contact form (your name, email address, subject, and message, with your IP address and browser type).

B. Information We Collect Automatically

We automatically collect technical and usage data to help Boomeride run smoothly, keep your account secure, and enhance user experience.

Device and System Information

Device model and hardware specifications
Operating system and version (iOS, Android, etc.)
App version and build number
Language and time zone settings
Device manufacturer, brand, and regional configuration

Network and Connectivity Information

IP address and approximate geographic location (city-level)
Mobile carrier or internet service provider (ISP)
Network signal strength, connection type (Wi-Fi, 4G, 5G, etc.)
Bandwidth and latency used to improve performance
VPN or proxy usage for fraud detection

Location Data

GPS location, if you grant permission, to calculate routes, match rides, and ensure safety
Background location for drivers during a trip, so that the rider can see the driver's live location while the driver is on the way to pickup
If you disable location access, some features (like automatic matching) may not work properly

Usage Data

Features you use, screens visited, and interaction time
Search history and preferences
Trip activity, cancellations, and ride statistics
Device identifiers (such as advertising ID or unique app instance ID)
Crash reports, diagnostic data, and error logs

Cookies and Local Storage

In the mobile app, cookies and local data files are used to remember preferences, session states, and login status. Our website sets no cookies; see our Cookie Policy.

You can clear or disable cookies anytime in your device or browser settings, though it may affect functionality.

C. Information from Trusted Partners

We may receive limited information from:

Stripe, our card payment processor, for transaction and refund status.
Google and Apple, if you choose to sign in with them.
Analytics and crash-reporting tools (Firebase Analytics, Firebase Crashlytics, and Microsoft Clarity) for usage insights.
Cloud and infrastructure providers that host and secure our servers.

All partners are bound by strict confidentiality and data protection agreements.

3. How We Use Information

We use your information responsibly to:

Provide and personalize the carpooling experience
Facilitate safe communication between drivers and passengers
Verify your phone number and email address and prevent fraud or misuse
Calculate routes and show relevant ride options near your location
Maintain secure payments and account access
Send service updates, booking confirmations, and trip alerts by push notification, SMS, and email
Diagnose app errors, analyze performance, and improve features
Show in-app advertising through Google AdMob
Enforce community standards and terms of service
Comply with legal obligations and government requests

4. How We Share Information

We only share your data when it's required for operation, safety, or legal compliance.

A. With Other Members

When you confirm a trip:

Your first name, profile photo, and phone number are shared only with the driver or passengers for coordination.
Your pickup and drop-off points are shared only for confirmed trips.
If you are the driver, your live location is shared with the rider while you are on the way to pickup.
Messages you send in in-app chat, including before a booking is confirmed, are visible to the member you are chatting with.
Ratings and comments you give are visible to other members.

B. With Service Providers

We work with carefully selected providers who help us operate securely:

SMS: Twilio, for phone verification codes and text notifications
Email: SendGrid, for email verification codes, email notifications, and notifying our team about website waitlist sign-ups and contact messages
Card payments: Stripe, for card payments and refunds
Maps and location: Mapbox, for maps, place search, and directions
Push notifications, analytics, and crash reporting: Google Firebase (including Firebase Analytics and Crashlytics)
Analytics: Microsoft Clarity
Photo and document storage: Amazon Web Services (Amazon S3)
In-app advertising: Google AdMob, which uses your device's advertising identifier
Hosting and cloud infrastructure for our servers

They may process your information only for tasks we assign and must comply with strict confidentiality obligations.

C. Legal and Safety Requirements

We may disclose your information to law enforcement or legal authorities if required to:

Comply with lawful requests, subpoenas, or court orders
Prevent fraud, security threats, or illegal activity
Protect the rights, property, or safety of Boomeride users or the public

We will attempt to notify you when legally possible.

5. Security

We use modern security measures, including:

Data encryption (in transit and at rest)
Secure authentication and session controls
Firewalls and monitoring systems
Regular audits and system updates

While no system is completely immune, we continuously improve our security to protect your information. If you suspect unauthorized access, contact [email protected] immediately.

6. App Permissions

Android

Boomeride may request permissions for:

Location – to match trips and provide navigation, including background location for drivers during a trip
Phone number – to connect riders and drivers on a confirmed booking
Storage – for caching maps and improving performance
Notifications – to send ride alerts and updates
Camera and gallery – for profile pictures and, for drivers, vehicle and document photos

iOS

Boomeride may request:

Location (Always or While Using the App) – for trip matching and route accuracy
Camera – for profile pictures and, for drivers, vehicle and document photos
Push Notifications – for booking and trip alerts
Phone number – to connect riders and drivers on a confirmed booking

All permissions are optional and can be modified anytime in your device settings.

7. Account Management and Data Rights

You control your personal data in Boomeride.

Update your info: Edit your name, email, phone, and profile photo anytime in settings.
Delete your account: Go to Profile → Settings → Delete Account to permanently remove your data within 30 days. Account deletion is not available while you have upcoming rides or bookings.
Request your data: Email [email protected] for a copy of your data or activity logs.
Manage cookies and permissions: Adjust directly through your browser or device preferences.

8. Children's Privacy

Boomeride is intended only for users 18 years and older and is not intended for anyone under 18. We do not knowingly collect or store personal information from anyone under 18. If we learn that we've collected data from a minor, we'll delete it promptly.

9. Your Privacy Rights

Depending on where you live, you may have rights to:

Access the data we hold about you
Request corrections or updates
Delete your information ("right to be forgotten")
Restrict certain processing or data sharing
Withdraw consent for marketing emails

To exercise these rights, contact [email protected]. We'll verify your identity before fulfilling requests to keep your data safe.

10. Data Retention

We retain your data only as long as your account remains active or as required by law. After you delete your account, all personal data is permanently erased within 30 days unless retention is required for:

Fraud prevention or dispute resolution
Legal obligations
Financial recordkeeping (limited retention for payment data)

Waitlist sign-ups are kept until Boomeride launches and we have emailed you about it, or until you unsubscribe. If you unsubscribe, we keep a record of your email address and the date so we do not email you again. Messages sent through the website contact form are kept for as long as we need them to respond to you and keep a record of the conversation.

11. Cookies and Tracking Technologies

This section describes the Boomeride mobile app. Our website sets no cookies and loads no tracking scripts; see our Cookie Policy.

Types of Cookies

Essential cookies: Required for platform operation
Analytics cookies: Measure usage and app performance
Preference cookies: Remember language and settings
Advertising identifiers: The app uses your device's advertising identifier to show ads through Google AdMob. You can reset or limit ad tracking in your device settings.

Cookie Management

You can control cookie usage by:

Managing permissions in app or browser settings
Opting out of non-essential cookies
Clearing cookies anytime without losing core functionality

12. Changes to This Policy

We may update this Privacy Policy periodically. If we make material changes, we'll update the "Last Updated" date and may notify you via email or in-app notification.

The latest version will always be available on https://boomeride.com/privacy.

13. Compliance

This Privacy Policy complies with:

PIPEDA (Personal Information Protection and Electronic Documents Act)
Applicable Provincial Privacy Laws (e.g., Quebec, Alberta, British Columbia)
Canadian Anti-Spam Legislation (CASL)
Google Play and Apple App Store data transparency standards

14. Contact Us

If you have questions, privacy requests, or security concerns, contact us:

📧 [email protected]
🌐 https://boomeride.com/privacy
🏢 BBARIVE Inc., 11 Queensbrook Crescent, Cambridge, Ontario, Canada