Privacy Policy

1. Introduction

Riley ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service"). By using Riley, you consent to the data practices described in this policy.

Riley is a carpooling platform that connects drivers with passengers traveling to similar destinations. Given the nature of our Service, certain personal information must be shared between users to facilitate safe and efficient ride-sharing.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, phone number, profile photo, and password when you create an account.
• Profile Information: Gender, date of birth, bio, and preferences you choose to add to your profile.
• Identity Verification: Government-issued ID, driver's license, and vehicle registration documents for drivers.
• Payment Information: Bank account details, mobile money information, or other payment method details for processing ride payments.
• Trip Information: Pickup and drop-off locations, trip dates and times, number of available seats, and price per kilometer.
• Communications: Messages exchanged with other users through our in-app messaging system, and communications with our support team.
• Reviews and Ratings: Feedback you provide about other users after completing trips.

2.2 Information Collected Automatically

• Location Data: Real-time GPS location when you use the app (with your permission), including pickup points, drop-off points, and route information during active trips.
• Device Information: Device type, operating system, unique device identifiers, IP address, and mobile network information.
• Usage Data: App features used, pages visited, search queries, trip history, and interaction patterns.
• Log Data: Access times, error logs, and referring URLs.
• Cookies and Similar Technologies: Information collected through cookies, pixel tags, and similar technologies on our website.

2.3 Information from Third Parties

• Social Media: If you sign up using a social media account, we may receive your name, email, and profile picture from that platform.
• Background Check Services: For verified drivers, we may receive identity verification results from third-party verification services.
• Payment Processors: Transaction confirmations and fraud prevention data from our payment partners.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing and Improving Our Service

• Creating and managing your account
• Matching drivers with passengers based on trip routes and preferences
• Facilitating communication between users
• Processing payments and cost-sharing between trip participants
• Providing customer support and responding to inquiries
• Improving our algorithms, features, and user experience
• Developing new products and services

3.2 Safety and Security

• Verifying user identities and preventing fraud
• Monitoring trips for safety purposes
• Investigating and preventing suspicious or illegal activities
• Enforcing our Terms of Service and community guidelines
• Providing emergency assistance when necessary

3.3 Communications

• Sending trip confirmations, reminders, and updates
• Notifying you about changes to our Service or policies
• Sending promotional communications (with your consent)
• Responding to your comments and questions

3.4 Legal and Compliance

• Complying with applicable laws and regulations
• Responding to legal requests and preventing harm
• Protecting our rights and property

4. Information Sharing and Disclosure

4.1 With Other Users

To facilitate carpooling, we share certain information between drivers and passengers:

• Before Booking: Passengers can see driver's first name, profile photo, ratings, reviews, and trip details. Drivers can see passenger's first name, profile photo, and ratings.
• After Booking: Both parties can see each other's full name and may communicate through our messaging system.
• During Trip: Real-time location may be shared between trip participants for coordination purposes.
• After Trip: Users may leave ratings and reviews that are visible to other users.

4.2 With Service Providers

We share information with third-party service providers who perform services on our behalf:

• Payment processors for transaction processing
• Cloud hosting and data storage providers
• Analytics providers to understand Service usage
• Identity verification services for driver verification
• Customer support tools and services
• Map and navigation service providers

4.3 For Legal Reasons

We may disclose your information:

• To comply with legal obligations or valid legal processes
• To protect the safety of any person or the public
• To detect, prevent, or address fraud, security, or technical issues
• To protect our rights, property, or safety, or that of our users
• In connection with any merger, acquisition, or sale of assets

4.4 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Location Data

Location data is essential to providing our carpooling Service. Here's how we handle it:

• Trip Posting: When posting a trip, your selected pickup and drop-off locations are stored and displayed to potential passengers.
• Trip Discovery: We use location data to show you relevant trips near your location.
• Active Trips: During an active trip, we may collect real-time location data to provide navigation assistance and safety features.
• Background Location: We do not collect location data when the app is closed, unless you have explicitly enabled this for trip reminders.

You can control location permissions through your device settings at any time. However, disabling location services may limit your ability to use certain features of the Service.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our Service to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements
• Maintain business records for legitimate purposes

Account Data: Retained for the duration of your account plus 3 years after deletion for legal compliance.

Trip History: Retained for 5 years for safety, dispute resolution, and regulatory compliance.

Payment Records: Retained for 7 years as required by financial regulations.

Location Data: Real-time location data is deleted within 90 days after a trip is completed, unless required for safety investigations.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request a portable copy of your data in a machine-readable format.
• Objection: Object to certain processing of your personal information.
• Restriction: Request restriction of processing in certain circumstances.
• Withdraw Consent: Withdraw consent for processing based on consent at any time.

To exercise these rights, please contact us at riley@swenginegroup.com or through the Settings section in the app.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Regular security assessments and penetration testing
• Access controls limiting employee access to personal data
• Incident response procedures for data breaches
• Regular backup and disaster recovery processes

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your information may be transferred to and processed in countries other than Mauritius. These countries may have different data protection laws. When we transfer your information internationally, we implement appropriate safeguards to protect your data, including:

• Standard contractual clauses approved by relevant authorities
• Data processing agreements with service providers
• Compliance with applicable data protection frameworks

10. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that a child under 18 has provided us with personal information, we will delete such information promptly.

11. Third-Party Links and Services

Our Service may contain links to third-party websites, apps, or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending you a notification through the app or email for significant changes

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data protection inquiries specific to the Republic of Mauritius, you may also contact the Data Protection Office at dataprotection.govmu.org.