Introduction
RideYa ("we", "our", "us") operates the RideYa mobile application and web platform (the "Service"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service.
By using RideYa, you agree to the collection and use of information as described in this policy.
Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Password (stored securely using encryption)
- Phone number (optional)
- User category (bus user, private vehicle user, etc.)
Vehicle Information
When you register a vehicle, we collect:
- Vehicle make, model, year, color, and license plate
- GPS device identifier
- Real-time GPS location data (latitude, longitude, speed, heading)
Location Data
With your permission, we collect your device's location to:
- Show your position on the map
- Calculate distance to nearby buses and vehicles
- Trigger proximity-based notifications
You can disable location access at any time through your device settings.
Push Notification Tokens
We collect push notification tokens to send you alerts about bus arrivals, geofence events, and vehicle updates. You can disable notifications in your device settings.
How We Use Your Information
- Provide real-time vehicle tracking on the map
- Send bus arrival notifications based on your subscriptions
- Enable vehicle sharing between users
- Generate passenger counting reports for bus owners
- Deliver geofence entry/exit alerts
- Improve our service and fix bugs
Data Sharing
We do not sell your personal information to third parties. We may share information in these limited cases:
- Public vehicle data: Vehicles marked as "public" (buses, vans) have their location visible to all users for transit tracking purposes.
- Vehicle sharing: When you share a vehicle, the recipient can see its location and basic information.
- Service providers: We use Expo (push notifications) and Firebase (Android push) to deliver notifications. These services process push tokens only.
- Legal requirements: We may disclose information if required by law.
Data Security
We protect your data using:
- HTTPS/TLS encryption for all data in transit
- iOS Keychain and Android Keystore for secure token storage
- Hashed passwords (never stored in plain text)
- JWT authentication for API access
Data Retention
We retain your data as long as your account is active. Location history is stored for operational purposes. You can request deletion of your account and associated data by contacting us at support@rideya.bz.
Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and data
- Disable location tracking and push notifications
- Export your vehicle and location data
Children's Privacy
RideYa is not intended for children under 13. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes through the app or email.
Contact Us
If you have questions about this Privacy Policy, contact us at:
Email: support@rideya.bz
Website: rideya.bz
Location: Belize City, Belize