HARBOUR RIDE

Privacy Policy

Last updated October 4, 2026

1. Information we collect
2. How we use it
3. Who can see it
4. Service providers
5. Where it’s stored
6. How long we keep it
7. Your choices and rights
8. Security
9. Disclosures for safety and the law
10. Children
11. Changes to this policy
12. Contact us

1. Information we collect

Information you give us

• Account: your name, email address, password (stored encrypted by our sign-in provider), and whether you plan to ride, drive or both.
• Profile: your photo, introduction, home city and ride preferences, including your self-declaration for women-only rides.
• Driver details: your vehicles (year, make, model, colour, seats and an optional photo of the car) and, for document review, your legal name, photos of the front and back of your driver’s licence, a selfie, and your licence expiry date.
• Rides and bookings: the rides you post or book, including cities, meeting points, dates, times, seats and prices.
• Communications: messages with other members, reviews, member reports, driver no-show reports and responses, and messages you send us through Help.
• Optional features: saved rides, route alerts, your commute routine, carbon estimates, people you block, and trip share links you create.
• Questions to the Harbour Ride assistant, if you use it.

Payment information

Card payments and driver payouts are handled by Stripe. Harbour Ride never receives your full card number. We keep records of payments, refunds, booking fees and driver payouts (including their status and timing), drivers’ Stripe account identifiers, and how many rides a driver has cancelled after passengers paid. To set up payouts, drivers give Stripe identity and banking details directly, under Stripe’s privacy policy.

Information collected automatically

• Sign-in data: your browser stores a sign-in session so you stay logged in. We don’t use advertising or analytics cookies.
• Technical data: our hosting and database providers log basic technical information, such as IP address, browser type and the time of requests, for security and troubleshooting. To limit spam on the contact form, we keep a one-way scrambled (hashed) version of your IP address for a short time.
• Location searches: when you search for a city or address, the text you type and the places you pick are sent to Google Maps. Harbour Ride doesn’t access your device’s location or track your trips. See Location services.

2. How we use it

• To create and secure your account, and confirm your email address.
• To show rides, match drivers and passengers, and handle bookings, payments, payouts, cancellations and refunds.
• To let members message each other and leave reviews, and to send you notifications about your trips.
• To review driver documents before someone offers rides.
• To keep the community safe: investigating reports, enforcing blocks and our Terms of Service, and preventing fraud and misuse.
• To answer your questions and support requests.
• To fix problems and improve Harbour Ride.
• To meet our legal, tax and accounting obligations.

We only use your information for these purposes, or for a new purpose you agree to.

3. Who can see it

• Anyone visiting Harbour Ride can see ride listings (cities, meeting points, times, price, vehicle description and photo, and the driver’s name), and member profiles (name, photo, introduction, home city, join date, reviews, and whether the email is confirmed and driver documents were reviewed).
• Members on the same trip can see each other’s names and messages.
• People you share a trip with through Share my trip see your first name, your driver’s first name, the vehicle, meeting points and times until the link expires.
• Harbour Ride administrators can access account information, driver documents, reports and messages when needed to review drivers, handle support or investigate safety issues.

Your email address, driver documents, licence details and women-only self-declaration are never shown on your public profile.

4. Service providers

We use trusted providers to run Harbour Ride. They may only use your information to provide their service to us.

• Supabase: database, sign-in and file storage (including profile photos and driver documents).
• Vercel: website hosting.
• Stripe: payments, refunds and driver payouts.
• Google Maps Platform: place search, maps, routes and time zones.
• OpenAI: the optional Harbour Ride assistant. Your question and matching ride listings are sent to answer it, and we ask OpenAI not to store the conversation.
• Google (Gmail): delivering Help messages and safety reports to our team.
• Our email provider: sending account confirmation and password reset emails.

5. Where it’s stored

Some of our providers store or process information outside Canada, including in the United States. While it’s there, it may be accessible to courts, law enforcement and national security authorities under local laws. We choose providers that protect personal information with strong safeguards.

6. How long we keep it

• Your account and profile: for as long as your account is open.
• Driver document photos: only as long as needed to complete and support the review. You can ask us to delete them sooner. They’re deleted when you delete your account.
• Trip share links: they stop working 6 hours after the trip arrives, or as soon as you stop sharing.
• Trips, bookings and payment records: kept for up to 7 years after the trip for tax, accounting, refund and dispute purposes. If you delete your account, these are kept without your name or photo.
• Safety and no-show reports: kept as long as needed to protect members, settle payments and respond to legal claims.

When you delete your account in Settings, we delete your profile, photo, vehicles, driver documents, saved rides, alerts, notifications and blocks. We remove the text of messages you sent and clear your review comments, and we disable your sign-in.

7. Your choices and rights

• See and correct: you can view and edit your profile in Settings, and ask us for a copy of the personal information we hold about you.
• Delete: you can delete your account at any time in Settings → Account security.
• Notifications: you choose which in-app updates you receive in Settings → Notifications. We may still send essential messages about your account, bookings and payments.
• Withdraw consent: you can withdraw consent for optional uses at any time, which may mean you can’t use some features.
• Complain: if you’re not satisfied with how we handle a privacy concern, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

We’ll respond to access and correction requests within 30 days. We may need to confirm your identity first.

8. Security

We protect your information with measures such as encrypted connections, private storage for driver documents, restricted administrator access, and server checks on every request. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we’ll notify you and the Privacy Commissioner as the law requires.

9. Disclosures for safety and the law

We may share information without your consent where the law allows or requires it. For example, to respond to a valid court order or legal request, to help police in an emergency that threatens someone’s life, health or safety, or to investigate fraud or a breach of our terms.

10. Children

Harbour Ride accounts are for people 18 and older. We don’t knowingly collect information from children. If you think a child has created an account, please tell us and we’ll remove it.

11. Changes to this policy

We may update this policy as Harbour Ride changes. We’ll post the new version here with a new “last updated” date and, for important changes, tell members in the app or by email.

12. Contact us

Harbour Ride’s privacy officer is responsible for this policy. To ask a question, request your information, or make a complaint, send us a message from Help → Contact us and choose “Account help”.

Questions? Send us a message from Help → Contact us.