1. What we collect
- Account info: full name, mobile number, email, and password (stored hashed).
- Ride info: the rides you post or book, including from / to cities, dates, prices, and notes.
- Location: your IP-derived city for the home page hint, and your precise location only if you grant permission for area refinement.
- CNIC images: for driver verification, stored in a private bucket. Only you and our verification team can see them.
- Ratings and reviews: the ratings you give and receive after each completed ride.
- Profile bio and profile photo: if you choose to upload them.
- Audit log: records of trust-critical state changes (bookings, profile changes, verifications). Visible only to our admin team.
2. How we use it
- To run the platform: matching riders, processing bookings, sending you reminders.
- To verify drivers: a human reviews each CNIC submission within 24 hours.
- To improve safety: monitoring for suspicious patterns, acting on reports.
- To improve the product: aggregated, anonymous analytics about route popularity, average prices, etc.
3. What we do not do
- We do not sell your data, ever.
- We do not share your data with advertisers.
- We do not pass data to law enforcement without legal compulsion (a court order or equivalent).
- We do not show your phone or email publicly. Your phone is shared only with the matched driver after a confirmed booking.
4. Where it is stored
Account data, ride data, and ratings are stored on Supabase, in encrypted Postgres databases hosted in the ap-south-1 region. CNIC images are stored in a private Supabase Storage bucket; access requires a signed URL that expires in 60 seconds.
5. Your rights
- Access your data: visit your Profile page to see everything we hold about you.
- Edit your data: name, bio, city, and profile photo are editable inline. Phone changes need verification (rolling out soon).
- Delete your account: Profile -> Account actions -> Delete my account. Your profile is anonymised. Booking and rating history is kept (anonymously) so the other party still sees their record.
- Request a data export: email support@doublesixride.com. We will send you a JSON file with everything we hold about you within 30 days.
6. Cookies
We use minimal cookies. Specifically: a theme preference cookie (so the site remembers your dark or light choice) and a first-visit detection cookie (so the auth page defaults to sign up on your first visit). No tracking cookies. No third party trackers. No Google Analytics, no Facebook Pixel, no Hotjar.
7. Children
Doublesixride is for users 18 and older. We do not knowingly collect data from children. If we learn that we have collected data from someone under 18, we will delete it.
8. Changes to this policy
We will update this policy as the platform evolves. Material changes will be announced by email and via a banner on the home page at least 30 days before they take effect.
9. Contact
Privacy questions, data requests, or concerns: support@doublesixride.com or use the contact form with subject "Account & profile".