INFORMATION WE COLLECT AND HOW WE USE IT
7. Types of Information Collected
Rydy collects users’ personal, technical, and usage information in accordance with U.S. federal and state laws. The information is classified into the following categories:
7.1 Personally Identifiable Information
Includes, among others:
-
Full name, address, date of birth, phone number, and email address.
-
Driver’s license, vehicle insurance number, registration card, and identification documents required by law or the platform.
-
Profile photo and minimal biometric data (e.g., facial recognition or identity verification via camera, when applicable).
-
Tax ID or EIN, in the case of drivers or affiliates with business activities.
7.2 Financial and Payment Information
Rydy collects information necessary to securely process payments, including:
-
Credit or debit card data, bank account number, and billing details.
-
Transaction history, applied charges, commissions, refunds, or bonuses.
-
Payment methods used through third parties (e.g., Apple Pay, Google Pay, Stripe, or PayPal).
-
Account identifiers linked to the affiliate system for processing commissions.
All financial information is processed through PCI-DSS certified providers, and Rydy does not directly store complete card numbers.
7.3 Geolocation Data
To operate its Services, Rydy collects precise location information:
-
Real-time location of driver and passenger before, during, and after each trip.
-
Pickup point, destination, route traveled, trip duration, and high-demand areas.
-
GPS data from the mobile device and coordinates from cellular or Wi-Fi signals.
Users can control GPS activation from their device settings, but disabling it may prevent proper use of the Services.
7.4 Device and Connectivity Information
We collect technical data from the device and network, such as:
-
Device model, operating system, app version, and browser type.
-
IP address, internet provider, system language, time zone, and network type.
-
Unique advertising identifiers (IDFA, GAID) and notification tokens.
-
Error and performance logs for support and diagnostic purposes.
7.5 Communication and Support Information
When users interact with Rydy, we may collect:
-
Messages and calls made within the app (subject to encryption and limited retention).
-
Chats between passenger and driver through secure channels.
-
Customer service and technical support records.
-
Emails, reports, or contact forms submitted by the user.
This data is used exclusively to resolve inquiries, ensure safety, or support internal investigations.
7.6 Audio, Video, and Image Recordings
For safety and protection reasons, some drivers or passengers may record audio or video during trips via in-app features or authorized cameras.
Rydy may store or analyze such recordings only in the following cases:
-
Security investigations, complaints, or claims.
-
Legal protection in case of incidents or disputes.
-
Training of fraud or risk detection algorithms (if authorized by the user).
All recordings are retained for a maximum of 90 days, unless a legal authority requires extended retention.
7.7 Affiliate Program Information
If the user participates in Rydy’s affiliate system, the following information is collected:
-
Referral code, usage statistics, generated income, and commission level.
-
Affiliate payment history, referred users, and conversion dates.
-
Tax information required for compliance (e.g., IRS Form 1099-K).
7.8 Cookies, SDKs, and Similar Technologies
Rydy’s website and app use cookies and equivalent technologies (such as pixels, SDKs, or analytics tags) to:
-
Remember language and session preferences.
-
Analyze site traffic and measure app performance.
-
Personalize user experience and provide relevant content.
-
Display Rydy or third-party ads based on interests.
Users may configure their browsers or devices to reject cookies, although some functions may not work properly.
8. Purpose of Data Processing
Rydy uses the collected data for the following legitimate purposes:
-
Service delivery: connect passengers with drivers, process trips, payments, and ratings.
-
Account management: registration, authentication, support, profile updates, and communication with users.
-
System improvement: statistical analysis, feature development, and route optimization.
-
Security: identity verification, fraud prevention, access control, and incident monitoring.
-
Legal compliance: respond to authority requests, court orders, or regulatory requirements.
-
Marketing and affiliation: inform about promotions, bonuses, or new services (with an “opt-out” option).
-
Analytics and metrics: evaluate performance, user retention, and market statistics.
9. Legal Basis for Processing
Rydy processes personal data under the following legal bases:
-
Contract performance: when processing is necessary to fulfill the Terms of Use and deliver the requested service.
-
Consent: when the user has explicitly authorized processing (e.g., receiving notifications or joining affiliate programs).
-
Legitimate interest: to enhance security, prevent fraud, or conduct internal analysis.
-
Legal compliance: when required to meet tax, safety, or regulatory obligations.
10. Automated Decisions and User Profiling
Rydy uses automated algorithms to:
-
Calculate dynamic fares based on distance, demand, and traffic.
-
Match drivers and passengers efficiently.
-
Detect unusual or suspicious behavior (fraud, misuse, etc.).
-
Recommend personalized promotions or incentives.
These processes do not involve decisions with significant legal effects without human intervention, unless required by law or explicitly consented to by the user.
11. Data Retention and Deletion
Rydy retains personal information only as long as necessary to fulfill the stated purposes.
Retention criteria are as follows:
| Data Type | Standard Retention Period |
|---|---|
| Active account data | As long as the user’s account remains active |
| Trip and payment data | Up to 7 years (for tax and accounting purposes) |
| Audio/video recordings | 90 days, unless legally required otherwise |
| Support or complaint data | 2 years after resolution |
| Affiliate and commission data | 5 years from last payment |
| Anonymized data | Indefinitely (without personal identifiers) |
Users may request deletion of their account and personal data by emailing privacy@rydy.com,
except where retention is required by law or for security reasons.
12. Accuracy and Updates
Rydy requires all provided information to be truthful and up to date.
Users are responsible for maintaining accurate data within their profiles.
If inconsistencies or fraud are detected, Rydy may temporarily suspend the account until verification is complete.
SHARING, SECURITY, AND USER RIGHTS
13. Disclosure of Information to Third Parties
Rydy may share users’ personal information only when necessary and under strict confidentiality measures. The categories of third parties with whom data may be shared include:
13.1 Service Providers
Rydy relies on external service providers to facilitate its platform’s operation, such as:
-
Payment processors: Stripe, PayPal, Apple Pay, Google Pay
-
Cloud storage providers: AWS, Google Cloud, Firebase
-
Identity and background verification systems: Checkr, Cognito, or others
-
Analytics and marketing platforms: Google Analytics, Meta Ads, Firebase Analytics
-
Messaging and authentication tools: for SMS, notifications, and push messages
These providers handle information solely under Rydy’s instruction, following confidentiality and data-protection agreements.
13.2 Government Authorities and Legal Requirements
Rydy may disclose personal data when:
-
Required to comply with a legal obligation or court order
-
In investigations of crimes, fraud, or contractual violations
-
Requested by regulators, law enforcement, or courts
-
Necessary to prevent threats to a person’s physical or financial safety
Only the strictly necessary data will be disclosed, and Rydy will document such disclosures per applicable law.
13.3 Business or Corporate Transfers
In cases of merger, acquisition, asset sale, or corporate reorganization, personal information may be transferred to the successor entity while maintaining the same privacy protection level established herein.
13.4 Business Partners and Affiliate Programs
When users join referral, promotion, or reward programs, Rydy may share limited data (e.g., name, referral code, usage statistics) with verified partners under confidentiality agreements.
13.5 Express Consent
For any other type of disclosure not covered in this Policy, Rydy will obtain prior, verifiable consent from the user or act as required by law.
14. Information Security
Rydy implements technical, administrative, and physical safeguards to protect personal data from loss, theft, misuse, or unauthorized access.
Security measures include:
-
🔐 Data Encryption: Sensitive data (passwords, financial info, GPS data) encrypted via SSL/TLS and AES-256 protocols.
-
🔑 Two-Factor Authentication (2FA): for admin and high-level access accounts.
-
👩💻 Access Control: Only authorized personnel with valid credentials can access personal information.
-
🧩 Audits & Monitoring: Regular security assessments and vulnerability scans.
-
💾 Backup & Recovery: Encrypted backups on secure servers with geographic redundancy.
-
🕵️♂️ Anonymization: Personal identifiers are permanently removed when no longer needed.
Rydy complies with standards set by the National Institute of Standards and Technology (NIST) and Payment Card Industry Data Security Standard (PCI-DSS).
15. International Data Transfers
Although Rydy primarily operates within the United States, some information may be processed or stored abroad. In such cases:
-
Third-party providers must maintain equivalent data protection levels as U.S. law.
-
Standard contractual clauses or confidentiality agreements will govern such transfers.
-
Access is restricted to authorized personnel for the legitimate purposes described in this Policy.
Users outside the U.S. expressly consent to the transfer and processing of their data in the United States according to this Policy.
16. User Privacy Rights (CCPA and Related Laws)
Under the California Consumer Privacy Act (CCPA) and similar laws, users have the following rights:
16.1 Right to Know and Access
Request details about:
-
Categories and sources of data collected
-
Processing purposes
-
Third parties with whom data is shared
16.2 Right to Rectification
Users may request correction of inaccurate, incomplete, or outdated data via profile settings or by emailing privacy@rydy.com.
16.3 Right to Deletion
Users may request deletion of personal information unless retention is required by legal, security, or contractual obligations.
16.4 Right to Data Portability
Request a copy of personal data in a structured, commonly used, machine-readable format.
16.5 Right to Opt-Out
Users may refuse participation in:
-
Marketing or targeted advertising campaigns
-
Sale or exchange of personal data with third parties
To exercise this right, email privacy@rydy.com with the subject “Opt-Out Request.”
16.6 Right to Non-Discrimination
Rydy guarantees no discrimination for exercising privacy rights — service access, pricing, and benefits remain unaffected.
17. Procedure to Exercise Rights
To exercise any rights above, users may contact:
📧 Email: privacy@rydy.com
📄 Subject: “Privacy Rights Request”
Process:
-
Identity verification of requester
-
Evaluation of request type and scope
-
Response within 30 business days
-
Reasonable extension allowed if the case is complex (with prior notice)
If Rydy cannot comply for legal reasons, the user will be clearly informed with justification.
18. Protection of Minors (COPPA)
Rydy adheres to the Children’s Online Privacy Protection Act (COPPA) and does not knowingly collect data from minors under 13.
If such information is found without verified parental consent, Rydy will delete it immediately.
Parents or guardians may contact privacy@rydy.com to request deletion of a child’s information.
19. Limitation of Liability
Despite robust safeguards, no system is entirely foolproof. Rydy is not liable for:
-
Unauthorized access resulting from factors beyond its control
-
User errors (e.g., sharing passwords)
-
Incidents caused by unaffiliated third-party providers
Rydy remains fully committed to continuous improvement in privacy and data security for all users.
OPERATIONS, TECHNOLOGIES, AND CONTACT
20. Use of Cookies and Tracking Technologies
Rydy uses cookies, pixels, SDKs, tags, and other similar technologies to provide a personalized experience, maintain service security, and analyze performance.
20.1 Types of Cookies We Use
-
Essential cookies: Required for site functionality and user authentication.
-
Performance cookies: Measure metrics, load times, and feature usage.
-
Functionality cookies: Store preferences such as language, payment method, or city.
-
Marketing cookies: Track interactions with Rydy’s or third-party ads to optimize marketing campaigns.
-
Affiliate cookies: Register conversions and calculate commissions within the referral program.
20.2 Cookie Management
Users may manage or disable cookies through their browser settings. However, some essential features may be affected.
Rydy complies with the advertising transparency regulations established by the Digital Advertising Alliance (DAA) and the Network Advertising Initiative (NAI).
21. Advertising, Promotions, and Communications
21.1 Sending Communications
Rydy may send text messages, push notifications, emails, or in-app alerts to inform users about:
-
Service updates.
-
Bonuses or rewards from the affiliate program.
-
Promotions or special events.
Users can opt out of receiving promotional communications through the “unsubscribe” option included in each message or by adjusting preferences within the app.
21.2 Personalized Advertising
Rydy may use third-party advertising services (e.g., Google Ads, Meta, TikTok Ads) that use cookies or unique identifiers to display relevant ads.
Users may opt out of targeted advertising through:
-
The DAA opt-out tool (optout.aboutads.info).
-
The Google Ads settings tool (adssettings.google.com).
Rydy does not sell personal data to third parties as defined under the CCPA.
22. Recordings, Monitoring, and Security
22.1 Trip Recordings
For safety reasons, Rydy allows audio or video recording during trips. Such recordings may be made by drivers or automatically by the app if the user enables the feature.
The content is stored in encrypted form and may only be accessed by:
-
The user (for a limited period).
-
Rydy’s security team in case of an investigation.
-
Competent authorities upon valid legal request.
22.2 Operational Monitoring
Rydy reserves the right to monitor the use of its systems to:
-
Ensure platform security and proper operation.
-
Detect fraud, violations of the Terms of Use, or suspicious activity.
-
Protect users’ rights and integrity.
All monitoring is carried out in compliance with applicable electronic privacy laws, including the Electronic Communications Privacy Act (ECPA).
23. External Links and Third-Party Services
Rydy’s website and application may contain links to external sites or integrations with third-party services.
Rydy is not responsible for the privacy, security, or data practices of such third parties.
Users are advised to review the relevant policies before providing personal information outside Rydy’s environment.
Common third-party services include:
-
Mapping platforms (Google Maps, Mapbox).
-
Payment services (Stripe, PayPal).
-
Support tools (Zendesk, Intercom).
-
Social networks or external authentication systems (Facebook, Apple, Google).
24. Changes in Ownership or Corporate Structure
If Rydy Driver Solutions LLC undergoes a merger, acquisition, asset sale, restructuring, or dissolution, personal data may be transferred to the new operating entity.
In such cases:
-
The new controller must maintain the same privacy conditions or notify users of any changes.
-
Users will be informed in advance via email or public notice.
25. Jurisdiction and Governing Law
This Policy is governed by the laws of the State of Texas and the federal laws of the United States.
Any dispute related to this Policy or the processing of personal data shall be resolved in the competent courts of Harris County, Texas, unless otherwise required by mandatory law.
In the event of a conflict between this Policy and the Terms of Use, the document that provides greater protection to the user’s privacy shall prevail.
26. Privacy Contact Information
The data controller is:
Rydy Driver Solutions LLC
15919 Bluffdale Dr, Houston, Texas 77084
Email: privacy@rydy.com
Website: www.rydydriver.com
Users may direct any inquiries, complaints, or requests to exercise their rights to the above email address.
Rydy will respond within 30 business days, in accordance with the CCPA and other applicable privacy laws.
27. Final Acceptance
Continued use of the Rydy application or website constitutes full and voluntary acceptance of this Privacy Policy and any future updates.
Rydy is committed to maintaining the highest standards of security, transparency, and respect for the personal information of all its users.
Updates to This Privacy Notice
From time to time, we may revise this notice. If we make any substantial modifications, we will inform users through the Rydy app or other methods, such as by email. We encourage users to periodically review this notice to stay informed about our latest privacy practices.
Use of our services after such updates will be considered acceptance of the revised notice, to the extent permitted by law.