Privacy

What carpoolninja is

carpoolninja helps families who already know each other share rides to their kids' activities. A parent sets up a family, adds the kids' first names, and shares an activity series with other families. Everyone sees who's driving and who's going.

The app is for parents. Kids don't have accounts and we don't knowingly collect anything from a child directly.

What we store

• Your email address and password (hashed), to sign you in.
• Any extra email addresses you add to your account, each confirmed with a code we email to it, and the short-lived codes we send to confirm them. Remove an address from the Family page and we stop using it. Deleting your account removes them all.
• Your name and your family's name, as you type them.
• Your kids' first names, as you type them.
• If you add another parent who won't sign in: their name, and an email address if you give one. We email that address once to ask whether they want ride alerts. We send nothing more unless they say yes.
• For a person you invite to sign in: their name, saved until they join or a parent removes them. Their email address is kept on the invite, as described below.
• If you add one: your cell phone number, or the number of a parent in your family who doesn't sign in, and whether you show it to other families.
• If you say we may text you: when you said so, when you stopped, and which wording you saw. We don't send texts yet.
• The activity series you create: name, place, days, times, and time zone.
• Who is driving and which kids are going, for each activity.
• Email addresses you invite, until the invite is answered or expires.
• Records of sign-in codes and emails we sent, kept briefly so nobody gets the same alert twice.
• Feedback you send from the app: your message, any screenshots or video you attach, your name and family, and the page and device you sent it from. Attachments are stored privately and only we can see them.

Who sees what

• Families in the same activity series see each other's family name, parent names, and the first names of the kids in that series, plus who is driving and who is going.
• A family invited to one date of an activity series, a guest, sees that date only: its carpool, rides, and the families and kids on it. It sees nothing else of the series. Members of the series see the guest family on that date.
• Carpool friends see each other's family and parent names.
• A cell phone number is shown only to families in an activity series with yours, or on the same date as a guest, and only when its owner chooses to show it. A guest sees numbers only for its one date, and only until that date starts. Carpool friends who share no series or date never see it. A parent who sees a number can call or text it, and a group text shows everyone's number to everyone in it.
• Nobody outside your carpools sees anything about you.
• Email addresses are never shown to other families. Emails go out one per person, so nobody sees another's address.
• We don't sell or share personal data for advertising.

Who helps us run it

The app runs on Vercel (hosting), Supabase (database and sign-in), and Resend (email). Each processes data only to provide the service. Feedback you send is also filed in a private GitHub repository we use to keep track of it. Server logs are kept for a short time to fix problems.

Cookies and storage

The only cookies carpoolninja sets are the ones that keep you signed in. The app needs them to work, so there is nothing to accept or turn off. Your light or dark choice is saved in your browser, on your own device. We use no analytics, advertising, or tracking cookies, and nothing that follows you to other sites.

How long we keep it

• Your family's data: while your account exists.
• A cell phone number: until you remove it, you leave the family, or you delete your account.
• The record of when you allowed or stopped texts and the wording you saw: kept without your number or name, so we can show what was agreed.
• Invite addresses: cleared 90 days after the invite is answered, or 30 days after it expires.
• A removed parent's alert address: cleared after 30 days.
• Sign-in code records: 7 days. Email send records: 30 days.
• Feedback: while we work on it. Write to us and we will delete yours.

Deleting your account

From the Family page, choose Delete my account. Your kids' names are deleted and your name and family name are replaced with “Former parent” and “Former family”, and your cell phone number is deleted. Other families keep their ride history, which may include that a family rode with them, without your names. If another parent in your family still has a sign-in, only you are removed.

A parent without a sign-in can stop ride alerts from the link at the bottom of any alert email, or by asking any parent of the family to remove the address.

Questions

Write to hello@carpoolninja.com.