Zipedoo

Privacy

Who we are. Zipedoo is operated by ROLV, LLC ("Zipedoo", "we"). Contact: info@zipedoo.com.

Effective date: October 24, 2026.

1. Who can use Zipedoo

Zipedoo is only for people 18 or older. You give your birth month and year when you sign up, and the app and our servers refuse anyone younger. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has an account, email info@zipedoo.com and we will delete it.

2. What we collect

You give us:

• Account: first and last name, email address, mobile phone number, a password (stored only as a salted hash), and whether you are asking for a ride or offering one. Your email is verified with a one-time code.
• Birth month and year (no day), to enforce the 18+ rule and the 18+ driver rule. Other people never see it; our staff see only an age band (for example "18+").
• Profile: profile photo (taken in the app), an optional "about" note, your language.
• Drivers: car make, model, year, color, seats, plate and a car photo (and earlier car photos); whether you have insurance; a photo of your insurance card and its expiry, if you add one; a photo of the front of your driver's license and its expiry month (see 4); optional quiet hours; your Zipedoo fee-agreement acceptance (date, language, app version and the approximate place you were when you accepted).
• Payment handles you choose to add: Cash App, Venmo, PayPal handles and/or your X handle (for X Money). They are shown only to your rider on an accepted ride. Riders may also record which payment apps they use.
• Lead-fee card (drivers only): a card for Zipedoo's lead fee (advertising fee) is entered in Stripe's payment form. We store only Stripe's customer/payment-method reference and the card brand, last 4 digits and expiry month/year, never the full card number.
• Rides and messages: pickup and destination (address and coordinates), the chip-in amount offered, ride status and times, chat messages, photos and map pins you send in a chat, ratings and reviews, friend requests and friendships, invite codes.
• Safety and support: reports about another person, issue reports, refund requests and the photos/notes you attach, and people you block (see 6).

Collected automatically:

• Location: see 3.
• Device and app identifiers: a random device ID created by the Zipedoo app (not your phone's advertising ID or hardware ID), your push-notification token, app version/build, platform and language. The device ID is used for security (for example, to keep a banned device from creating new accounts). We do not use an advertising ID and do not track you across other companies' apps or websites.
• Diagnostics and error logs: when the app hits an error it sends us the error code, the screen, the app build and the request path, linked to your account if you are signed in. We do not use a third-party crash-reporting SDK.
• Google Maps SDK: the in-app map uses the Google Maps SDK. Google collects usage data, diagnostics and crash data about the Maps SDK, and the map area you view, under Google's privacy policy (https://policies.google.com/privacy).
• Network data: Cloudflare processes your IP address and request data to deliver and protect the service; we use your IP address briefly for rate limiting.

3. Location: what and when

• While you use the app (all users): your approximate or precise location (as you allow on your phone) to center the map, find friends who are available nearby, suggest places, and plan a pickup. Search text and your area are sent to Google to look up places and routes.
• Drivers who mark themselves Available, and during an accepted ride: precise GPS location is sent to Zipedoo about every few seconds while moving (and every 45 seconds when parked) so nearby people can see you on the map and your rider can follow the drive. Only your latest point is kept on your profile; it is hidden from the map after 10 minutes without an update.
• Android: collected only while the app is open or while the persistent "Zipedoo is sharing your location" notification is showing (a foreground service you start by going Available and stop by going offline). Zipedoo on Android does not request background-location ("Allow all the time") permission.
• iPhone: while you are Available or on an accepted ride, location can continue when the app is in the background ("Always" permission), shown by the iOS location indicator. You can change this in iOS Settings.
• People asking for a ride are not tracked in the background.
• Fee-refund check: if a ride with a driver's lead fee is cancelled, the rider's and driver's positions may be sampled for up to 30 minutes to check whether the ride happened anyway; these samples are deleted when the check finishes and in any case within 24 hours.
• Location is never sold and never used for advertising.

4. Driver's license photo

Used only to confirm the driver holds a license. No facial recognition or other biometric processing, no reading or storing the license number as data, no background check, no motor-vehicle lookup. Riders and other drivers cannot see it. Staff can open it through a short-lived signed link, and each view is recorded. Deleted when the account is deleted, when driver mode is turned off, or when staff delete it. The same applies to the insurance-card photo.

5. How we use information

To run your account and verify your email; show available friends on the map and connect a rider with a driver; deliver chat, push notifications and emails; enforce the 18+ rule and driver requirements; charge drivers' lead fees (when fees are on); handle refund requests, reports and support; keep the service safe (rate limits, bans, blocks); fix bugs and measure reliability; and comply with law. We do not sell or share personal information for targeted advertising, and we do not show ads.

6. What other people see, and blocking

• Other users see your first name (with the first letter of your last name added only when another account shares your first name, and in friend search), profile photo, about note, ratings and reviews; for drivers who are Available, also the car details, car photo and approximate distance/position on the map. Your phone number and email are never shown to other users; chat stays in the app.
• Your payment handles (and X handle) are shown only to your rider on an accepted ride.
• Blocking: you can block anyone from their profile, a chat or a ride, and unblock them under More › Blocked people. While blocked, neither of you sees the other on the map, in search, friends, profiles or chats, and you cannot message or ask each other for a ride; open asks between you are cancelled. The other person is not notified. We keep the block (who blocked whom and when) until it is lifted or either account is deleted.

7. Who we share information with (service providers)

We share information only as needed to run Zipedoo, with providers that process it for us:

• Cloudflare: hosting, database (D1), file storage for photos (R2), and live ride updates.
• Stripe: drivers' lead-fee card setup and charges (when fees are on).
• Google: Google Maps SDK (in-app map) and Google Places and Routes APIs (place search, addresses, routes).
• Expo (650 Industries): push-notification relay, and the build service that produces the app.
• Apple: App Store distribution and Apple Push Notification service.
• Google Play: Android app distribution.
• Resend: sending email (verification codes and account email).
• Opening directions or a payment app hands off to that app (Apple Maps, Google Maps, Cash App, Venmo, PayPal, X); their own policies apply.

We also disclose information if required by law, to protect someone's safety, or in a merger or sale of the business. Payments between riders and drivers (chip-ins) happen outside Zipedoo; we never receive them.

8. How long we keep information

• Account and profile: while your account exists. When you delete your account (in the app, on the web page, or by email), we immediately remove your name, email, phone, password, birth month/year, photos (profile, car, license, insurance, chat photos you sent), payment handles, card references, device ID, push tokens, sessions, friends, private messages, blocks, quiet hours and location, and blank the text of ride-chat messages you sent.
• Ride and lead-fee records stay, without your name, contact details or photos, because payment and tax rules may require them. They currently have no automatic deletion period.
• Sign-in sessions: up to 90 days.
• Driver's last location: only the latest point, replaced on each update; cleared on account deletion. Fee-refund location samples: deleted when the check ends, at most 24 hours.
• Ratings and reviews, reports, issue reports and refund requests (including attached photos and notes): currently kept without an automatic deletion period, including after an account is deleted.
• Error logs (diagnostics), copies of emails/codes we sent, admin audit log: currently kept without an automatic deletion period.
• Backups: Cloudflare D1 keeps point-in-time recovery for up to 30 days, so deleted data can remain in backups for up to 30 days.

9. Your choices and rights

• Update your profile in the app; turn off driver mode; go offline to stop location sharing; turn off location, camera, photos or notifications in your phone's settings.
• Delete your account: Profile/More › Delete account in the app, https://api.zipedoo.com/legal/delete-account, or email info@zipedoo.com.
• Ask for a copy or correction of your data, or ask questions: info@zipedoo.com.

10. Security

Passwords are hashed; photos of documents are private and opened by staff only through short-lived signed links with an audit log; data is encrypted in transit (HTTPS). No system is perfectly secure.

11. Changes

We will post changes here and, for significant changes, tell you in the app before they take effect.

12. Contact

ROLV, LLC: info@zipedoo.com