Privacy Policy
Effective Date: June 21, 2025 · Last Updated: June 21, 2025
1. Who We Are
Oweya ("we," "us," or "our") is a community ride-sharing platform that allows members to exchange rides using a favor-based points system. We operate the website at oweya.us and the Oweya mobile application. Questions about this policy can be directed to support@oweya.us.
2. Information We Collect
Information you provide directly:
- Full name, nickname, email address, phone number
- Password (stored as a one-way hash — we cannot read it)
- Driver's license certification status (yes/no — we do not store your license number)
- Pickup and drop-off addresses when you request or offer rides
- Communications you send through the app
Information collected automatically:
- Device type, operating system, and app version
- IP address and approximate location (city/region level)
- Ride activity: pickup/dropoff locations, distance, timestamps, and point transactions
- App usage data (pages visited, features used)
3. How We Use Your Information
- To create and maintain your account
- To facilitate ride matching between members in your network
- To calculate and transfer favor points at ride completion
- To send transactional emails (ride confirmations, verification codes, account notices)
- To send SMS notifications about ride activity in your network, if you opt in
- To process subscription payments (via Stripe — we do not store card details)
- To improve the platform and troubleshoot issues
- To comply with legal obligations
4. SMS Communications
If you opt in to SMS notifications during signup or in your account settings, we will send you text messages about ride requests and activity within your networks. Message frequency varies based on network activity. Message and data rates may apply. You can opt out at any time by replying STOP to any message or by updating your preferences in the app. Reply HELP for assistance. For more details, see our SMS Terms.
5. How We Share Your Information
We do not sell your personal information. We share data only in these limited circumstances:
- With network members: Your name, nickname, and ride details are visible to members of your shared networks to enable ride coordination.
- Service providers: Supabase (database), Twilio (SMS), Resend (email), Stripe (payments), Vercel (hosting). Each is bound by data processing agreements.
- Legal requirements: If required by law, court order, or to protect the safety of our users or the public.
- Business transfers: In the event of a merger or acquisition, your data may be transferred with appropriate notice.
6. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or financial recordkeeping purposes (e.g., payment history is retained for 7 years).
7. Your Rights and Choices
- Access: You can view most of your data in the app under Account settings.
- Correction: Update your profile at any time in the app.
- Deletion: Email support@oweya.us to request account deletion.
- SMS opt-out: Reply STOP to any SMS or toggle the setting in your account.
- Data portability: Contact us to request a copy of your data.
California residents may have additional rights under the CCPA. Contact us at the email above for requests.
8. Security
We use industry-standard measures to protect your data: passwords are hashed with bcrypt, data is encrypted in transit (TLS), and access to production systems is restricted to authorized personnel. No system is 100% secure, and we encourage you to use a strong, unique password.
9. Children's Privacy
Oweya is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us at support@oweya.us.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by email or by posting a notice in the app at least 14 days before the change takes effect. Continued use of Oweya after changes are effective constitutes acceptance of the updated policy.
11. Contact Us
For privacy-related questions or requests:
Email: support@oweya.us
Mailing address available upon request.