Privacy Policy
Pinky ("we", "our", "us") is a women-only rideshare service. This policy explains what information we collect, why, and your rights over it.
Information we collect
- Account: email, full name, phone number, profile photo, authentication credentials.
- Identity verification: selfie image processed by Google Gemini to confirm the person matches the profile and meets our women-only policy. Selfies that pass automated verification with high confidence are deleted immediately. Selfies where Gemini's confidence falls below our automated-approval threshold are retained in private, access-controlled storage until a Pinky administrator completes manual review, after which they are deleted.
- Driver-only data: driver's license number and expiry, vehicle make/model/year/plate number.
- Location: precise GPS position while you are using the app, and during active rides in the background.
- Ride history: pickup and drop-off points, routes, timestamps, fare, rating, messages exchanged with your driver.
- Payment: handled entirely by Stripe. We never see or store full card numbers.
- Device: device type, OS version, app version, crash logs, push notification token.
How we use it
- Match riders to nearby verified drivers and calculate fares.
- Share your live location with your driver during an active ride and with designated safety contacts if you request it.
- Detect route deviations and trigger safety checks.
- Prevent fraud and enforce our women-only policy.
- Send transactional emails (ride receipts, password resets, account changes).
Sharing
We share data with the following service providers:
- Supabase — application backend, authentication, database, and private storage for pending identity reviews.
- Stripe — card processing, Apple Pay, driver payouts via Stripe Connect.
- Google — identity verification via Gemini, address autocomplete and geocoding via Google Places, optional Google sign-in via OAuth.
- Apple — push notifications via APNs, payment processing via Apple Pay.
- Cloudflare — website hosting, CDN, and DNS. Cloudflare may see your IP address when you visit our marketing site.
- Resend — transactional email delivery for ride receipts, password resets, and internal safety alerts.
- Law enforcement — only when legally required.
We do not sell personal data.
Retention
- Ride history: 24 months.
- Identity verification images: deleted immediately after an automated high-confidence check, or immediately after manual admin review for cases that fell below the automated-approval threshold.
- Account data: kept while your account is active. Deleted within 30 days of account deletion.
- Legal records (tax, dispute resolution): up to 7 years where required.
Your rights
You can request access, correction, export, or deletion of your data at any time by contacting us at support@pinkygo.com. You can delete your account from the app's profile screen.
Children
Pinky is not for users under 18. We do not knowingly collect data from minors.