Privacy Policy

At Kova, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our rideshare platform.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Name and surname
• Email address
• Phone number, used for notifications and account security
• Date of birth, used to confirm you meet our age requirement
• University affiliation
• Graduation year
• Gender (optional)
• Profile picture (optional)

1.2 Driver Verification Information

For drivers, we collect additional information for safety verification:

• Driver's license information and images
• Insurance documents
• Vehicle information, including make, model, and license plate
• Driving history questionnaire responses

This information is self reported by the driver. Kova does not run background checks and relies on the accuracy of what each driver submits.

1.3 Location Information

While you are on an active, matched ride, we collect the location of both the rider and the driver. That location is visible to the two of you on that ride. You may choose to share your live location with a friend from within the app. We may share aggregated and anonymized location trends with business partners, for example overall ride activity on campus. That data cannot be used to identify you personally.

1.4 Messages Between Riders and Drivers

Riders and drivers can message each other through the app to arrange ride details, including price and payment method. We store these messages, but we only review them if there is a dispute, safety concern, or investigation. We do not routinely monitor message content.

1.5 Emergency Contact Information

If you choose to add an emergency contact for our safety features, we collect that person's name and phone number. We only use it if you activate a safety feature that involves contacting them. By adding an emergency contact, you confirm that you have their permission to share their name and phone number with us.

1.6 Waitlist Information

If you sign up for our waitlist for a school where Kova is not yet available, we collect your email address and school. We use this solely to notify you when Kova becomes available there.

2. How We Use Your Information

We use your information to:

• Create and manage your account
• Verify driver credentials and ensure safety
• Facilitate messaging between riders and drivers
• Enable location sharing during active rides and our safety features
• Notify you when Kova expands to your school, if you've joined our waitlist
• Communicate with you about your account
• Share aggregated and anonymized data with business partners for promotional and sponsorship purposes
• Improve our services and user experience
• Comply with legal obligations

3. Data Storage and Security

3.1 Where We Store Your Data

All user data is stored securely using Google Firebase Cloud Firestore, which provides:

• End-to-end encryption in transit (TLS/SSL)
• Encryption at rest
• Enterprise-grade security infrastructure
• Regular security audits and compliance certifications

3.2 Authentication

We use Firebase Authentication for secure user login:

• Email/password authentication with industry-standard encryption
• Phone number verification using SMS codes
• Email verification links sent securely
• Passwords are never stored in plain text

3.3 Document Storage

Driver verification documents (license and insurance) are stored as base64-encoded images in our secure Firestore database. These documents are:

• Only accessible to authorized Kova administrators
• Used solely for verification purposes
• Encrypted at rest and in transit
• Automatically deleted if your account is deleted

4. Data Sharing and Disclosure

We do not sell your personal information to third parties.

4.1 Within the Platform

Limited information is shared with other users:

• Your name and profile picture are visible to other users
• Your university (for students)
• Driver verification status (verified/not verified badge)

4.2 Business Partners

We may share aggregated and anonymized data, such as overall ride activity or campus trends, with business partners and sponsors. This data cannot be used to identify you personally. If you redeem a discount or perk from a business partner, that business does not receive any information that identifies you.

4.3 Service Providers

We work with trusted third-party service providers:

• Firebase/Google Cloud: Data storage and authentication
• Expo: Mobile app development and delivery

4.4 Legal Requirements

We may disclose your information if required by law, such as to:

• Comply with legal processes (subpoenas, court orders)
• Protect the rights and safety of Kova and its users
• Prevent fraud or illegal activity

5. Your Privacy Rights

You have the right to:

• Access: View all personal information we have about you
• Update: Edit your profile information at any time
• Delete: Request deletion of your account and all associated data
• Export: Request a copy of your data in a portable format

To exercise these rights, contact us at help@ridekova.com or use the "Delete Account" option in your profile settings.

6. Account Deletion

When you delete your account:

• Your profile is immediately removed from the platform
• All personal information is permanently deleted from our databases
• Driver verification documents are permanently deleted
• This action cannot be undone

We may retain certain information for a limited period to comply with legal obligations or resolve disputes.

7. Data Retention

We retain your information for as long as your account is active. If you delete your account, we permanently delete your data within 30 days, except where we're required by law to retain it longer.

8. Children's Privacy

Kova requires all users to be at least 18 years old. We ask for your date of birth when you create an account, and we block account creation for anyone who enters a birth date showing they're under 18. We rely on the information you provide and do not independently verify your age. If we later learn that a user misrepresented their age, we will delete their account.

Our waitlist, for students at schools where Kova is not yet available, is not intended for children under 13. If we learn we've collected information from a child under 13 through the waitlist, we will delete it.

9. International Users

Your information may be transferred to and stored on servers located in the United States. By using Kova, you consent to this transfer.

10. Email and Phone Verification

We use your email and phone number solely for:

• Account verification
• Password reset requests
• Important account security notifications
• Service updates (you can opt out)

We will never sell your contact information or send spam.

11. Cookies and Tracking

Our mobile app does not use cookies. We use Firebase Analytics to understand how users interact with our app, which may collect:

• Device type and operating system
• App usage patterns (anonymized)
• Crash reports to improve stability

This data is anonymized and cannot be used to identify you personally.

12. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

• Updating the "Last Updated" date at the top
• Sending you a notification within the app
• Emailing you (for major changes)

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: help@ridekova.com

14. Your Consent

By using Kova, you consent to this Privacy Policy and our collection, use, and storage of your information as described herein.