Privacy Policy

App: CommunityRide – Carpool App
Developer: Ajanta LLC
Last updated: August 2026
Contact: ajantallc.2020@gmail.com

This version of our policy is provisional while it completes independent legal review. We will publish the final wording here, and we will tell you if anything material changes.

This Privacy Policy describes how Ajanta LLC ("we", "us", or "our") collects, uses, and shares information when you use the CommunityRide – Carpool App ("App"). It is written for users in both the United Kingdom and the United States.

1. Who is responsible for your data

Ajanta LLC is the data controller for the personal data described in this policy. Contact: ajantallc.2020@gmail.com. Registered details: [company registration number — to be added], [registered address — to be added]. UK ICO registration: [ICO registration number — to be added]. We have not appointed a statutory Data Protection Officer; privacy questions go to the contact address above. Where a UK representative is required, that detail is [UK representative — to be added].

Your community administrator also receives some of your personal data, including the identity documents you upload, so that they can verify who is joining their community. A written data-sharing arrangement governs that relationship and limits the administrator to using the information for verification and community safety.

2. Data we collect

• Account details: Name, email address, profile photo and sign-in method provided via OAuth sign-in (Google or Apple).
• Membership and address: Full name, phone number, community affiliation and your address within the community.
• Identity documents: Documents you upload for membership verification, such as a driving licence and proof of address. The camera is used only to capture these.
• Vehicle details: Make, model, colour and registration as you enter them.
• Precise geolocation: Collected from a driver only while a ride is active and the app is in the foreground, to show live position and ETA to the riders on that ride.
• Ride history: Pickup addresses, destinations, scheduled times and completed rides.
• Ratings: Scores and review comments.
• Messages: Messages sent between members through the app.
• Emergency contact: If you choose to provide one.
• Payment handle: A handle or reference used so members can settle a cost contribution directly between themselves. We do not collect or store bank account numbers or card details, and we do not process payments.
• Device information: Device push token for notifications.

3. Why we use it, and our lawful basis

For readers in the United Kingdom, UK GDPR and the Data Protection Act 2018 require a lawful basis for each use of your data. Ours are as follows.

• Performance of a contract: creating and operating your account, matching ride requests with drivers, showing ride details to the people on a confirmed ride, and sending service notifications about your rides.
• Legitimate interests: keeping members safe, verifying membership, preventing fraud and misuse, investigating complaints, maintaining ratings so the community can trust each other, and keeping audit records of significant actions. We balance these interests against your rights and will explain that assessment on request.
• Consent: sharing your precise location during an active ride. You give this through the device permission prompt when you start sharing, and you can withdraw it at any time by stopping location sharing or turning the permission off. Withdrawal does not affect processing carried out beforehand.
• Legal obligation: where the law requires us to keep or disclose information, for example in response to a valid request from a regulator, a court or the police.

4. Who we share it with

• Community members: Your name, vehicle details and driver rating are visible to approved members of your community.
• Community administrators: Admins can view membership details and uploaded identity documents for verification purposes.
• Members of your active ride: Location data is shared only with them, and only while the ride is active.
• Service providers: We use third-party services for authentication (Google/Apple OAuth), cloud hosting (Railway), file storage, mapping and push notifications. These providers process data on our behalf, under contracts that limit them to our instructions.
• We do not sell your personal information to third parties.

5. How long we keep it

• Ride history: 12 months.
• Identity documents: for the duration of your active membership, then deleted.
• Messages: 12 months.
• Audit logs: 24 months.

Account details are kept while your account exists and are removed when you delete it, except where we must keep something to meet a legal obligation.

6. Your rights

If you are in the United Kingdom you have the right to access your data, to have inaccurate data corrected, to have your data erased, to restrict how we use it, to receive a portable copy, to object to processing based on our legitimate interests, and to withdraw consent where we rely on it.

You can delete your account and its associated data yourself, in the app, from the Profile screen. For anything else, email ajantallc.2020@gmail.com. We respond within one month, and will tell you if we need longer because the request is complex.

7. Complaints

If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk.

8. International transfers

Your data is currently processed on infrastructure located in the United States. Where personal data is transferred out of the United Kingdom, we rely on the UK International Data Transfer Agreement, or on the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment for the receiving country. You can ask us for a summary of those safeguards.

9. Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), JWT-based authentication, secure cloud storage, and access controls that limit identity documents to your community administrator.

10. Children

The App is not intended for anyone under 18. Accounts must not be created by or on behalf of a person under 18. If we learn that an account belongs to a child, we will delete it.

11. United States and California

If you are in the United States, you keep the rights you already had. Residents of California and other states with comparable laws may request access to, correction of, or deletion of their personal information, may ask what categories we collect and disclose, and will not be discriminated against for exercising those rights. We do not sell personal information or share it for cross-context behavioural advertising. Email ajantallc.2020@gmail.com to make a request.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the App or email. Continued use of the App after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, please contact:
Ajanta LLC
Email: ajantallc.2020@gmail.com