Privacy Policy

Effective Date: July 1, 2026  |  Last Updated: July 1, 2026

Vroom ("Vroom," "we," "us," or "our") is a rideshare platform that connects riders with drivers. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

1. Information We Collect

a. Information You Provide Directly

• Account information: Name, email address, phone number, and profile photo when you register an account.
• Driver information: Vehicle make, model, year, license plate, and driver's license details submitted during driver onboarding.
• Payment information: Payment card details are collected and processed by our payment partner, Stripe, Inc. Vroom does not store full card numbers on our servers.
• Communications: Messages, support requests, or feedback you send to us.

b. Information Collected Automatically

• Location data: With your permission, we collect precise GPS location in real-time when you use the Service. Riders share location for pickup matching; drivers share location continuously while the app is open and during rides. We may collect background location data to improve pickup accuracy and provide live ride tracking.
• Device information: Device type, operating system, unique device identifiers, and mobile network information.
• Usage data: Features you use, screens you visit, app crashes, and performance data.
• Push notification tokens: A device token used to deliver ride-request and status notifications via Expo's push notification service and Firebase Cloud Messaging (FCM).

c. Information from Third Parties

• Firebase (Google LLC): We use Firebase for authentication, real-time database storage (Firestore), and crash reporting. Firebase may collect device identifiers and usage data in accordance with Google's Privacy Policy.
• Stripe, Inc.: Our payments processor. Stripe collects and stores your payment card information under its own Privacy Policy.
• Twilio, Inc.: We use Twilio to send one-time passcodes (OTPs) via SMS for phone number verification. Twilio receives your phone number to deliver these messages.

2. How We Use Your Information

• To create and manage your Vroom account.
• To match riders with nearby available drivers.
• To provide real-time GPS tracking during a ride for safety and navigation.
• To process payments and issue receipts.
• To send SMS verification codes via Twilio during account sign-in.
• To send push notifications about ride requests, driver arrival, and trip status updates.
• To detect and prevent fraud, abuse, or safety incidents.
• To analyze usage trends and improve the Service.
• To respond to customer support inquiries.
• To comply with legal obligations.

3. Sharing Your Information

We do not sell your personal information. We share information only in the following circumstances:

• Between riders and drivers: A rider's pickup/dropoff location and first name are shared with the matched driver. A driver's name, vehicle details, and real-time location are shared with the matched rider during a trip.
• Service providers: We share information with Firebase, Stripe, and Twilio solely to provide the Service.
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights, property, or safety of Vroom, our users, or the public.
• Business transfers: If Vroom is acquired or merges with another entity, your information may be transferred as part of that transaction.

4. Location Data

Location data is the core of our Service. Here is how we handle it:

• We request "When In Use" location permission for riders to show their current position on the map and identify pickup points.
• We request "Always On" (background) location permission for drivers to stay visible to nearby riders while the app is active.
• Location is transmitted to our servers and stored in Firebase Firestore. Real-time driver locations are purged from the active tracking database once a trip ends.
• You may revoke location permissions at any time in your device settings, though doing so will impair or disable the Service.

5. Data Retention

• Account data is retained for as long as your account is active. You may request deletion at any time (see Section 9).
• Trip records (origin, destination, fare, timestamp) are retained for up to 7 years for tax, legal, and fraud-prevention purposes.
• Push notification tokens are refreshed automatically and deleted when you log out or uninstall the app.
• SMS OTP codes expire within 10 minutes of issuance and are not stored after use.

6. Data Security

We implement industry-standard security measures including HTTPS/TLS encryption in transit, Firebase Security Rules restricting database access to authenticated users, and server-side API key management. No method of transmission or storage is 100% secure; we cannot guarantee absolute security but take commercially reasonable steps to protect your information.

7. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will promptly delete it.

8. Your Choices and Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated personal data.
• Portability: Request your data in a portable format.
• Opt-out of push notifications: Disable notifications in your device settings at any time.
• Opt-out of SMS: Reply STOP to any SMS message from Vroom to unsubscribe (note: this will disable OTP sign-in).

To exercise any of these rights, contact us at the address in Section 11.

9. Account Deletion

To delete your Vroom account and all associated personal data, contact us at privacy@vroomhere.com with the subject line "Account Deletion Request." We will process your request within 30 days. Note that certain trip records may be retained for legal and financial compliance purposes.

10. California Privacy Rights (CCPA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion of your personal information, and to not be discriminated against for exercising your privacy rights. We do not sell personal information as defined by the California Consumer Privacy Act (CCPA). To submit a request, contact us at privacy@vroomhere.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

12. Contact Us