Privacy Policy

1. Who is responsible for your data (controller)

TinyRiders is operated by Aviad Elisha as an individual, reachable at admin@tinyriders.app. For the purposes of the EU General Data Protection Regulation (GDPR), this makes Aviad Elisha the data controller for personal data processed through tinyriders.app.

2. What we collect

When a carpool group is set up, the group organizer enters the following for each participating family — you may not enter this yourself, but it's collected and processed the same way either way:

• Family name
• Home address (optional, used to help coordinate pickup logistics between families in the same group)
• Parent/guardian name, phone number, and email address

As you use TinyRiders, we also collect:

• Weekly driving availability you submit (which days/legs you can drive)
• Swap requests you make or respond to
• Chat messagesyou post in your group's weekly chat thread
• Reminder-email preferences(which categories of email you've opted into)
• Basic technical data needed to keep you signed in (a session cookie — see Section 7)

We do notcollect any data specifically about children (names, ages, schools, photos, or similar) — TinyRiders only stores information about the adult family members using the app. A home address, if provided, may indirectly relate to where a family's children live, but no child-specific fields exist in our system.

3. Why we process this data

We process this data because it's necessary to provide the carpool-scheduling service you or your group organizer signed your family up for: computing a fair driving rotation, letting families coordinate swaps, sending you the reminders you've opted into, and enabling group chat about the schedule. This is our legal basis under GDPR Article 6(1)(b) (performance of a service you or your organizer requested) and, for optional reminder emails, Article 6(1)(a) (your consent, which you can withdraw any time via the unsubscribe link in any reminder email).

4. Who else sees your data

We don't sell your data or share it for advertising. We use a small number of service providers (“processors”) who handle data strictly on our behalf, to run TinyRiders:

• Resend(resend.com) — sends transactional emails on our behalf (reminders, weekly schedules, swap notifications). Resend processes the recipient's name and email address, and the content of the email, solely to deliver it. Resend acts as our data processor for this purpose.
• Vercel — hosts the TinyRiders application and processes data as part of running our infrastructure.
• Our database hosting provider — stores the data described in Section 2 on our behalf.

None of these providers may use your data for their own purposes.

5. How long we keep your data

Family and parent data is retained for as long as your family remains part of a carpool group. Chat messages are automatically retained for the current week plus the prior 3 weeks (4 weeks total) and are pruned automatically after that — we don't keep a long-term chat archive. Past schedule records (which family drove on a given day, for fairness tracking) are retained even after a family leaves, but with the identifying link to that family removed once the family is deleted (see Section 6) — so historical fairness stats stay accurate without keeping personal data attached to them indefinitely.

6. How to have your data deleted

You can delete your own family's data at any time from Settings → Leave this carpool. This permanently removes your family's record, all parent contact details, availability history, swap requests, and chat messages from our database. If you can't access your invite link or need help, contact us at admin@tinyriders.appand we'll delete it on your behalf — carpool administrators can also remove a family's data directly from the admin panel.

7. Cookies

TinyRiders uses a single functional session cookie to keep you signed in to your family's or admin's session. It's required for the app to work and is not used for tracking, analytics, or advertising. We don't use any third-party analytics or tracking cookies.

8. Your rights

If you're in the EU/EEA, you have the right under GDPR to: access the personal data we hold about you; correct inaccurate data; request erasure (see Section 6); restrict or object to processing; and receive your data in a portable format. You can exercise any of these by contacting admin@tinyriders.app. You also have the right to lodge a complaint with your local data protection authority — in Austria, the Österreichische Datenschutzbehörde (dsb.gv.at).

9. Changes to this policy

If we make material changes to this policy, we'll update the effective date above.