The short version: ResqRide only collects what it needs to connect you with roadside help. We never sell your data. Location is only active during a service. Payments go directly to Stripe — we never see your card number. You can delete your account and all data at any time.
Introduction
ResqRide ("we," "our," or "us") operates the ResqRide mobile application and website. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what choices you have.
By creating an account or using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.
Data We Collect
Every category of data we collect, why we collect it, and whether it is ever sold.
| Data Type | Examples | Purpose | Sold? |
|---|---|---|---|
| Account Info | Name, email, phone, password (hashed) | Create and authenticate your account | Never |
| Vehicle Info | Make, model, year, license plate | Help providers identify your vehicle | Never |
| Location | GPS coordinates, address | Find nearby providers; share ETA | Never |
| Service Records | Service type, date, provider, cost | Billing history and receipts | Never |
| Payment Tokens | Stripe customer ID, last 4 digits | Process payments via Stripe | Never |
| Device Info | OS version, push token, app version | Push notifications; crash reporting | Never |
| Emergency Contacts | Names and phone numbers you add | Alert contacts during SOS mode only | Never |
| Support Messages | Chat messages with support or AI | Resolve your issue; improve responses | Never |
We do not collect: Social Security numbers, government-issued IDs, biometrics, camera roll, contacts (beyond emergency contacts you add), or browsing history.
Location Data
Location is the most sensitive data we handle. Here is the exact timeline of when it is active:
How We Use Your Data
- Provide, operate, and improve the Service
- Match you with available service providers
- Process payments and issue receipts
- Send push notifications about your active service request
- Send transactional emails (welcome, password reset, receipt)
- Respond to support requests
- Detect and prevent fraud or abuse
- Comply with legal obligations
We do not use your data for targeted advertising, behavioral profiling, or sale to third parties.
Sharing & Disclosure
Service providers you are matched with
When you accept a provider, they receive your first name, vehicle details, and service location. They do not receive your email, phone number, or payment information.
Infrastructure partners
| Partner | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Name, email, card token (card details stay within Stripe) |
| Apple / Google | Push notifications | Device push token only |
| OpenAI | AI support chat | Your support chat messages (no account info) |
| Resend | Transactional email | Email address and email content |
| RevenueCat | Subscription management | User ID and purchase receipts |
Legal requirements
We may disclose information if required by law or court order. We will notify you where legally permitted.
Payments & Stripe
All payment card processing is handled by Stripe, Inc. (PCI-DSS Level 1). When you add a payment method, your card number goes directly into Stripe's secure form — it never passes through ResqRide's servers. We store only your Stripe customer ID and last four digits for display.
For providers receiving payouts, Stripe Connect handles identity verification and bank account storage. ResqRide stores only your Stripe account ID.
Data Retention
- Account data: Retained until you delete your account, then erased within 30 days
- Service records: Retained for 3 years for billing disputes, then deleted
- Support chat: Retained for 12 months, then deleted
- Session tokens: Expire after 30 days of inactivity
- Location: Service address stored with the service record; raw GPS not retained beyond the active session
Security
- Passwords hashed with scrypt — even ResqRide cannot read your password
- All data transmitted over HTTPS / TLS
- Session tokens stored in device secure storage (Keychain on iOS, Keystore on Android)
- Database access restricted to server-side processes only
- Rate limiting on authentication endpoints to prevent brute-force attacks
If you discover a security vulnerability, please report it to privacy@resqride.co.
Your Rights
How to delete your account
Email privacy@resqride.co with "Delete My Account" from the email on your account. We confirm deletion within 30 days. California and EU residents have additional rights — contact us to exercise them.
Children's Privacy
The Service is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us with data, contact us and we will delete it promptly.
Changes to This Policy
When we make material changes, we will notify you via email and in-app notification at least 14 days before the changes take effect. The "Last updated" date at the top reflects the most recent revision.
Contact Us
Questions, concerns, or data requests — we respond within 5 business days.