Privacy policy

Who this is for

This policy describes how Juneau Carpool handles information when you create an account, post a ride, or get in a neighbor's car. It is a draft for this app — not a substitute for a lawyer. If we change it in a way that matters, we will update this page and the date at the top.

Juneau Carpool is a shared-expense carpool board for Juneau, Alaska. It is not a taxi, not a payment company, and not a data broker.

What we collect

Account. Email and password if you sign up that way, or the name, email, and photo Google or X send us if you continue with those. We do not see your Google or X password. Sign-in with Google or X goes through Grok's login broker; that broker holds those companies' keys, not us.

Profile. The first name you choose, neighborhood, whether you usually drive or ride, optional workplace, optional car description, optional bio, optional Venmo and PayPal usernames, and optional photo. We also record when you accepted the terms.

Rides. From, to, pickup spot, date, time, seats, notes, and — if you are asking for a ride — how much you say you would chip in for gas. If you ask to join, we store that ask and the pickup you picked.

Reviews. Stars and optional comments after an accepted ride, from the people in that car only.

Chat. Short messages between a driver and an accepted rider so you can find each other. After both of you leave a review, we delete that thread. We do not keep a copy.

Session. A sign-in cookie (or a temporary token in the live preview) so you stay logged in. The sign-in system may store a browser type and IP on the session row.

Location

If you tap Use my location while already driving, we try your phone's GPS. If that isn't available, we may use a coarse network location (city-level) from the request, and only if it is in Juneau. We do not store a live trail or follow you around town. You can always tap a landmark or type a street instead. The ride we save is the stop you chose, not your house number, unless you typed that into a note yourself.

What we do not collect

We do not process payments. We never see your Venmo, bank, or card password. A suggested gas share is a number on a listing, not a charge. Venmo and PayPal buttons open those companies' sites. Handles are shown only after a ride is accepted.

We do not run background checks, pull driving records, or read your contacts, photos (except the one you upload), or microphone.

We do not sell your list, rent it, or use it for ads.

How we use it

To run the board: show rides, match asks, show profiles and reviews, and open a private chat after a driver accepts.

To keep the town safer in a small way: a real first name, a photo, and reviews tied to a ride you actually shared.

To enforce the terms — for example, removing a fake profile.

We do not use your rides to train public AI models or to advertise other products.

Who can see what

Signed-in neighbors can see profiles, posted rides, pickup names, suggested gas amounts, and reviews. That is the point of a carpool board in a town of 30,000.

Chat is only between the driver and the accepted rider on that ride.

Your email and password stay on the account, not on the public profile.

If we host the app on a cloud database (when this is deployed for real), that host stores the same tables we already use. In the sandbox preview, data can disappear when the preview resets.

How long we keep it

Account, profile, rides, joins, and reviews stay until you ask us to delete the account, or until we close the app.

In-ride chat is deleted when both people have reviewed that ride.

Cancelled rides stay in the database as cancelled so the other person can see what happened; they are not offered as open seats.

Your choices

You can edit your profile, photo, and bio any time.

You can cancel a ride you posted.

You can stop using the app. Reviews already written stay, because the other person relied on them.

If you want your account and profile removed, contact the operator of Juneau Carpool and ask. We will delete what we reasonably can. We may keep a record that is needed to handle a safety report or a legal request.

You can turn off location in the browser. The app still works if you type a street or pick a stop from the list.

Notice at collection (CCPA / CPRA)

California's Consumer Privacy Act, as amended by the CPRA, asks businesses to say up front what they collect and why. This carpool may never hit the size that law calls a “business.” We still post the same notice, and we honor the rights below for everyone who uses the app, not only California residents.

In the last 12 months we have collected these categories of personal information, from you (and, if you sign in with Google or X, from that provider). We use them only to run the carpool, keep accounts secure, and enforce the terms. We do not sell them or share them for cross-context behavioral advertising.

• Identifiers — name, email, account id, IP address.
• Customer records — profile, neighborhood, optional workplace and vehicle.
• Commercial information — rides you post or join, pickup spots, suggested gas-share amounts. We do not take payment.
• Internet activity — sign-in session, browser type.
• Geolocation — GPS or a coarse network ping if you tap Use my location while driving, or the Juneau landmark or street you pick. We keep the pickup you chose, not a tracking trail.
• Sensory data — the profile photo you upload, or the photo Google/X send.
• Inferences — we do not build advertising profiles.

Sensitive personal information

Account login details can count as sensitive under California law. We use them only to sign you in. We do not use sensitive information to advertise, and we do not sell it. You do not need a separate “limit the use” request for that — we already limit it.

We do not collect Social Security numbers, driver’s license images, bank or card numbers, or data about race, religion, health, or union membership.

We do not sell or share

We do not sell personal information. We do not share it for cross-context behavioral advertising (the CPRA meaning of “share”). We do not sell or share the personal information of people we know are under 16.

Because we do not sell or share, there is no “Do Not Sell or Share My Personal Information” switch to flip. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request not to sell or share — which is already how we operate.

Your CCPA consumer rights

If California law applies to you — and, as a matter of how we run this app, if you use Juneau Carpool from anywhere — you can:

• Know / access. Ask what categories and specific pieces of personal information we have about you, where they came from, why we use them, and whether we sold or shared them (we have not).
• Delete. Ask us to delete personal information we have about you, subject to the exceptions below.
• Correct. Ask us to fix information that is wrong. You can also edit your profile yourself.
• Opt out of sale or sharing. You may make this request. There is nothing to opt out of today because we do not sell or share.
• Limit use of sensitive personal information. You may make this request. We already use sensitive information only to run the account and pick a stop.
• Non-discrimination. We will not deny the app, charge a different price, or give a worse experience because you used these rights.
• Appeal. If we say no, you can ask us to look again. If you are still unsatisfied, California residents may contact the California Privacy Protection Agency.

How to make a request

Contact the operator of Juneau Carpool and say what you want: know, delete, correct, opt out, or limit. Name the email on the account. We will need to verify it is you — usually by sending a note to that email or asking you to sign in.

You may use an authorized agent. The agent must show they have permission, and we may still need to verify you directly.

We will confirm we got the request within 10 days and answer within 45 days. If we need another 45 days, we will say why.

We can say no when the law allows it — for example, to finish a ride already in motion, to keep a review the other person relied on, to detect fraud or abuse, to follow a legal duty, or if we cannot verify it is you. If we keep something, we will say which exception we used.

You can make a know or delete request twice in 12 months at no charge. If requests become repetitive or baseless, the law lets us decline or charge a reasonable fee; we will explain if that ever happens.

Kids

Juneau Carpool is for people 18 and older. We do not knowingly collect information from children. If we learn a profile belongs to someone under 18, we will remove it.

Security

Passwords are stored hashed, not in plain text. Ride pages and profiles require a signed-in account. Chat is limited to the two people on an accepted ride.

No app is perfectly safe. Do not put a social security number, bank card, or anything you would not say at Fred Meyer into a profile, note, or chat.

Alaska, California, and the law

We handle this information in the United States. These practices are meant to match a small local carpool, not a national ad network.

If a court or law requires us to hand over records, we may have to. We will not volunteer your rides to marketers.

California residents keep the rights in this policy even if we later decide CCPA’s dollar or headcount thresholds do not apply to us.