Driver Privacy Policy
1. Introduction
This Driver Privacy Policy ("Policy") describes how Green Yellow Red LLC, doing business as GYR-Rides ("GYR-Rides," "we," "us," or "our"), collects, uses, shares, and protects personal information of drivers ("Driver," "you," or "your") who use our platform, mobile applications, websites, and services (collectively, the "Services").
By using the GYR-Rides Driver application or Services, you agree to the collection, use, and sharing of your information as described in this Policy. If you do not agree with this Policy, please do not use our Services.
This Policy should be read in conjunction with the Driver Agreement and Acceptable Use Policy and the SaaS Agreement.
2. Information We Collect
2.1 Information You Provide
We collect information you provide directly to us, including:
| Category | Examples |
|---|---|
| Account Information | Name, email address, phone number, password, profile photo |
| Identity Verification | Driver's license, date of birth, Social Security Number (last 4 digits), government-issued ID |
| Phone Verification & 2FA | Phone number used for SMS-based account verification and two-factor authentication (2FA); verification codes delivered via Twilio, Inc.; verification status and timestamps |
| Vehicle Information | Make, model, year, color, license plate number, VIN, registration documents |
| Insurance Information | Insurance provider, policy number, coverage details, proof of insurance documents |
| Payment Information | Bank account details for payouts, credit/debit card for subscription fees |
| Background Check Data | Criminal history, driving record, sex offender registry status (obtained from Checkr, Inc.) |
| Communications | Messages with Riders, support requests, feedback, reviews |
2.2 Information Collected Automatically
When you use our Services, we automatically collect:
| Category | Examples |
|---|---|
| Location Data | Real-time GPS location, trip routes, pickup/dropoff locations (see Section 5 for details) |
| Device Information | Device type, operating system, unique device identifiers (IDFA, IDFV, Android Advertising ID), mobile network information, IP address |
| App Usage Data | App activity, features used, time spent on app, online/offline status |
| Trip Data | Date and time of trips, distance traveled, trip duration, route taken, fare information |
| Performance Data | Acceptance rate, cancellation rate, completion rate, ratings received |
| Driving Behavior | Speed, acceleration, braking patterns (if enabled for safety features) |
2.3 Information from Third Parties
We may receive information about you from third parties, including:
- Checkr, Inc. (Background Checks): Criminal history, driving records (Motor Vehicle Reports), sex offender registry results, identity verification results. Checkr processes your Social Security Number, date of birth, and driver's license information to conduct these screenings. Checkr may also send you SMS notifications regarding the status of your background check (e.g., initiated, completed, action required). These SMS messages are sent directly by Checkr and are separate from GYR-Rides' Twilio-based communications. You may opt out of Checkr's SMS notifications by following the instructions in the messages you receive from Checkr; opting out of Checkr SMS does not affect email invitations or notifications from Checkr. See Checkr's Privacy Policy for details on how they handle your data.
- Twilio, Inc. (SMS Verification & 2FA): Phone number verification status, SMS delivery confirmation, and related metadata. Twilio processes your phone number to deliver verification codes. See Twilio's Privacy Policy.
- Insurance Providers: Policy status and coverage verification
- Payment Processors (Stripe): Transaction history, payment verification
- Government/DMV: License status, vehicle registration information
- Riders: Ratings, reviews, feedback, and complaints
3. How We Use Your Information
3.1 Providing and Improving Services
- Process your Driver application and verify eligibility
- Verify your identity via SMS-based two-factor authentication (2FA) at registration and each login
- Match you with Riders and facilitate ride requests
- Process payments and payouts
- Provide customer support
- Improve and optimize our platform and services
- Develop new features and services
3.2 Safety and Security
- Conduct background checks via Checkr, Inc. and ongoing safety monitoring
- Verify your identity and prevent fraud using 2FA
- Monitor driving behavior for safety purposes
- Investigate accidents, incidents, and complaints
- Protect the safety of Riders, Drivers, and the public
- Detect and prevent illegal or unauthorized activity
3.3 Communications
- Send ride requests and notifications
- Send SMS verification codes for authentication
- Communicate about your account, trips, and payments
- Send promotional offers and updates (with your consent)
- Respond to your inquiries and support requests
3.4 Legal and Compliance
- Comply with legal obligations and regulatory requirements
- Respond to law enforcement requests and legal processes
- Enforce our terms and policies
- Protect our rights and property
4. Information Sharing
We may share your information with the following parties:
4.1 With Riders
When you accept a ride request, we share with the Rider:
- Your first name and profile photo
- Your vehicle information (make, model, color, license plate)
- Your real-time location during the trip
- Your Driver rating
4.2 With Service Providers
We share information with third-party service providers who perform services on our behalf:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe, Inc. | Payment processing & payouts | Bank account details, transaction data, subscription fees |
| Twilio, Inc. | SMS verification & two-factor authentication (2FA) | Phone number, verification codes, delivery status, IP address |
| Checkr, Inc. | Background checks & screening | Name, SSN (last 4), date of birth, driver's license number, address |
| Mapbox | Maps, navigation & routing | Location data, route information |
| Firebase (Google) | Push notifications & analytics | Device tokens, app usage data |
| Amazon Web Services | Cloud hosting & storage | Encrypted application data |
4.3 With Authorities
We may share information when required by law or to:
- Comply with legal processes (subpoenas, court orders)
- Respond to government or regulatory requests
- Cooperate with law enforcement investigations
- Protect the safety of individuals or the public
- Protect our rights, property, or safety
4.4 Business Transfers
If GYR-Rides is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.
4.5 With Your Consent
We may share your information with other parties when you provide consent.
We do not sell your personal information to third parties for their marketing purposes.
5. Location Data
5.1 How We Collect Location Data
We collect location data from your device when:
- You are logged into the Driver app (whether online or offline)
- You are completing a trip
- The app is running in the background (with your permission)
5.2 How We Use Location Data
We use location data to:
- Match you with nearby Riders
- Calculate fares based on distance and route
- Show Riders your real-time location during trips
- Provide navigation and route optimization
- Detect and investigate incidents or accidents
- Comply with regulatory requirements
- Improve our services and platform
5.3 Location Data Controls
You can control location data collection:
- App Permissions: You can disable location permissions in your device settings, but this will prevent you from using the Driver app
- Going Offline: Location tracking is reduced (but not eliminated) when you go offline in the app
- Background Location: You can disable background location access in your device settings
Note: Location data collection is required to use the GYR-Rides Driver app. If you do not consent to location data collection, you cannot use our Services.
6. Data Retention
We retain your information for as long as necessary to provide our Services and fulfill the purposes described in this Policy. Specific retention periods include:
| Data Type | Retention Period |
|---|---|
| Account Information | Duration of account + 7 years |
| Trip Data | 7 years from trip date |
| Location Data | 90 days (detailed), 7 years (aggregated) |
| Payment Records | 7 years (tax/legal requirements) |
| Background Check Results | Duration of account + 3 years |
| SMS Verification & 2FA Logs | 90 days (phone number retained with account) |
| Communications/Support | 3 years from last communication |
| Safety Incident Records | 7 years or as required by law |
After the retention period, we will delete or anonymize your information, unless retention is required by law.
7. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption: Data encrypted in transit (TLS/SSL) and at rest
- Two-Factor Authentication: All Driver accounts are secured with SMS-based 2FA at every login
- Access Controls: Limited access to personal data on a need-to-know basis
- Secure Infrastructure: Industry-standard cloud security (AWS)
- Monitoring: Continuous monitoring for security threats and breaches
- Employee Training: Regular security awareness training for employees
Your Responsibility: You are responsible for maintaining the security of your account credentials. Do not share your password or 2FA verification codes with anyone. Notify us immediately if you suspect unauthorized access to your account.
8. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
8.1 Access and Portability
You can request a copy of your personal information by contacting us at privacy@gyr-rides.com.
8.2 Correction
You can update most of your account information directly in the Driver app. For other corrections, contact us.
8.3 Deletion
You can request deletion of your account and personal information. You can delete your account directly in the app via Settings > Account > Delete Account, or by emailing privacy@gyr-rides.com. Note that we may retain certain information as required by law or for legitimate business purposes (see Section 6).
8.4 Opt-Out of Marketing
You can opt out of promotional communications by:
- Clicking "unsubscribe" in marketing emails
- Adjusting notification settings in the app
- Contacting us at privacy@gyr-rides.com
8.5 California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to know what personal information we collect and how it is used
- Right to delete your personal information
- Right to opt-out of the sale of personal information (we do not sell your information)
- Right to non-discrimination for exercising your privacy rights
To exercise your California privacy rights, contact us at privacy@gyr-rides.com.
8.6 How to Exercise Your Rights
To exercise any of these rights, please:
- Email: privacy@gyr-rides.com
- Include your full name and email associated with your Driver account
- Specify which right(s) you wish to exercise
We will respond to your request within 30 days (or as required by applicable law).
9. Third-Party Services
Our Services integrate with third-party services. These third parties have their own privacy policies:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Payment processing & payouts | stripe.com/privacy |
| Twilio | SMS verification & 2FA | twilio.com/legal/privacy |
| Checkr | Background checks & screening | checkr.com/privacy-policy |
| Mapbox | Maps & navigation | mapbox.com/legal/privacy |
| Firebase (Google) | Push notifications & analytics | firebase.google.com/support/privacy |
| AWS | Cloud hosting | aws.amazon.com/privacy |
We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies.
10. Children's Privacy
Our Services are not intended for individuals under 21 years of age. We do not knowingly collect personal information from anyone under 21. If we learn that we have collected information from a person under 21, we will delete that information immediately.
11. Apple App Store & Google Play Disclosures
11.1 App Tracking Transparency (iOS)
On iOS devices, GYR-Rides respects Apple's App Tracking Transparency (ATT) framework. Before collecting your Identifier for Advertisers (IDFA) or tracking your activity across other companies' apps and websites, we will request your permission through Apple's ATT prompt. You may change your tracking preferences at any time in your device settings under Settings > Privacy & Security > Tracking.
11.2 App Privacy Details (Privacy Nutrition Labels)
In accordance with Apple App Store and Google Play requirements, the following summarizes the data the GYR-Rides Driver app collects:
| Data Type | Collected | Purpose | Linked to Identity |
|---|---|---|---|
| Name | Yes | App functionality, account management | Yes |
| Email Address | Yes | App functionality, communications | Yes |
| Phone Number | Yes | App functionality, 2FA authentication | Yes |
| Government ID / License | Yes | Identity verification, regulatory compliance | Yes |
| Payment Info | Yes | Subscription fees, payouts (via Stripe) | Yes |
| Precise Location | Yes | App functionality (ride matching, navigation, fare calculation) | Yes |
| Device ID | Yes | Analytics, app functionality | Yes |
| Driving Behavior | Yes | Safety monitoring | Yes |
| Crash Data | Yes | Analytics, app improvement | No |
| Performance Data | Yes | Analytics, app improvement | No |
11.3 Account Deletion
In compliance with Apple App Store Review Guidelines (Section 5.1.1(v)) and Google Play policies, GYR-Rides provides the ability to delete your account and associated data directly within the app:
- In-App: Navigate to Settings > Account > Delete Account
- By Email: Send a request to privacy@gyr-rides.com
Upon account deletion:
- Your account is deactivated immediately and you will be logged out
- Personal data (name, email, phone, profile photo, license info) is deleted within 30 days
- Outstanding earnings will be paid per normal payout schedule
- Trip data, payment records, and background check results may be retained for up to 7 years as required by tax and legal obligations
- Aggregated, de-identified data that cannot identify you may be retained
12. Changes to This Policy
We may update this Policy from time to time. When we make material changes, we will:
- Update the "Last Updated" date at the top of this Policy
- Notify you through the Driver app or by email
- Provide you an opportunity to review the changes before they take effect
Your continued use of the Services after changes take effect constitutes your acceptance of the updated Policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:
Green Yellow Red LLC (d/b/a GYR-Rides)
- Privacy Inquiries: privacy@gyr-rides.com
- Driver Support: driversupport@gyr-rides.com
- General Support: support@gyr-rides.com
- Website: https://gyr-rides.com