Privacy Policy

RideFlow is operated by Ngo Nhut Nguyen, an individual based in Vietnam. RideFlow is offered globally through the app and RideFlow public pages.

Depending on how you use RideFlow, data may include account and profile details, trips, members, itinerary information, photos or videos you share, shared expenses, notification choices, content or member reports, moderation decisions, and messages you send to support.

We process data to operate the features you request, protect accounts, synchronize trips with authorized members, send notifications you choose, handle reports and prevent abuse, and provide support when you contact us. RideFlow does not sell personal data.

RideFlow uses Supabase for Auth and data, Resend for transactional email, Google when you choose Google sign-in, Firebase/APNs/FCM for notifications, Mapbox and Geoapify for map or place features when you use them, Apple (on iPhone) or Google (on Android) speech recognition and Google Gemini for the voice assistant, and VietQR (Casso) to open your bank app filled in when you pay by bank transfer. We share only the data needed for those services to operate.

When you talk to the assistant, your phone's speech recognition turns your words into text - Apple's on iPhone, Google's on Android; RideFlow does not keep audio. To understand and answer, the text of what you said - together with the open trip's details, such as its stops, notes, expenses, and members' names - is sent to the Google Gemini API for that turn. RideFlow does not keep the trip details it sent. The text of each turn, the actions the assistant took, and their outcome are kept for 90 days to improve the assistant, then deleted; you can turn this off with Help the assistant learn in Settings.

When you pay by bank transfer from a trip, RideFlow opens the bank app you choose, and the transfer happens in your bank app. RideFlow never moves, holds, or receives money, and does not read your bank data. For bank apps that accept filled-in details, the recipient's account number and bank, the amount, and any content the QR code carries are sent to VietQR's deeplink service (Casso) to open your bank app filled in; RideFlow sends nothing that identifies you. RideFlow does not keep the recipient's account number: only the expense you choose to save to the trip is kept, like any other expense.

Camera, photos, microphone, location, and notifications are requested only in the context of their feature. You can change permissions in device settings. Turning a permission off can limit the feature that depends on it.

We retain data for as long as needed to provide RideFlow, resolve disputes, protect safety, or meet legal obligations. Account-deletion operational receipts are retained for up to 30 days; report and audit data are retained only as needed for safety, abuse prevention, or disputes. You can review account-deletion instructions on the Delete account page. For privacy questions, contact support@rideflow.tech.