Privacy Policy

1. Introduction

Cosmic Threads, Lda., with registered address at Rua José António Cruz, 112 1º Esq., 4715-343, Braga, Portugal ("we," "us," or "our"), operates the OkCommuter mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.

By accessing or using OkCommuter, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Phone number
• Password (stored in hashed form)

2.2 Location Data

To match you with nearby commuters and display routes, we collect your location when you use the app. This includes your pickup and drop-off addresses, and real-time location during active rides. You can disable location access in your device settings, though this will limit core functionality.

2.3 Ride and Usage Data

• Ride history (routes, dates, times, co-passengers)
• Ride preferences (smoking, pets, music, conversation level)
• Ratings and reviews you give or receive
• In-app messages exchanged with other users
• Search queries and filters used

2.4 Device and Technical Data

• Device type, operating system, and version
• Unique device identifiers
• IP address
• App version
• Crash reports and performance data
• Browser type and language (for the web app)

3. How We Use Your Information

We use the collected information to:

• Provide, operate, and maintain the Service
• Match drivers and passengers based on routes and schedules
• Calculate and split ride costs between participants
• Facilitate communication between ride partners
• Verify user identity and maintain trust and safety
• Send ride confirmations, reminders, and updates
• Process payments and refunds
• Improve and personalize your experience
• Analyze usage patterns to enhance the Service
• Detect, prevent, and address fraud or abuse
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services that may collect or process your data:

• Google Analytics — to understand how users interact with our website and app, helping us improve the Service. Google Analytics collects anonymized usage data such as pages visited, session duration, and device type.
• Mapbox — to display maps and calculate routes. When you use map features, your location data is processed by Mapbox in accordance with their privacy policy.
• Firebase (Google) — for push notifications, authentication, and crash reporting.
• Google Play Services — for app distribution and in-app updates on Android devices.

Each third-party provider operates under its own privacy policy. We encourage you to review their policies to understand how they handle your data.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data in the following cases:

• With ride partners: Your name, profile photo, rating, and pickup location are shared with drivers or passengers you are matched with.
• With service providers: We share data with trusted third-party vendors who assist in operating the Service (hosting, analytics, notifications), bound by confidentiality agreements.
• For legal compliance: We may disclose information when required by law, court order, or government request, or to protect the rights, safety, or property of OkCommuter and its users.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law (e.g., financial records, legal disputes). Anonymized and aggregated data may be retained indefinitely for analytics purposes.

7. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL) and at rest, secure authentication mechanisms, and regular security assessments. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction (including under the EU General Data Protection Regulation), you may have the right to:

• Access — Request a copy of the personal data we hold about you.
• Rectification — Correct inaccurate or incomplete personal data.
• Erasure — Request deletion of your personal data ("right to be forgotten").
• Data portability — Receive your data in a structured, machine-readable format.
• Restriction — Request that we limit the processing of your data.
• Objection — Object to processing based on legitimate interests or direct marketing.
• Withdraw consent — Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at contact@okcommuter.com. We will respond within 30 days. You may also delete your account directly within the app under Account Settings.

9. Children's Privacy

OkCommuter is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at contact@okcommuter.com.

10. Cookies

Our website uses cookies and similar technologies to improve your browsing experience, analyze site traffic, and understand user behavior. Cookies we use include:

• Essential cookies — Required for the website to function (e.g., session management, authentication).
• Analytics cookies — Help us understand how visitors use the website (via Google Analytics). These collect anonymized data such as pages visited and time spent.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain features.

11. International Data Transfers

Your data may be processed in countries other than your own, including countries within the European Economic Area (EEA) and the United States. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or in-app notification. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

• Entity: Cosmic Threads, Lda.
• Address: Rua José António Cruz, 112 1º Esq., 4715-343, Braga, Portugal
• Email: contact@okcommuter.com
• Website: https://okcommuter.com
• Support: /Support