Privacy Policy (DPA)

Last updated: 26 October 2026 (version 2026-10-26)

This Privacy Policy provides information on the processing of personal data in connection with the use of Ride-Share.

1. Data controller

Ride-Share
Raphael Spanyar
Steingasse 41, 4538 Oberbipp BE, Schweiz
Email: info@ride-share.ch

2. Data collected

Depending on use, we process in particular the following data:

  • Profile data: name, email address, profile picture, gender (optional), an “About me” text, your travel preferences and the languages you speak. Others only see your name shortened to your first name and the initial of your last name (e.g. “Anna M.”). Your public profile shows this name, your profile picture, “About me”, travel preferences and languages to anyone who opens it.
  • Vehicle data: make, model, colour, features, licence plate, seats, vehicle photo.
  • Location and route data: departure, destination, stops and the corresponding coordinates.
  • Booking and payment data: booked rides/seats, payment method, transaction and invoice data; for Stripe payouts, additionally the drivers' bank and identity data (processed by Stripe).
  • Payout details: chosen payout method and TWINT phone number or IBAN if you choose a manual payout as a driver; optionally your phone number for verification.
  • Communication content: chat messages, contact requests before booking, problem reports about a booking, contact form.
  • Other data: ratings, notifications, saved rides, ride alerts and ride requests (searched places, day and number of people), acceptance of the T&C, and technical usage data. An alert with a departure and a destination is shown to everyone under “Requested rides” – only the places, the day and the number of seats, without your name or a link to your profile.

3. Purpose of processing

Data is processed in order to provide and arrange rides, to handle payments and payouts, to verify users, for communication (including emails about new rides for your ride alerts and reminders before and after a booked ride), for the security of the services, and to comply with legal obligations (e.g. invoicing and retention obligations).

4. Processors and third parties

To provide the services, we use carefully selected providers:

  • Stripe – credit card and TWINT payments and automatic driver payouts (Stripe Connect).
  • TWINT – payment processing (processed through Stripe).
  • MongoDB Atlas – database hosting.
  • Render – hosting of the web app and the API (Render Services, Inc., USA; servers located in Frankfurt, EU).
  • Resend – sending confirmations, invoices and notifications by email (Resend, Inc., USA; servers located in Ireland, EU); contact-form messages are received in a mailbox hosted by Infomaniak (Switzerland).
  • Photon by komoot (Germany) and OSRM – place and address suggestions as you type and route calculation, both based on OpenStreetMap data. For the suggestions, your browser sends the place name or address you type directly to Photon – for an address together with the location of the chosen place. For routes, our server sends OSRM only the coordinates of the start, stops and destination.
  • transport.opendata.ch – comparison with public transport (SBB).
  • Umami Analytics – anonymous, cookie-less web statistics (e.g. page views and visitor numbers); no cookies are set and no personal data is stored.

Data is only disclosed where there is a legal obligation or with your consent.

Disclosure abroad: Some of these providers (in particular Stripe, Render, Resend and MongoDB Atlas) also process data in the USA or in other countries outside Switzerland. Transfers are based on Art. 16 et seq. of the Swiss Data Protection Act, in particular on the Swiss–U.S. Data Privacy Framework where the provider is certified, or on the EU Commission's standard contractual clauses with the adaptations required for Switzerland.

5. Retention

Data is retained for as long as is necessary for the respective purpose. Rides, bookings, and invoice and payout data are kept until the account is deleted; bookings on the rides of a deleted account are removed with those rides, together with their invoice data. Chat histories are automatically deleted 1 month after the ride. A ride alert for one day is deleted after that day, one for any day after 90 days – or earlier if you delete it yourself. When you delete your account, your personal data is removed, including your rides together with their bookings, your bookings, ratings, ride alerts, and invoice and payout data. Stripe retains payment data under its own rules.

6. Rights of data subjects

You have the right to access, rectification, erasure, restriction of processing and objection. In your profile you can at any time export your data as a file (“Export data”) and delete your account.

7. Contact

Data protection requests can be sent to info@ride-share.ch.