Privacy policy
What we keep, who sees it, and how to delete it.
Last updated 31 October 2026
- Parents hold the accounts. Kids never sign up, and appear by first name only.
- Your family information is shared with families in your pools as described below. If you choose to connect an AI assistant, selected schedule information and your own kids' first names are also shared with that assistant service.
- A driver's location is shared only while they choose to share it, only with their pool, and is wiped when they arrive.
- No ads, no selling your information, no tracking cookies.
- You can delete your account in the app, and your family's information goes with it.
Who we are
RideTurns (rideturns.com) is made by Holman Lane Publishing LLC ("we", "us"). This policy covers the RideTurns website, web app, iOS and Android apps, and optional assistant connections. Write to us at hello@rideturns.com with any question about it.
Who RideTurns is for
RideTurns is for parents and guardians, 18 or older, arranging rides for their own children with other families they know. Accounts belong to adults. Children do not have accounts, cannot sign in, and are not asked for anything.
What we collect
| Your email address | To send your sign-in link and code. It is not shown to other families. |
|---|---|
| Your first name and family name | So the other families in your pools know who is driving. |
| Your home address | Optional. Used to build directions when another parent picks up or drops off your kids. |
| Your kids' first names | Entered by you, so a ride can show who is in the car. We ask for first names only; please don't add surnames, photos or other details. |
| Pools and rides | The pools you join, and the rides in them: where, when, how many seats, who is driving, who is riding, and any note for the day. |
| Live location | Only when you are the driver and tap "Share my location". We keep your latest position only — never a history of where you went — and delete it when you tap "Arrived", hand the ride back or stop sharing. Anything left over is hidden after 12 hours. Positions older than 24 hours are removed when a later location-sharing request runs; this is not a guaranteed 24-hour deletion deadline. |
| Calendar feed address | A long random address for your personal calendar feed. Anyone who has it can read the rides in it, so keep it to yourself; you can replace it in the app at any time. |
| Technical logs | Our hosting providers record basic request information (such as IP address, browser type and time) to run and secure the service. We do not use it to profile you. |
We do not collect your contacts or photos, and RideTurns has no advertising trackers. Subscription performance information is handled as described under Purchases and subscriptions below. In the iOS and Android apps, location sharing may continue in the background after you choose to start it, including while using a maps app or locking your phone, until you stop sharing or tap Arrived. Browser sharing generally requires RideTurns to remain open. You can control location permission in your device settings.
Who can see your information
- Families in your pools see your family name, parents' first names, kids' first names, home address, the rides in that pool, day notes, and — while you share it — your live location. Families who are not in a pool with you see none of it.
- The other parent in your family, if you invite one, sees everything you do.
- Anyone you give your calendar feed address to can see the rides in it.
- Service providers who run RideTurns for us, listed below, under contracts that limit them to doing that.
- An assistant service you choose to connect receives the selected information described under Optional AI assistant connections.
- Authorities, only if the law requires it.
We do not sell or rent personal information, and we do not share it for advertising.
Safety reports and blocking
If you report a safety concern, we collect your report text, reason, account identifier and relevant pool or ride identifiers so we can investigate. Reports are restricted to authorized support administrators. Blocking preferences apply to your family. Safety reports may remain after account deletion where needed to investigate abuse or meet legal obligations.
Optional AI assistant connections
Connecting an assistant is optional. RideTurns works without one. When you approve a connection, the assistant service can receive your pool names, ride titles, dates, times, timezones, directions (pickup or drop-off), estimated duration, seat counts, rider counts, cancellation and driver-coverage status, whether you are driving, and your own kids' first names and ride bookings. Record identifiers are included so the assistant can identify rides and your children. Other families' children's names, home-address fields, day notes, invite and calendar links, and live coordinates are excluded. Pool names and ride titles may themselves identify a school or location or contain personal information; avoid sensitive details in these fields.
We store the connection's client identifier, name, permissions and creation date. If you allow suggestions, we also store proposed actions, related ride and child identifiers, a ride snapshot, summaries, timestamps and your approval or rejection. Suggestions expire after ten minutes and do not change a ride unless you approve them in RideTurns. Old suggestions are removed during later suggestion requests after thirty days; this is not a guaranteed thirty-day deletion deadline.
The assistant provider handles information under its own terms, privacy policy and account settings, including retention and any training controls. Review those settings before connecting. Disconnect in Pools → AI assistants to stop future RideTurns tool access. Disconnecting or deleting your RideTurns account does not erase information already received by the assistant provider or saved in its conversations; use that provider's controls for those copies.
Destination search
School suggestions use a directory bundled with RideTurns. Choosing “Find other places” sends your entered search text and IP address to Photon, operated by komoot, for OpenStreetMap place results. RideTurns does not include your account identifier, family records, ride schedule or live location in that request. Search text may itself contain personal information. Recent results remain in memory while the app is open; destinations you select are saved with the ride.
Service providers
| Supabase | Stores RideTurns' database and manages sign-in. |
|---|---|
| Resend | Delivers sign-in emails. |
| Cloudflare | Hosts the website and app. |
| OpenStreetMap | Provides the map tiles shown when you watch a driver's live location. Like any website, it sees your IP address when your phone fetches the map. |
| Apple and Google | If you use the iPhone or Android app, deliver it and, if you turn on reminders, show its notifications. Reminders are scheduled on your phone; we don't send them. |
When you tap a directions link, it opens Google Maps, Apple Maps or Waze with the addresses for that ride. What those apps do with it is covered by their own privacy policies.
Purchases and subscriptions
If you subscribe through the iPhone or Android app, Apple or Google processes your payment. We use RevenueCat to validate purchases, restore access, maintain subscription status and understand subscription performance. RevenueCat receives your RideTurns account identifier, purchase history, product and transaction details, subscription status, locale and currency information. We do not send RevenueCat your children's names, pool schedules, addresses or live location. We do not receive your full payment-card details from these store purchases.
Subscription records may be retained after an account is deleted where needed for refunds, fraud prevention, financial records or legal requirements. Deleting your RideTurns account does not cancel a store subscription; cancel it in your Apple or Google account. The store and RevenueCat retain their own records under their policies and applicable obligations.
Children
RideTurns is not directed to children and we do not knowingly collect personal information from children under 13. Kids appear in RideTurns only as a first name a parent has typed in, attached to rides that parent's pool can see. If you believe a child has created an account, write to us and we will delete it.
How long we keep it
We keep your information while your account exists. Live locations are deleted as described above. When you delete your account, your account and name are deleted immediately; if you were the last parent in your family, the family, its address and your kids' names are deleted too, and they come off every ride. Rides you created stay with the pool, because the other families rely on them. Deleted information may remain in restricted backups and provider logs until those copies expire or are securely deleted. We limit access to these copies and use them for recovery, security or legal requirements. A documented retention schedule must be established before making a more specific promise.
Your choices and rights
- See and correct your information on the Pools tab at any time.
- Leave a pool from the Pools tab: your kids come off its upcoming rides and it no longer sees your family.
- Delete your account from the Pools tab. To request account deletion without signing in, email hello@rideturns.com from your account email with the subject “RideTurns account deletion.” We may verify ownership before processing the request.
- Get a copy of your information, or ask anything else, by writing to hello@rideturns.com. We will answer within 30 days.
Depending on where you live, you may have further rights under local law, such as the right to know what we hold, to delete it and to correct it. We honour those requests for everyone, wherever you live.
Security
Everything travels over encrypted connections. The database enforces who can see each row, so one pool cannot read another's information even if the app has a bug, and every change is checked against who is asking. Sign-in normally uses one-time links and codes. Accounts with an existing password can also sign in with that password. No system is perfectly secure; if we learn of a breach affecting you, we will tell you.
Changes
If we change this policy in a way that matters, we will say so in the app before the change takes effect. The date at the top shows when it last changed.