Plain-Language Summary
RydeHub is a Saskatchewan technology platform that connects riders with drivers and intercity trip hosts. We collect the information we need to run rides safely, process payments, and meet Canadian legal requirements, and nothing we don't need. We do not sell your personal information, and we do not track you across other companies' apps or websites for advertising. Drivers and hosts give us more information than riders (such as a driver's licence, background check, and banking details) because the law and safety require it. Your location is collected only in connection with using the service, as described in Section 6. You can access, correct, or delete your information, and withdraw consent, as described in Section 10. Questions go to our Privacy Officer at privacy@rydehub.com.
1. Who We Are & Your Privacy Officer
This policy is issued by RydeHub Inc. ("RydeHub," "we," "us," "our"), located in Saskatchewan, Canada. We are accountable for the personal information in our custody and control.
Our collection, use, and disclosure of personal information is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA), SC 2000, c. 5, and other applicable Canadian law.
We have designated a Privacy Officer who is accountable for our compliance with this policy and PIPEDA. You can reach the Privacy Officer at privacy@rydehub.com.
2. Scope: Who and What This Covers
This policy applies to everyone who uses RydeHub, in three overlapping roles:
- Riders: people who request or take rides (on-demand city rides or intercity Out-of-Town (OOT) seats).
- Drivers: independent contractors who provide commercial on-demand and intercity rides.
- OOT Hosts: private individuals who share an intercity trip on a cost-sharing basis.
A single person may hold more than one role (for example, a driver who also rides). Where data practices differ by role, we say so. Sections that begin "If you are a Driver" or "If you host OOT trips" apply only when you act in that role.
RydeHub operates in Saskatchewan, Canada. If you use the platform from elsewhere, Canadian federal law and Saskatchewan law govern this policy.
3. Personal Information We Collect
3.1 Information everyone provides (account & profile)
- Legal name (first and last)
- Email address and/or mobile phone number (at least one is required to create an account)
- Profile photo (optional for riders; required for drivers and hosts so other users can identify you)
- Optional profile details you choose to add (e.g., gender, pronouns)
- Emergency contacts you choose to add, and the contacts you choose to share a trip with
We verify your phone number by SMS one-time code. You provide most of this directly; some is created automatically when you use the app (Section 3.6).
3.2 Location information
- Precise (GPS) location and approximate location, collected in connection with rides as detailed in Section 6.
- Pickup and drop-off addresses, and any saved or recent locations (e.g., home, work) you add.
3.3 Payment information
- Payment card details are collected and stored by our payment processor, Stripe, not by RydeHub. We retain only limited information such as the card brand, last four digits, a Stripe token/customer reference, and your transaction and wallet history.
- Wallet top-ups, balances, ride charges, tips, refunds, and cancellation fees.
3.4 If you are a Driver: additional information
Because commercial driving is regulated under Saskatchewan's The Vehicles for Hire Act and because we must verify eligibility and pay you, we also collect:
- Date of birth (you must be at least 21, the SGI ride-share minimum)
- Social Insurance Number (SIN): used only for tax reporting; stored encrypted
- Proof of eligibility to work in Canada
- Driver's licence details and images; driving abstract / record from the provincial authority
- Vehicle details (make, model, year, colour, plate, VIN) and registration
- Proof of automobile insurance and a vehicle inspection certificate
- Criminal Record Check and, where applicable, Vulnerable Sector Check results
- GST/HST registration (if applicable)
- Canadian bank account details for payouts, collected and held by Stripe (Stripe Connect), not stored by RydeHub
- Earnings, payout, ride acceptance/decline, and performance records
3.5 If you host OOT trips: additional information
- Your driver's licence and vehicle information (to confirm you can lawfully drive the trip)
- Confirmation of valid personal automobile insurance
- Trip listings, the contributions you receive, and payout records (settled via Stripe)
3.6 Information collected automatically when you use RydeHub
- Device and technical data: device model, operating system, app version, mobile carrier and network type, language, IP address, and unique device/installation identifiers
- Usage data: screens viewed, features used, searches for addresses, in-app interactions, ratings given, and crash/diagnostic data
- Trip data: origin, destination, route, distance, duration, timestamps, fare or contribution, payment method, tip, and the driver/host or rider involved
3.7 Information from third parties
- Background-check and provincial licensing/insurance verification results (for drivers/hosts)
- Information from our payment processor (e.g., payout and verification status)
3.8 Communications and content
- In-app messages between riders and drivers/hosts (including the participants, time, and content)
- Support conversations, ride-issue reports, and survey responses
- Ratings and written reviews
Sensitive information. Some of what we collect is sensitive: precise location, financial details, government identifiers (SIN), driver's licence, and background-check results. We treat it with heightened care, limit who can access it, and collect it only for the purposes below.
4. Why We Collect It & Our Lawful Basis (PIPEDA)
Under PIPEDA we collect, use, and disclose personal information with your consent (express or implied), or as permitted or required by law. We limit collection to what is necessary for these purposes:
| Purpose | Basis |
|---|---|
| Create and manage your account; provide the rides and features you request | Performance of our agreement with you (implied consent) |
| Match riders with drivers/hosts; calculate prices, fares, contributions; process payments and payouts | Performance of our agreement with you |
| Verify identity, eligibility, and safety requirements; run background checks (drivers/hosts) | Legal requirement (Vehicles for Hire Act) and our legitimate safety interest |
| Keep users safe; detect, investigate, and prevent fraud, unsafe conduct, and policy violations | Legal requirement and legitimate safety interest |
| Tax reporting and financial record-keeping (e.g., SIN, earnings) | Legal requirement (Income Tax Act; CRA; FINTRAC) |
| Provide customer support and resolve disputes | Performance of our agreement with you |
| Send service messages (booking, driver arrival, completion, account, document renewals) | Performance of our agreement; you cannot opt out of essential service messages |
| Send optional promotional messages | Your express consent (opt-in); you may opt out at any time |
| Improve and secure the platform using analytics and aggregated/de-identified data | Legitimate business interest |
We do not make decisions producing significant effects about you based solely on automated processing without a lawful basis; see Section 14.
5. How We Use Your Information
In service of the purposes in Section 4, we use your information to: operate ride matching and dispatch; display the limited profile details other users need (Section 7); process payments, payouts, tips, and refunds; verify drivers and hosts and keep documents current; monitor and investigate safety incidents; provide support; send notifications; comply with tax, financial, and transportation law; and analyze usage in aggregate to improve reliability, routing, pricing, and safety.
6. Location Data (please read)
Location is central to a ride service, so we explain what we collect and when. The amount we collect depends on your role and what you are doing.
Riders. We collect your device's precise (GPS) location while the RydeHub app is open and in use, from when you open the app to find a ride until that trip ends. While you have an active ride, we may also collect it while the app is running in the background (open but not on your screen, or your phone locked), so your driver can reach you. We use rider location to show nearby drivers, set your pickup point, route the trip, and support safety features such as sharing your trip with a trusted contact.
Drivers and OOT hosts. Providing rides requires continuous location, so while you are online and available or on a trip, we collect your precise (GPS) location, including while the app is running in the background (open but not on your screen, or your phone locked). This lets us match you to nearby requests, route trips, and show your live location to your rider during the trip. We stop collecting your location as soon as you go offline.
We never ask for "Always" location access. RydeHub collects your location only while you are actively using the service in one of the roles above, and never at other times.
Your controls. You can change or revoke location permission at any time in your device settings. Riders who turn it off can still use RydeHub by entering a pickup address manually. Drivers and hosts who restrict or disable location may be unable to receive or complete trips. Turning off location does not by itself delete your account. We do not use your location for advertising and we do not track you across other companies' apps or websites.
Retention of location. Location data is part of your trip records. We retain it for as long as your account is active and as necessary to provide the service, support safety, resolve disputes, and meet our tax, insurance, legal, and regulatory obligations, and we de-identify or delete it when it is no longer needed for those purposes. When you delete your account, the location tied to your trips is de-identified along with those trip records (see Section 9).
7. How We Share Your Information
We do not sell your personal information, and we are not a data broker. We share it only as described here.
With other users, to make a trip work:
- A driver/host sees the rider's first name, profile photo, rider rating, pickup and (after acceptance) drop-off location.
- A rider sees the driver's/host's first name, profile photo, rating, completed-trip count, and vehicle details (make, model, colour, plate). During an active trip, the rider sees the driver's/host's live location.
- We do not share your phone number directly between users; in-app contact is masked.
With service providers (processors) who act on our behalf under agreements requiring them to protect your information to PIPEDA standards:
| Function they perform | What it does for us | Information involved |
|---|---|---|
| Payment processing (Stripe, Inc.) | Payments, wallet, and driver/host payouts (Stripe Connect); PCI-DSS Level 1 | Name, email, phone, payment method, transaction amounts; for drivers/hosts, bank/payout and tax details |
| Mapping and navigation (Google Maps) | Maps, routing, geocoding, ETAs | Location coordinates and addresses |
| Cloud hosting, database, and authentication | Runs the platform and securely stores your account data and documents | Account data, uploaded documents, and most platform data |
| Notification and message delivery | Delivers ride alerts and verification codes to your device | Device push tokens, phone number, and notification content |
| Infrastructure, caching, and security | Keeps the service fast and protects it against abuse | Transient technical and location data |
| Diagnostics and reliability monitoring | Tells us when something breaks so we can fix it | Crash and error diagnostics, which may include identifiers |
| Artificial intelligence services | Generating the vehicle icon shown on the map | Vehicle make, model, and colour |
We describe these providers by the function they perform rather than by name, so that this policy stays accurate as our providers change. To ask which providers we currently use, contact our Privacy Officer.
Google services. RydeHub uses Google Maps for mapping, routing, and location features, and other Google services for notification delivery and vehicle icon generation. Your use of these features is also subject to the Google Privacy Policy.
For verification: background-check and licensing/insurance verification providers receive the information needed to confirm driver/host eligibility.
For legal and safety reasons, we may disclose information: (i) to comply with applicable law, legal process, or a government or regulatory request (including the Canada Revenue Agency and Saskatchewan transportation authorities); (ii) to enforce our Terms and policies; (iii) to detect, prevent, or address fraud, security, or technical issues; or (iv) to protect the rights, property, or safety of any person. Where permitted, we will try to notify you first.
Business transfers: if RydeHub is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction; we will notify you and require the recipient to honour this policy.
8. Cross-Border Data Transfers
To provide the service, RydeHub and its service providers may process, store, or communicate your personal information outside your province of residence and outside Canada, including in the United States. Our payment, hosting, mapping, notification, and monitoring providers may process data in the U.S. or other countries, whose data-protection laws may differ from Canada's.
While your information is outside Canada, it may be accessible to foreign courts, law enforcement, and government authorities under that country's laws. We require our service providers, by contract, to protect your information to a standard consistent with PIPEDA and applicable Canadian law. By using RydeHub, you acknowledge these transfers. Questions about our cross-border practices can go to our Privacy Officer.
9. Data Retention & Deletion
We keep personal information only as long as needed for the purposes in this policy or as required by law, then delete or de-identify it.
Account deletion. You can request deletion in the app or by contacting us. There is a 30-day grace period during which you can cancel the request and your account is recoverable. On request we immediately stop push notifications and end active sessions. After 30 days we permanently delete your account.
What is deleted on permanent deletion: your user profile and login; saved locations; device tokens; wallet; stored profile photo and uploaded documents (driver/rider/host); and your Stripe customer record (and Stripe Connect account, where its balance is zero).
What is retained (de-identified) to meet legal obligations: financial and trip records (rides, tips, wallet transactions, refunds, cancellation fees, OOT host settlements, and driver earnings and payout records) are kept with your identifiers removed (set to null / "anonymized"). These are retained because Canadian law requires it.
Typical retention periods:
| Data | Retention |
|---|---|
| Account & profile (while active) | Life of your account |
| Financial & trip records (de-identified after deletion) | Up to 7 years (Income Tax Act / CRA ~6 yr; FINTRAC ≥5 yr; driver earnings ledger ~7 yr) |
| Location / route data | Kept with the related trip record; de-identified on account deletion |
| Support communications | About 3 years |
| Safety-incident records | 7 years, or the duration of any related legal proceeding if longer |
| Marketing-consent records | About 3 years from your last interaction |
| Declined driver applications | About 1 year, then securely deleted |
Safety holds. Where required to protect public safety or prevent fraud, we may retain limited records (for any user, rider or driver), for example to prevent a banned user from rejoining, for as long as that purpose requires. We limit such records to what is necessary.
10. Your Rights Under PIPEDA
- Access. You may request a copy of the personal information we hold about you; we will respond within 30 days. You can also export much of your data through the in-app data-export request (limited to one request per 7 days), which we deliver to your registered email.
- Correction. You can update most profile details in the app. For some fields (e.g., legal name or SIN) we may ask for supporting documentation.
- Withdraw consent. You may withdraw your consent to our collection, use, or disclosure at any time, subject to legal and contractual limits and reasonable notice. Withdrawing consent needed to provide or to lawfully operate the service (for example, a driver withdrawing consent to a background check or location) will mean we can no longer provide that service to you and may result in account deactivation.
- Deletion. You may request deletion as described in Section 9; some records must be retained or de-identified under law.
- Marketing choices. You can opt out of promotional messages at any time (email unsubscribe, reply STOP to texts, or device notification settings). Essential service messages continue.
When we may withhold access. PIPEDA permits us to withhold information in limited cases, for example, where disclosure would reveal another person's information, compromise a safety or fraud investigation, or is otherwise restricted by law. If we withhold information, we will tell you why, unless prohibited.
To exercise any right, contact privacy@rydehub.com. We may need to verify your identity first.
11. Cookies, Tracking & Analytics
Our public website sets no cookies at all. Where a signed-in web experience exists in future, it will use only strictly necessary session cookies, and we will say so here first. We do not use analytics, advertising, or cross-site tracking cookies. Basic preferences such as your theme are stored in your browser's local storage, not in a cookie. You can manage cookies through your browser; see our Cookie Policy for details.
Our mobile apps do not track you across other companies' apps or websites (our iOS apps declare no tracking), and we do not sell or "share" your information for targeted advertising.
12. Data Security
We take reasonable and appropriate measures to protect your information, including: encryption in transit (TLS/HTTPS) and at rest for sensitive data; encryption of SIN in a secured vault; role-based access limited to staff with a legitimate business need; multi-factor authentication for internal access; and regular security reviews. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.
Breach notification. If a privacy breach creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as PIPEDA requires, and keep records of breaches as required. We consider significant harm to include, for example, exposure of SIN, bank or payout details, government identification, criminal-record information, or precise location. Report a suspected issue to security@rydehub.com.
13. Children's Privacy
RydeHub is not directed to, and we do not knowingly collect personal information from, anyone under 18. You must be at least 18 to hold an account; drivers must be at least 21 (the SGI ride-share minimum). If we learn we have collected information from someone under the applicable age, we will delete it.
14. Automated Processing
We use automated systems to operate the service, for example, to match riders with nearby drivers, estimate prices and ETAs, and flag possible fraud or safety risks for review. Significant decisions (such as account deactivation) involve human review. You may ask us about the basis of a decision that affects you and request human review by contacting our Privacy Officer.
15. Third-Party Services & Our Accountability
When we engage service providers (Section 7), RydeHub remains accountable under PIPEDA for the personal information they process for us, and we bind them by contract to protect it. The platform may also contain links to third-party services we do not control (for example, an external website); we are not responsible for their privacy practices, and we encourage you to read their policies.
16. Changes to This Policy
We may update this policy. If we make material changes, we will notify you in advance through the app and/or by email before the changes take effect, and update the "Last Updated" date above. Continuing to use RydeHub after the effective date means you accept the updated policy.
17. Contact Us & Complaints
RydeHub Inc. · Saskatchewan, Canada
- Privacy Officer / privacy requests: privacy@rydehub.com
- Security issues: security@rydehub.com
- Rider support: support@rydehub.com
- Driver support: driver@rydehub.com
If we have not resolved your privacy concern to your satisfaction, you may contact the Office of the Privacy Commissioner of Canada: 30 Victoria Street, Gatineau, Quebec K1A 1H3 · 1-800-282-1376 · priv.gc.ca