Privacy Policy

This Privacy Policy explains how 1wagon (“1wagon,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when you use our mobile application, website, support channels, and related services (collectively, the “Services”). It also describes the choices and rights available to you.

1wagon is a coordination platform. It helps travelers discover and communicate with other travelers who may independently choose to share a taxi, cab, rideshare, or other third-party transportation service. 1wagon does not provide transportation, book rides, dispatch or control drivers, process fares, or insure journeys.

1. Scope

This Policy applies to information processed through the Services. It does not control how independent third parties—including transportation providers, airlines, app stores, social networks, or websites you choose to visit—process information under their own policies.

2. Information we collect

Account and profile information

• Display name, telephone number, internal account identifier, profile photo, home city, age or date-of-birth information, self-described gender, and matching preferences.
• Optional public social handles, notification preferences, verification status, trust status, blocks, account restrictions, and support correspondence.
• Authentication and session information needed to verify account access. One-time passcodes expire and are handled by our authentication provider.

Trip, travel, and matching information

• Selected airport, terminal, hub, trip origin and destination, approximate pickup area, timing and waiting window, luggage information, and trip status.
• Flight number, arrival information, flight-verification result and source, and limited cached flight details.
• Potential-match calculations, match requests and responses, accepted connections, cancellations, completed trips, and trip outcomes.

Location information

With your permission, we may process precise device location to determine whether you are near or inside a supported hub, suggest a trip origin, display your position privately on a map, locate nearby opportunities, verify hub presence, prevent spoofing, and notify you when you arrive at a supported airport. Arrival notifications may require background location permission.

Coordinates submitted solely for hub-presence verification are evaluated server-side and are not stored as a historical GPS trail. We may separately retain a user-selected or derived trip origin, destination, approximate pickup area, or presence result when required to operate a trip. Other users do not receive your raw device coordinates. They may see an approximate route, distance, origin, destination, or “Verified at Hub” status.

Location is required to use 1wagon. Because 1wagon exists to verify real travelers and match them for shared rides, granting location permission is required to use the app. From the location we access, we also derive an approximate value — rounded to a neighborhood-scale grid (about 11 meters), never a precise or exact position — to understand where the 1wagon community is concentrated so we can decide where to launch and improve matching. This approximate location is stored by us and is not sold and not shared with third parties. You can revoke location permission at any time in your device Settings, which stops all location collection (and limits app functionality).

Communications and safety information

• Messages sent in trip rooms, ratings, rating tags and comments, reports, blocks, moderation decisions, and records needed to investigate abuse or safety incidents.
• Content you send to support and information you voluntarily provide when reporting a concern.

Device, diagnostics, and usage information

• Device and operating-system type, app version, language, time zone, IP address, push token, permission state, and network or session information.
• Feature interactions, app screens, performance information, crash reports, diagnostic logs, and security events. We configure our third-party analytics and error-monitoring systems to avoid sending phone numbers, names, chat text, flight numbers, raw or precise coordinates, or full destination addresses; those providers may derive an approximate region from your IP address. (Approximate, neighborhood-scale location for optional community insights is described under “Location information” above and is stored by us, not those providers.)

When you visit our public website, Vercel Web Analytics records anonymous, aggregate page-view information such as the page visited, referrer, approximate country or region, device type, operating system, and browser. It does not use cookies, retain IP addresses as personal identifiers, or associate a website visit with a 1wagon account. Its anonymous visitor hash resets every 24 hours.

Information from others

We may receive information from flight-data providers, mapping and routing providers, app stores, notification services, analytics and error-monitoring providers, other users, public sources used for safety investigations, and authorities making valid legal requests.

3. How we use information

• Create, authenticate, maintain, and secure accounts.
• Operate traveler discovery, matching, trip rooms, ratings, notifications, and support.
• Verify limited facts such as control of a phone number, flight details, or presence inside a hub geofence.
• Personalize results using timing, route, proximity, preferences, blocking relationships, and safety restrictions.
• Detect spam, fraud, impersonation, spoofing, harassment, and misuse.
• Investigate reports, enforce our Terms and Community Guidelines, and protect users and the public.
• Measure performance, debug errors, improve the Services, and manage provider capacity.
• Comply with law and establish, exercise, or defend legal claims.

We do not use precise location, messages, phone numbers, flight numbers, profile names, or full destination addresses for advertising. Our current matching system uses rules and database calculations, not artificial intelligence. A match score is an estimate, not a guarantee of compatibility, availability, identity, or safety.

4. Verification has limits

A phone, photo, flight, hub-presence, or rating indicator confirms only the limited technical check it describes. It is not a government-ID check, criminal-background check, endorsement, promise of character, or safety guarantee. City trips do not receive airport flight or hub-presence verification unless expressly stated.

5. How we disclose information

Other users

To enable matching, we may show another user your display name, profile photo, selected profile details, optional social handles, aggregate rating information, applicable verification indicators, approximate trip information, and messages you choose to send. We do not intentionally show other users your authentication credentials, private reports, telephone number, or raw device coordinates.

Service providers

Providers may process information for us to operate hosting, authentication, databases, storage, realtime messaging, notifications, maps, routing, address search, flight verification, email, analytics, error monitoring, and website hosting. Current providers may include Supabase, Apple, Google, Expo, Sentry, PostHog, Vercel, Resend, flight-information providers, and mapping or routing providers. They may process information only for contracted services and under applicable legal obligations.

Legal and safety disclosures

We may preserve or disclose information when reasonably necessary to comply with law or valid legal process; respond to an emergency involving danger of death or serious injury; investigate fraud, abuse, or unlawful conduct; enforce our agreements; protect rights and safety; or establish and defend legal claims.

Business transfers

Information may be disclosed in connection with a financing, merger, acquisition, restructuring, bankruptcy, sale of assets, or similar transaction, subject to appropriate safeguards.

6. No sale or behavioral advertising

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising or use it for targeted advertising. We do not knowingly sell or share personal information belonging to anyone under 18.

7. Retention

We retain information for as long as reasonably necessary to operate the Services, maintain security, prevent repeat abuse, investigate incidents, comply with law, and establish or defend legal claims. Active profile information remains while an account is active. Trip, match, room, message, rating, block, report, moderation, and serious safety records may be retained for safety review and platform integrity. Push tokens are removed after account deletion or prolonged inactivity; flight cache entries expire according to short operational time limits.

When an account is deleted, we remove it from active use and delete or de-identify profile information. We may retain narrowly limited trip, room, safety, fraud-prevention, moderation, and transactional-integrity records where necessary to protect another user, preserve evidence, comply with law, or defend legal claims. Retained records are not used for unrelated marketing. Residual copies may remain in encrypted backups until those backups expire through their ordinary cycle.

8. Account deletion and data requests

You can initiate deletion in the app: Profile → Settings → Delete account. You may also follow our external deletion instructions or email privacy@1wagon.com.

Deletion ends active trips and pending requests, archives active rooms, removes the account from matching, removes the active profile photo and push tokens, revokes sessions, and deletes or de-identifies profile information. Certain records may be retained for the limited reasons described above. Requests requiring manual handling are ordinarily completed within 30 days after identity verification.

9. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, or obtain a portable copy of personal information; restrict or object to certain processing; withdraw consent; appeal a denied request; and receive information about collection and disclosure. We will not discriminate against you for exercising an applicable right.

Send requests to privacy@1wagon.com. We may verify your identity and an authorized agent's authority before responding. Because we do not sell personal information or use it for targeted advertising, we do not currently offer sale or targeted-advertising opt-outs.

10. California notice

California residents may request the categories and specific pieces of personal information we maintain, sources, business purposes, recipient categories, correction, and deletion, subject to legal exceptions. Precise geolocation is used only to provide requested features, maintain safety and security, and for other legally permitted purposes. We do not sell personal information or share it for cross-context behavioral advertising.

11. Security

We use administrative, technical, and organizational safeguards designed to protect information, including encrypted transport, managed encryption at rest, authentication controls, access restrictions, database row-level security, private storage controls, and monitoring. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur.

12. Children

The Services are only for people age 18 or older. We do not knowingly collect personal information from children. Contact us if you believe a minor has created an account.

13. International processing

1wagon operates from the United States. Information may be processed in the United States and other countries where our providers operate. Where required, we use legally recognized transfer safeguards.

14. Changes to this Policy

We may update this Policy as our Services, practices, or legal obligations change. We will revise the effective date and provide additional notice for material changes where required.

15. Contact

1wagon
Privacy: privacy@1wagon.com
Support: hello@1wagon.com
Account deletion: 1wagon.com/delete-account