Last updated: March 16, 2026
ReefRide LLC ("ReefRide", "we", "us", or "our") operates a peer-to-peer vehicle sharing marketplace connecting vehicle owners ("hosts") with travelers ("guests") across the Hawaiian islands. This Privacy Policy describes the personal information we collect, how we use and share it, and the choices available to you regarding your information.
By creating an account, listing a vehicle, or making a booking on ReefRide, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use our services.
1. Personal Information We Collect
A. Information You Provide Directly
| Category | Examples |
|---|---|
| Account data | Name, email address, phone number, password |
| Profile information | Profile photo, mailing address, date of birth |
| Identity verification | Driver's license photo, selfie for identity confirmation, International Driving Permit (IDP) |
| Payment information | Credit/debit card details, bank account information for payouts (processed by Stripe; never stored on our servers) |
| Vehicle data (hosts) | VIN, license plate, make/model/year, photos, daily rate, availability, pickup location |
| Communications | Messages between guests and hosts, customer support inquiries, reviews and ratings |
| Insurance information | Insurance policy details, protection plan selections |
B. Information Collected Automatically
| Category | Examples |
|---|---|
| Usage data | Pages viewed, search queries, booking history, time spent on pages, click patterns |
| Device data | IP address, browser type and version, operating system, device identifiers, screen resolution |
| Location data | Approximate location derived from IP address; precise location only with your explicit opt-in consent (for pickup/delivery coordination) |
| Cookies & tracking | Session cookies, authentication tokens, referral attribution cookies (see Section 7) |
C. Information from Third Parties
- Sign-in providers: When you sign in with Google or Apple, we receive your name, email, and profile photo from those services.
- Identity verification partners: Stripe Identity provides verification results confirming whether your identity documents are valid.
- Payment processors: Stripe provides transaction status, dispute, and chargeback information.
2. How We Use Your Information
A. Providing and Improving Our Services
- Create and manage your account.
- Process vehicle bookings, payments, and refunds.
- Facilitate communication between guests and hosts.
- Verify your identity and driver eligibility.
- Manage host referral programs and track commissions.
- Provide customer support and respond to inquiries.
- Personalize your experience based on preferences and booking history.
- Develop, test, and improve our platform features.
B. Communications
- Send booking confirmations, pickup reminders, and trip status updates.
- Notify hosts of new bookings, vehicle returns, and reviews.
- Send account security alerts and verification prompts.
- With your consent, send promotional offers and marketing communications.
You can manage your communication preferences at any time from your profile settings. Transactional messages (booking confirmations, payment receipts, security alerts) cannot be opted out of as they are essential to the service.
C. Safety, Security, and Legal Compliance
- Detect and prevent fraud, unauthorized access, and illegal activity.
- Enforce our Terms of Service and resolve disputes.
- Comply with applicable Hawaii and federal laws, tax obligations, and insurance regulations.
- Respond to law enforcement requests and legal process.
3. How We Share Your Information
We do not sell your personal information. We share data only in the following circumstances:
A. With Other Users
When a booking is confirmed, we share limited information between guest and host to facilitate the trip:
- Guests see the host's name, profile photo, phone number, vehicle details, and pickup location.
- Hosts see the guest's name, profile photo, phone number, and verification status.
B. With Service Providers
We use trusted third-party service providers who process data on our behalf under strict data processing agreements:
- Payment processing: Stripe (PCI DSS Level 1 compliant)
- Identity verification: Stripe Identity
- Email delivery: SendGrid
- SMS delivery: Twilio
- Cloud infrastructure: Amazon Web Services (AWS)
- Real-time messaging: Pusher
C. For Legal and Safety Reasons
- When required by law, court order, subpoena, or government request.
- To protect the rights, safety, and property of ReefRide, our users, and the public.
- To investigate violations of our Terms of Service or suspected fraud.
- In connection with insurance claims related to vehicle damage or incidents.
D. Business Transfers
If ReefRide is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any change in ownership or control that affects your personal information.
4. Your Rights and Choices
A. Access and Correction
You can access and update most of your personal information directly through your account settings. For information that cannot be modified through the platform, contact us at privacy@reefride.co.
B. Data Deletion
You may request deletion of your account and associated personal data by emailing privacy@reefride.co. We will process your request within 30 days. Please note that we may retain certain information as required by law (e.g., tax records, insurance claims) or for legitimate business purposes (e.g., fraud prevention, dispute resolution).
C. Communication Preferences
- Email: Manage your email preferences from your profile settings or click the "Unsubscribe" link in any marketing email.
- SMS: Reply STOP to any SMS message to opt out. Reply HELP for assistance.
- Push notifications: Manage through your device's notification settings.
You cannot opt out of transactional communications essential to the service (booking confirmations, payment receipts, security alerts).
D. Location Data
You can disable precise location access through your device or browser settings. Approximate location derived from your IP address is used for service functionality (e.g., showing vehicles available on your island) and cannot be disabled.
5. Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specific retention periods:
| Data Type | Retention Period |
|---|---|
| Account information | Duration of account activity, deleted within 30 days of account closure request |
| Booking and payment records | 7 years (tax and insurance compliance) |
| Identity verification images | Deleted within 90 days of trip completion (retained longer if active dispute exists) |
| Messages between users | Duration of account activity |
| Server logs | 90 days |
| Referral tracking cookies | 30 days |
6. Data Security
We implement industry-standard security measures to protect your personal information:
- Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.2+.
- Encryption at rest: Sensitive data stored in our databases (AWS DynamoDB) is encrypted using AES-256.
- Payment security: All payment processing is handled by Stripe, a PCI DSS Level 1 certified provider. We never store credit card numbers on our servers.
- Access controls: Employee access to personal data is restricted on a need-to-know basis with role-based permissions.
- Audit logging: We maintain audit logs of access to sensitive systems and data.
No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee absolute security.
7. Cookies and Tracking Technologies
We use cookies and similar technologies for the following purposes:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Authentication, session management, security (CSRF protection) | Session / 30 days |
| Functional | Remember preferences (island selection, saved vehicles) | 1 year |
| Referral attribution | Track referral source for host commission attribution | 30 days |
| Analytics | Understand how visitors use our site (page views, navigation patterns) | 90 days |
We do not use third-party advertising trackers or sell data to advertising networks. We do not respond to Do Not Track (DNT) browser signals, as there is no industry standard for interpreting them. You can manage cookies through your browser settings.
8. SMS Communications
When you opt in to SMS notifications, we use your mobile phone number to send transactional messages related to your ReefRide bookings. These may include booking confirmations, pickup and return reminders, account security alerts, and service status updates.
- Consent: We obtain your express opt-in consent during checkout via an unchecked checkbox. Consent is not a condition of purchase.
- Opt-out: Reply STOP to any SMS message. You will receive one confirmation message and no further texts. You may also email support@reefride.co to revoke consent.
- Data sharing: Your phone number is shared only with our SMS provider (Twilio) under a data processing agreement. It is never sold or shared for third-party marketing.
- Message frequency varies based on account activity. Message and data rates may apply.
- Carriers are not liable for delayed or undelivered messages.
- Reply HELP for assistance.
9. Children's Privacy
ReefRide is not directed at anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a person under 18, please contact us at privacy@reefride.co and we will promptly delete it.
10. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to know: Request the categories and specific pieces of personal information we have collected about you in the past 12 months.
- Right to delete: Request deletion of your personal information, subject to legal exceptions.
- Right to correct: Request correction of inaccurate personal information.
- Right to opt out of sale/sharing: We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
- Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise these rights, email privacy@reefride.co with your name and the email associated with your account. We will verify your identity before processing your request. You may designate an authorized agent to make requests on your behalf with proper written authorization.
Categories of information we collect: Identifiers, commercial information (booking history), internet activity, geolocation data, professional information (for hosts), and inferences drawn from the above.
11. Other U.S. State Privacy Rights
Residents of Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia may have additional privacy rights under their respective state laws, including the right to access, correct, delete, and port their personal data.
To submit a data rights request, email privacy@reefride.co. We will verify your identity and respond within the timeframe required by your state's applicable law.
12. International Data Transfers
ReefRide is based in Honolulu, Hawaii, United States. If you access our services from outside the United States, your information will be transferred to and processed in the United States. By using our services, you consent to this transfer. We apply the same protections described in this policy regardless of where data originates.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (sent to the address associated with your account) or by posting a prominent notice on our website at least 30 days before the changes take effect. We will update the "Last updated" date at the top of this page.
Your continued use of ReefRide after a revised policy becomes effective constitutes your acceptance of the changes. If you do not agree to the updated policy, please discontinue use of our services and contact us to delete your account.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: privacy@reefride.co
- Account deletion: privacy@reefride.co (subject: "Account Deletion Request")
- Mail: ReefRide LLC, 1001 Bishop St STE 2685A, Honolulu, HI 96813
- General support: support@reefride.co