This Privacy Policy explains how ALCRide collects, uses, shares and protects your personal data when you use the ALCRide mobile app and website. We are committed to handling your data in accordance with the EU General Data Protection Regulation (GDPR) and Spanish data protection law.
1. Who we are
ALCRide is operated by Toro Mobility S.L. ("ALCRide", "we", "us"), the data controller for the personal data described here.
- Contact: support@alcride.es
- Website: https://alcride.es
2. What ALCRide does
ALCRide is a carpooling app that connects drivers and passengers travelling to and from Alicante (ALC) and Murcia (RMU) airports. Using the service is free; passengers may optionally leave a tip for the driver, processed securely by our payment provider.
3. Data we collect
| Category | Examples |
|---|---|
| Account & profile | Name, email address, profile photo, preferred language, whether you act as a driver and/or passenger, optional emergency contact phone, gender (if you choose to provide it for women-only rides). |
| Authentication | If you sign in with Apple or Google, we receive the identity token and basic profile (name, email) from them. We do not receive your Apple/Google password. |
| Rides & bookings | Rides you post or join, airport, direction, date/time, seats, pickup point (location coordinates you set on the map), booking status. |
| Messages | Chat messages between drivers and passengers, and their translations when you enable automatic translation. |
| Ratings & reports | Ratings, reviews, reliability data, reports and blocks you submit or receive. |
| Payments (tips) | Tip amounts and status. Card details are entered directly into our payment provider (Stripe) and are not stored by ALCRide. |
| Technical & notifications | Push notification token, device/app information, and basic logs needed to run and secure the service. |
4. How we use your data
- To create and manage your account and profile.
- To match drivers and passengers and operate rides and bookings.
- To provide in-app chat and, when enabled, automatic message translation.
- To process optional tips and, for drivers, payouts via Stripe.
- For trust & safety: verification, ratings, reliability, reports and blocking.
- To send notifications (e.g. booking accepted, ride reminders, ride completed).
- To comply with legal obligations and prevent fraud or abuse.
5. Legal bases (GDPR)
- Performance of a contract — to provide the app's core features.
- Legitimate interests — safety, fraud prevention, and improving the service.
- Consent — for location, push notifications and optional features (you can withdraw at any time in your device settings).
- Legal obligation — where we must retain or disclose data by law.
6. Sharing your data
We do not sell your personal data. We share it only as needed to run the service:
- Other users: your name, photo, ratings and reliability are visible to the drivers/passengers you ride with. Chat is shared with the other party in that chat.
- Supabase — hosting, database, authentication and storage.
- Stripe — payment processing for tips and driver payouts.
- Apple / Google — sign-in, push delivery (APNs) and, on the website, no tracking.
- Expo — delivery of push notifications.
- DeepL — automatic translation of chat messages, only when you enable it.
These providers act as our processors or as independent controllers under their own privacy policies.
7. International transfers
Some providers may process data outside the European Economic Area. Where they do, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
8. Data retention
We keep your data while your account is active. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain records (e.g. payment/tax records) to meet legal obligations.
9. Your rights
Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to certain processing. You may also withdraw consent at any time. To exercise these rights, contact support@alcride.es. You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
Deleting your account
You can request deletion of your account and associated personal data at any time from within the app, or by emailing support@alcride.es. We will action your request as required by law.
10. Children
ALCRide is not intended for anyone under 18. We do not knowingly collect data from minors.
11. Security
We use encryption in transit, access controls and reputable infrastructure providers to protect your data. No method of transmission or storage is completely secure, but we work to protect your information.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, notified in the app.
13. Contact
Questions about this policy or your data? Email support@alcride.es.