Privacy Policy

Tripp. Transportation LLC operates the Tripp. carpooling platform. This explains what we collect, why, who we share it with, and your choices.

Account: name, .edu email, password (held by Firebase Authentication — we never see it), date of birth (to verify 18+), gender (optional), and university.

Photos and documents: profile selfie (shown to other users so you can recognize each other) and, for drivers, driver's license and insurance card (images or PDFs) and vehicle photos.

Vehicle details (drivers): make, model, color, plate, seating capacity.

Trip information: origin, destination, stops, dates/times, seats, luggage, pets, companions riding along, notes, and price.

Communications: in-app messages, ratings and reviews, and reports, no-show reports and disputes you file.

Referrals: the referral code you enter at sign-up, who referred you, and any referral credits issued to you, applied to a booking, or expired.

Terms acceptance: which version of our Terms and Privacy Policy you accepted, and when.

Email verification: the codes we email you (stored only in scrambled form, until used or expired), which address you verified and when, and when codes were requested and wrong codes entered.

Driver verification (drivers): your consent to the automated document review and when you gave it; the result and its reason; whether your vehicle photo matched and a third-row seat was verified; and, if your submission was held for a manual check, the reasons and the name read from your license.

Blocked users: the account ID and name of anyone you block, saved on your account so the app can hide them.

Account standing: no-show warnings and suspensions, payments that failed, and your answers when we ask whether a trip took place.

Device push tokens (to send notifications), basic usage and error diagnostics, and approximate trip distance calculated from the place names you type.

We do not collect continuous GPS or background location. Locations come from what you type, not your device's location services.

iOS app permissions. The app uses your camera and photo library only when you choose to add a photo, and sends notifications only if you allow them. You can change either in your device settings.

Pickup codes. We generate a 4-digit code per booking and record whether it was entered, when, how many incorrect codes were entered, and whether a driver started the trip without it. Because we do not track location, this is how we establish that a trip took place.

Bug reports. If you send one, we attach your device type, app or browser version, screen size and the screen you were on — so we can reproduce the problem. A report also includes your name, email address and account ID, whether you used the iOS app or the web, your browser or device identification string (user agent) and app start-up timings, and is emailed to our support inbox.

Place search and maps. As you type a place, what you have typed may be sent from your device to OpenStreetMap's Nominatim service to suggest places. Our server sends the place names of a trip to a geocoding service (Google Maps Platform or OpenStreetMap Nominatim) to find approximate coordinates, which we use for the distance, the cost-sharing cap and the route map. Place names and their coordinates are stored in a shared lookup list that is not linked to any account. Route maps are drawn with Apple MapKit JS, which your device loads from Apple.

Notifications. On the iOS app, notifications are delivered through Apple's push notification service, using Firebase Cloud Messaging. A notification can include names and the text of a chat message, and may appear on your lock screen.

Trips outside Florida. If you search for, post or request a trip that leaves Florida, we record the places, the states involved, what you were doing and your university, without your name or account, to decide where to expand.

Payments are processed by Stripe. Tripp. never receives or stores your full card number, CVC, or bank details — only Stripe tokens and transaction amounts needed for bookings, payouts, and refunds. Drivers receiving payouts complete Stripe Connect onboarding, which collects identity and bank details directly under Stripe's policy.

To verify you are a student and 18+; manage your account; match riders and drivers, show profiles, ratings, and vehicle info, and tell you when a ride or request matching one of yours is posted; show route maps; process payments and refunds; verify driver documents, including comparing the name on a driver's license with the account name; send transactional notifications; enforce our Terms and the no-show system, including checking each no-show report against its booking; check that ratings come from trips that took place; limit repeated email-code requests and wrong codes; hide people you block; delete accounts that were never verified; run the referral program and apply credits; confirm that a trip took place using its pickup code; and maintain safety and prevent fraud.

Fraud and misuse checks. Authorized Tripp. staff can run an internal, read-only security check across accounts (including how and when they were created), driver approvals, ratings, ride requests, bookings and payments, and no-show reports, to look for fraud and misuse. When investigating a report or resolving a dispute, we may review the messages on the booking involved.

We do not sell your personal information and do not use it for third-party advertising.

To verify drivers, images (or PDFs) of your license and insurance card, and your vehicle photo if you added one, are sent to a third-party AI service (Anthropic) together with the vehicle make, model and color you entered. It reads what is printed, including the name, date of birth, and issue and expiration dates on your license and the start and end dates on your insurance card, and says whether your vehicle photo matches what you entered and how many seats that model usually has. Your account name is not sent to it: our own servers compare it with the name read from your license. Current versions of the app ask you to agree to this review when you submit, and we keep a record of that agreement, and when you gave it, with your submission.

Approval decisions are made by our own system logic using those values, not by the AI alone. If the names cannot be matched, or the expiration date, date of birth or name on your license cannot be read, your submission is held and a person at Tripp. looks at your documents, and what was read from them, to check the item that could not be decided. If rejected you are told why and may re-submit, or contact support@ridewithtripp.com for human review.

The app shows other users your name (in most places, your first name and last initial), your photo, university and gender if provided, your rating, review count, and rides completed — plus, for drivers, vehicle details (including license plate) and verification status.

The app does not show other users your email, date of birth, documents, or payment details.

Google Firebase (hosting, database, auth, storage, notifications) · Stripe (payments and payouts) · SendGrid (verification codes and emails) · Anthropic (document review) · Apple (route maps; push notifications and device-integrity checks on the iOS app) · Google reCAPTCHA (security checks on the web app) · a geocoding service, Google Maps Platform or OpenStreetMap Nominatim (place names → approximate location and distance) · OpenStreetMap Nominatim (place suggestions as you type). We may also disclose information where required by law or to protect user safety.

We keep information only as long as we need it. Periods run from the trip or incident the record relates to, not from when you delete your account.

Account profile (name, email, date of birth, university, gender) and profile photo: while your account is active; deleted within 30 days of your deletion request.

Driver's license, insurance and vehicle photos, and the records of their review (including your consent and, if your submission was held, the name read from your license): while your account is open; after you delete it, 3 years after your last trip as a driver, covering the period in which injury claims can be brought, or at the next nightly clean-up if you never had a trip as a driver.

Trip, booking, payment, payout and referral-credit records, and pickup-code records: 7 years, for tax and accounting obligations and payment disputes.

Record of the Terms and Privacy Policy versions you accepted, and your confirmation that you are 18 or older (not your date of birth): 7 years. When you delete your account, we keep these in a small record together with a scrambled (hashed) copy of your email address, your Stripe payout account ID if you had one, whether you drove, whether the account was banned, and the dates of your last trips, so retained records can be found if a claim arises. That record is kept for 7 years after your last trip.

In-app messages and safety reports, no-show records, disputes and suspensions: 5 years after the trip or incident, covering the period in which claims such as assault can be brought.

Permanent bans: if an account is permanently banned, we keep a scrambled (hashed) copy of its email address — not the address itself — for as long as Tripp. operates, so the account cannot simply be re-registered.

Bug reports: 12 months. Ratings and reviews: kept while the platform operates; may be anonymized if your account is deleted. Push tokens: until replaced (we keep the latest four for each kind of device), until they stop working, or until you delete your account. Server logs and backups: 90 days.

Email codes: deleted once used, or within about two days after they expire. Records of when codes were requested and wrong codes entered are linked to your account and to a scrambled (hashed) copy of the email address, and are used to enforce our limits; the one linked to the email address is kept even if the account is deleted, so deleting and re-creating an account does not reset the limits.

Unverified sign-ups: an account whose email is never verified, that has no other activity on Tripp. and has not been used for 7 days, is deleted automatically, together with its sign-in, profile and the email-code records linked to the account. Wrong email? Start over on the code screen deletes it straight away.

Blocked users: on your account until you unblock them or delete your account. Trips outside Florida (the record in Section 2, which has no name or account): 24 months. Place lookups (place names and coordinates, not linked to any account): kept with no set end date, so places do not have to be looked up again.

Legal holds. If a dispute, safety report, or legal claim involves your records, we keep them until it is resolved, even if the period above has ended.

When a period ends, we delete the information or make it permanently unreadable. Retained records are minimized and access-restricted.

You can access and update most information in Profile → Edit Profile, change your photo anytime, unblock people in Profile → Blocked Users, turn off notifications in your device settings, and delete your account in the app (Profile → Delete Account) once you have no upcoming, in-progress or unpaid trips, or by emailing support@ridewithtripp.com. If you signed up with the wrong email, Wrong email? Start over on the code screen deletes that unverified account.

Depending on your state (including California, Colorado, Connecticut, Virginia, and Texas) you may have additional rights to access, correct, delete, or port your data. Contact legal@ridewithtripp.com. We will not discriminate against you for exercising them. Some data must be retained where required by law.

We use encrypted connections, authenticated access, server-side rules that limit what each user can read and change, app-integrity checks (Google reCAPTCHA on the web; Apple App Attest, or DeviceCheck, on iOS) to help confirm requests come from the genuine app, limits on repeated email-code and pickup-code attempts, and fraud screening on payments by Stripe. No system is perfectly secure and we cannot guarantee absolute security.

Tripp. is strictly for users 18 and older. We do not knowingly collect information from anyone under 18; if we learn we have, we delete it and terminate the account.

We may update this policy. When we make material changes, we will show you the updated policy in the app and ask you to accept it before you can continue using Tripp. Questions: legal@ridewithtripp.com