Privacy Policy

Information We Collect

Information you provide directly

• Account data: name, email address, password, date of birth, and country of residence when you create an account
• Profile data: bio, profile photo, cover photo, occupation, hobbies, store name and description
• Content: posts, comments, stories, reels, products, photos and videos you upload
• Payment data: processed securely through Stripe. For payouts, we collect Stripe Connect account ID or PayPal email
• Communications: messages sent through our chat feature and any support requests
• Verification documents: driver's license, vehicle photos and selfies for RideCart drivers

Information collected automatically

• Device information: device type, OS, version, language and timezone
• App usage: features used, screens viewed, interactions, session duration, crash logs
• Push notification tokens: unique identifier from Apple (APNs) or Firebase Cloud Messaging (FCM)
• Approximate IP-based location: for fraud prevention and regional content

Location Data

RyCart includes RideCart, a ride-sharing feature. When you use RideCart:

• As a passenger: we collect your precise GPS location while requesting and during an active ride
• As a driver: we collect your precise GPS location while you are online and accepting trips
• Location is not collected in the background when you are not actively using RideCart
• You can revoke location access at any time through your device's system settings
• Map and navigation features are provided by Google Maps Platform

Camera and Media Access

RyCart requests access to your camera and photo library to:

• Upload a profile photo or cover image
• Create posts with photos or videos
• Record and share Stories and Reels
• List products in the marketplace with images
• Submit verification documents as a driver

We only access your camera or media when you explicitly choose to use these features.

How We Use Your Information

• Provide, maintain and improve the RyCart platform
• Process marketplace purchases, rides and disburse payouts
• Calculate and distribute multi-level commissions within our partner network
• Send push notifications about messages, sales, rides, comments and account activity
• Personalize your feed, recommendations and content discovery
• Verify identity of drivers and prevent fraud
• Communicate with you about updates, support and important changes
• Comply with legal obligations and enforce our Terms of Service

Information Sharing and Third Parties

We do not sell your personal information. We share data with:

We also share information for legal reasons, business transfers, and with other users when you make content public.

International Data Transfers

RyCart is operated from the United States. Our servers are hosted by AWS in the us-east-1 region (Virginia, USA). By using RyCart, you consent to this transfer.

Data Security

We use industry-standard security measures:

• AWS Cognito for secure authentication with token rotation
• Encrypted data transmission (HTTPS/TLS 1.2+)
• Secure on-device token storage via expo-secure-store
• Stripe for PCI-DSS compliant payment processing
• Least-privilege access controls on backend systems

Data Retention

• Personal data is permanently removed within 30 days after account deletion
• Public content is removed from public view immediately
• Transactional records are retained for up to 7 years
• Anonymous aggregate analytics may be retained indefinitely

Your Rights and Account Deletion

You have the right to access, correct, delete, export your data, opt out of push notifications, and object to certain processing activities.

To exercise any other right, contact us at privacy@rycart.com.

Children's Privacy

RyCart is not directed to children under 13 and we do not knowingly collect personal information from children under 13. Users between 13 and 17 may only use RyCart with the consent of a parent or legal guardian.

Child Safety Standards (CSAE/CSAM)

We strictly prohibit any content that sexualizes minors, facilitates harm to children, or attempts to exploit or groom minors. RyCart enforces these standards through multiple safeguards:

• In-app reporting: users can report CSAE/CSAM and any child safety concerns by tapping "..." on any post, comment, reel, product or profile, then selecting "Report"
• 24-hour review: our team reviews all child safety reports within 24 hours and takes immediate action
• Reporting to authorities: we report confirmed CSAM to the National Center for Missing & Exploited Children (NCMEC) and regional/national authorities as required by law
• Account bans: accounts found in violation are permanently banned
• Age compliance: RyCart is rated for users 13 and older

We comply with COPPA, GDPR, and all applicable child safety laws. The designated point of contact is:

Email: marketing@rhynosolution.com

California Privacy Rights (CCPA/CPRA)

California residents have additional rights to know, delete, correct, opt-out, and non-discrimination. RyCart does not sell or share personal information for cross-context behavioral advertising. Contact privacy@rycart.com.

European Privacy Rights (GDPR)

If you are in the EEA, UK or Switzerland, our legal bases for processing are: contract performance, consent, legitimate interests, and legal compliance. You have the right to lodge a complaint with your local supervisory authority.

Changes to This Policy

We may update this Privacy Policy. We will notify you of material changes by posting the updated policy and updating the "Last updated" date.