Privacy Policy

1. Introduction & Overview

NextRide (“NextRide”, “we”, “our”, or “us”) is committed to protecting the privacy and personal data of our users. NextRide provides automated Interactive Voice Response (IVR) telephone services and two-way Short Message Service (SMS) transit and communal information specifically engineered for Orthodox Jewish commuters worldwide who live a kosher lifestyle using feature phones without internet access.

This Privacy Policy explains how we collect, store, use, and protect your information when you interact with our telephony lines (+44 330 053 3944), send SMS text messages to our numbers, or access our portal at nextride.online.

2. Information We Collect

We collect only the minimal data necessary to deliver sub-second automated transit and communal intelligence:

• Telephone Numbers & Caller ID: When you dial our IVR lines or transmit an SMS message, your phone number (E.164 format) is automatically identified via telephony signaling to locate your account, authenticate family member access, and resolve your localized community hub.
• Commuter Preferences & Settings: Saved transit speed dials (slots 1–9 for buses, trains, flights, weather, and zmanim), preferred language (English, Hebrew, Yiddish, French, Spanish, etc.), regional dialect, active location, and currency preference.
• Lookup & Call Telemetry: Logged transit queries (such as bus stop codes, train stations, or flight numbers queried), call timestamp, duration, DTMF keypad inputs, and token deduction history.
• Voice Audio Recordings (Support Only): If you leave an audio voicemail ticket for our customer support desk, the recording is temporarily stored in private encrypted cloud storage to enable support agents to resolve your issue.
• Payment & Billing Data: Payment details are processed directly and securely by Stripe Inc. NextRide never stores raw credit or debit card numbers on its servers. We receive only transaction identifiers, subscription status, and billing currency.

3. How We Use Your Information

Your information is used strictly to provide automated mobility services:

• Delivering live bus, train, flight, weather, traffic, and halachic zmanim information in sub-1.5 seconds.
• Transmitting requested real-time SMS departure countdowns and IVR written summaries.
• Maintaining account quota and token balances across family members.
• Providing technical customer support and investigating telephony disruptions.
• Enforcing Halachic Melacha suppression guards (INV-07) to ensure outbound notifications never disrupt the Sabbath or Jewish Holidays.

4. Third-Party Service Providers

We partner with enterprise cloud and telecommunications infrastructure providers to deliver our global service. Each provider is bound by strict confidentiality and data protection obligations:

• Twilio Inc. (Telephony & SMS): Handles voice call trunking, DTMF tone gathering, and SMS message transmission.
• Google Cloud Platform & Firebase (europe-west1): Provides secure database storage (Google Cloud Firestore), serverless execution (Cloud Run), and text-to-speech synthesis (Google Cloud TTS). All data is stored in the European Union (Belgium).
• Stripe Inc. (Payment Processing): Handles PCI-DSS Level 1 compliant multi-currency subscription and token payments.
• Transit & Weather Authorities: Transit and weather queries are dispatched to public APIs (Transport for London, DfT BODS, Network Rail Darwin, Open-Meteo, Hebcal) using anonymous stop or station identifiers, never disclosing your personal identity.

5. Data Security & Storage (INV-01 Isolation)

In accordance with our strict architectural invariants (INV-01), user documents and telephony records are isolated. Cross-tenant database queries are strictly forbidden. All data in transit is encrypted using TLS 1.3, and all data at rest is encrypted using AES-256 in Google Cloud Firestore.

6. Your Legal Rights (UK GDPR, EU GDPR & CCPA)

Depending on your jurisdiction, you possess the following statutory rights regarding your personal data:

• Right to Access: You can view your full query history, token usage, and saved stops in the Customer Portal at any time.
• Right to Rectification: You may edit your phone number, name, language, or saved speed dials via the portal.
• Right to Erasure (“Right to be Forgotten”): You may request the permanent deletion of your account, call logs, and phone number by emailing support@nextride.online.
• Right to Opt-Out of SMS: You can text STOP at any time to immediately revoke SMS messaging consent.

7. Contact the Data Protection Officer

For privacy inquiries, data subject access requests, or regulatory questions: