Privacy Policy

Overview

Meshwr ("we", "our", "us") operates the Meshwr mobile application and web platform. This policy explains what personal data we collect, why we collect it, and how we protect it. By using Meshwr you agree to this policy.

1. Data We Collect

• Account information — first name, last name, phone number, hashed password, and role (family member or driver). Your phone number is used to identify your account and to enable WhatsApp contact between family members and drivers.
• Family data — family name and the phone numbers of members and drivers you add to your group. Phone numbers are used solely to link accounts within your family and to facilitate direct contact.
• Appointment data — pickup and drop-off addresses, dates, times, and any notes you enter when booking a ride.
• Precise location — the driver's precise GPS coordinates are collected only while a ride is actively in progress and shared in real time with the booking family member. Location collection requires explicit foreground permission, stops immediately when the ride ends, and coordinates are not stored after the ride completes.
• Reviews — star rating and optional comment submitted after a completed ride.
• Device & usage data — standard server logs (IP address, request timestamps, app version) used for security and debugging.

2. How We Use Your Data

• Authenticate your account and maintain your session.
• Match rides between family members and drivers.
• Show live ride progress to the booking family member.
• Detect scheduling conflicts and prevent double-bookings.
• Send in-app status updates about your appointments.
• Improve and secure the service based on aggregated usage patterns.

We do not sell your data, use it for advertising, or share it with third parties for marketing.

3. Data Sharing

• Within your family group — admins see all family appointments; adults see their own rides; drivers see only the appointments assigned to them.
• Service providers — we use Supabase (database & authentication) and OpenStreetMap Nominatim (geocoding) solely to operate the service. They process data only as instructed by us.
• Legal obligations — we may disclose data if required by applicable law or a valid legal process.

4. Precise Location

We collect the driver's precise GPS location only while a ride is actively in progress. Drivers must explicitly grant foreground location permission before starting a ride. Precise location is used solely to display the driver's real-time position to the family member who booked the ride. No location data is stored after the ride ends, and location is never collected in the background or outside of an active ride.

5. Data Retention

Account and appointment data is retained for as long as your account is active. If you delete your account, your personal data is permanently removed within 30 days, except where retention is required by law.

6. Your Rights

• Request a copy of the personal data we hold about you.
• Ask us to correct inaccurate data.
• Request deletion of your account and all associated data.

To exercise any of these rights, contact us at the address below.

7. Security

Passwords are stored as salted hashes. Sessions use signed JWT tokens with a 30-day expiry. All data in transit is encrypted via HTTPS/TLS. We periodically review access controls and infrastructure security.

8. Children

Meshwr is not directed at children under 13. Child family members use the app under the supervision and account of a parent or adult family admin. We do not knowingly create standalone accounts for children under 13.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date above. Continued use of Meshwr after changes constitutes acceptance of the revised policy.

10. Contact

Questions or requests regarding this policy: team@meshwr.app