Privacy Policy

RYDE LLC, registered in Abu Dhabi, United Arab Emirates, is the controller of personal data collected through this website. This policy describes what we collect, why, who else sees it, and what you can ask us to do about it. Questions and requests go to [privacy@ryde.example].

1. What we collect

When you apply for membership

The application form asks for your first name, last name, email address, occupation, city, and how you heard about us. We record the date and time of the application with it. All of these fields are required, and the form does not submit without them.

When you sign in

Members sign in with an email address and password, or with a passkey. Where you use a passkey we store its public key, its credential identifier, a signature counter and the transports it supports. A passkey’s private key never leaves your device, and we never receive it.

Signing in sets one cookie, described below. We do not store your password in the browser.

Automatically

Our hosting provider processes technical data needed to serve the site, including your IP address, the pages requested and your browser’s user agent. We also use your IP address transiently to limit how many applications and sign-in attempts can be made from one connection; it is held only for that purpose and only for the length of the limiting window.

2. What we do not do

We do not use analytics, advertising or tracking cookies on this website. There is no Google Analytics, no advertising pixel and no cross-site tracking. Our typefaces are served from our own domain, so viewing a page does not disclose your visit to a font provider. We do not sell personal data, and we do not share it for anyone else’s marketing.

3. Cookies

The site sets one cookie, ryde-session. It is set only when you sign in, it identifies your session and nothing else, it expires after 24 hours, and it is marked HttpOnly, Secure and SameSite=Lax, so it cannot be read by scripts and is not sent to other sites. It is strictly necessary for the members’ area to work, which is why it does not require consent.

4. Why we use it, and on what basis

• To assess your application and contact you about it, because it is necessary to take steps at your request before entering into a contract, and in our legitimate interest in running a membership.
• To operate the members’ area and keep accounts secure, which is necessary for performing our contract with members, and in our legitimate interest in preventing unauthorised access.
• To keep the site available and limit abuse, in our legitimate interest in protecting the service.
• To meet legal obligations, where the law requires us to keep or disclose records.

We do not send marketing email on the basis of an application. If we introduce it, we will ask for your consent first and you will be able to withdraw it at any time.

5. Who else processes it

We use a small number of service providers, each of which acts on our instructions:

• Vercel Inc., for hosting and content delivery.
• Upstash, Inc., which provides the database holding membership applications and passkey records.
• CARTO, which supplies map tiles in the members’ area only. Loading a map discloses your IP address to that provider. No map is loaded on the public pages.

We may also disclose personal data where the law requires it, or to establish or defend legal claims.

6. Where it is processed

Our providers operate infrastructure outside the United Arab Emirates, including in the United States and the European Union, so your data may be transferred and stored there. Where we transfer personal data out of the United Arab Emirates, we do so on the basis permitted under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where European or Swiss data protection law applies, under appropriate safeguards such as standard contractual clauses.

7. How long we keep it

• Applications we decline or do not proceed with are kept for up to 24 months, so that we can recognise a repeat application and answer questions about our decision, and are then deleted.
• Applications that become memberships are kept for the life of the membership, and afterwards for as long as UAE commercial and tax law requires.
• Passkey records are kept until you remove the passkey or close your account.
• Session cookies expire after 24 hours.
• Rate-limiting records last minutes, then are discarded.

8. Security

The site is served only over HTTPS. Session cookies are cryptographically signed, so a cookie we did not issue is rejected; they are HttpOnly and expiring. Sign-in and application endpoints are rate limited, and sign-in responses are deliberately uniform so that they cannot be used to discover whether an address has an account. Passkeys are supported precisely because they remove the password from the equation.

No system is perfectly secure. If a breach affects your personal data and is likely to cause you harm, we will notify you and the UAE Data Office as the law requires.

9. Your rights

Subject to the conditions in the applicable law, you may ask us to give you a copy of your personal data, correct it, delete it, restrict how we use it, or transfer it to another provider. You may object to processing we carry out on the basis of legitimate interests, and withdraw any consent you have given without affecting what we did before you withdrew it.

Write to [privacy@ryde.example]. We will answer within the period the law allows, and we may need to verify who you are first. If you are not satisfied, you may complain to the UAE Data Office, or, if you are in the European Union, the United Kingdom or Switzerland, to your local supervisory authority.

10. Children

This website is not directed at children, and membership requires a full driving licence. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, write to [privacy@ryde.example] and we will delete it.

11. Changes

We may update this policy. The version published here is the one that applies, and the date at the top shows when it last changed. If a change materially affects how we use data we already hold, we will tell affected members directly.

12. Contact

RYDE LLC, Abu Dhabi, United Arab Emirates.
[privacy@ryde.example]