DRAFT. This text has not been reviewed by a lawyer. It describes how the app is meant to work during the pilot.
Privacy policy (draft)
Draft version, November 2026.
What we collect
Your work email, your first name and last initial, your workplace, your typical week, your home’s location (coordinates and your neighbourhood’s name, never your address) and the pickup points you choose. If you drive: your vehicle and the result of your licence check.
Why
To suggest carpools with colleagues whose commute is like yours, and to keep the service safe. The app uses no advertising tools and no third-party trackers.
What other members see
Before a ride is accepted, another member sees only your neighbourhood, the time and the estimated detour. After it is accepted, they see your first name and last initial, the agreed pickup point and, if you drive, your vehicle. Nobody sees where your home is, your email or your phone number. Your employer’s name is never shown to members from other companies. If you work at a different workplace than your driver, they will know where you work once the ride is accepted, because they drop you off there. Your messages are visible only to you and the other person in the ride. If either of you reports a problem, the team may read that conversation to understand what happened, and each reading is logged.
What your employer sees
Overall statistics only, for example the number of rides. Any group of fewer than 5 people is hidden. Your employer sees neither your rides, nor your home, nor the list of employees who signed up.
Driver credits
During the pilot, no money moves through the app. If driver credits are turned on later, only the dotcommute team will see the amount per driver, in order to pay it. Your employer will receive a monthly total. If it chooses to pay its own employees, it will see the amounts for its own employees only.
Where your data is
The database and files are hosted in Canada (Canada Central region). The other services that process data, such as sending email, will be named here with their location before the pilot starts. Notifications on your devices go, encrypted, through your browser’s service (Apple, Google or Mozilla). They never contain the text of your messages. The pickup point map comes from OpenFreeMap (Europe), which receives your device’s IP address and the area shown.
How long
Licence photo: deleted after the check, and at most 7 days after it is sent. Messages and notifications: 90 days. Rides and matches: 12 months, then deleted. Credit figures stay, without your name. Backup requests and reports: 12 months after the last change. An account that is never used: 7 days. These periods may change after legal advice.
Your rights
In Settings, you can download a copy of your data or delete your account yourself. You can also ask us to correct your data. After a deletion, only the anonymous totals needed to settle credits remain.
Contact us
The person responsible for protecting personal information will be named before the pilot starts.