Privacy Policy

1. Introduction

PairMee ("we", "us", "our") operates a ride-matching platform that connects travelers heading in the same direction. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our platform at pairmee.com and any associated services (the "Platform").

By using PairMee, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not use the Platform.

2. Information We Collect

Information you provide directly:

• Account information: name, email address, profile photo (via Google sign-in)
• Profile details: age, gender, nationality, interests
• Trip information: departure location, destination, dates, times, flight numbers
• Communications: messages sent to other users via in-app chat
• Feedback and support messages

Information collected automatically:

• Device information: browser type, operating system, screen size
• Usage data: pages visited, features used, interactions, timestamps
• Location data: meeting point coordinates when you use location features (only when you explicitly provide them)
• Log data: IP address, access times, referring URLs

3. Google User Data (Google Sign-In)

PairMee offers Google Sign-In to create and access your account. This section specifically describes how we handle data obtained through Google.

• Data we access: when you sign in with Google, we access only your basic Google profile: your name, email address, and profile picture. We request the minimum scopes needed to authenticate you (email and basic profile). We do not access your Gmail, Google Drive, contacts, calendar, or any other Google service.
• How we use it: solely to create and secure your PairMee account, identify you within the app, display your first name and photo to potential ride matches, and send service-related emails such as match notifications. We do not use Google data for advertising.
• How we share it: we do not sell Google user data. Your first name and profile photo are shown to other users as part of ride matching. Google data is processed only by our infrastructure providers (Supabase for authentication and database, Vercel for hosting, Resend for email) to operate the service.
• How we store and protect it: Google user data is stored on secure Supabase servers with encryption in transit (HTTPS/TLS) and row-level security access controls.
• Retention and deletion: we retain your Google-derived account data while your account is active. You can request deletion of your account and all associated data at any time by emailing pairmee.social@gmail.com; we delete it within 30 days, except where retention is legally required.

Limited Use disclosure: PairMee's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Your Information

• Match you with compatible travelers based on route, timing, and preferences
• Facilitate communication between matched users
• Display your profile to other users when browsing rides or viewing matches
• Calculate and display estimated ride costs and savings
• Process ratings and reviews to build community trust
• Send service-related communications (match notifications, ride updates)
• Improve platform functionality, fix bugs, and enhance user experience
• Enforce our Terms of Service and prevent abuse
• Comply with legal obligations

5. Information Sharing and Disclosure

Shared with other users:

• Your first name, profile photo, age, nationality, and interests are visible when you post or browse rides
• Your meeting point, destination, and travel times are visible to potential matches
• Your ratings and review scores are visible to other users
• Chat messages are visible only to members of your matched group

Shared with service providers:

• Supabase (database hosting and authentication)
• Vercel (platform hosting)
• Resend (transactional email delivery)
• Google (authentication via Google OAuth)

We do not sell your personal information to third parties. We may share anonymized, aggregated data for analytics purposes. We may disclose information if required by law, court order, or to protect the safety of users.

6. Data Storage and Security

Your data is stored on secure servers provided by Supabase (PostgreSQL databases with row-level security). We implement industry-standard security measures including encryption in transit (HTTPS/TLS), access controls, and database-level security policies. However, no system is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. If you request account deletion, we will delete your personal data within 30 days, except where we are required by law to retain it. Chat messages and ratings may be anonymized rather than deleted to maintain community trust integrity.

8. Your Rights and Choices

• Access: You can view your personal data in your profile at any time
• Correction: You can update your profile information at any time
• Deletion: You can request account deletion by contacting support
• Data export: You can request a copy of your data by contacting support
• Preferences: You can adjust matching preferences at any time
• Withdraw consent: You can stop using the Platform at any time

For EU/EEA users: You have additional rights under GDPR, including the right to data portability, restriction of processing, and the right to lodge a complaint with a supervisory authority.

9. Cookies, Analytics, and Session Replay

We use essential cookies and local storage to maintain your login session and remember your preferences. We use analytics tools (PostHog, and Google Analytics on this marketing site) to understand how PairMee is used and to improve it. Analytics events record product actions such as searching for rides, posting a ride, sending a join request, approving a match, messaging activity, and cancellations.

We also use session replay to see how the interface is used: pages viewed, clicks, scrolling, and where things break. Sensitive content is masked in replays. Chat message text, personal profile details, and anything you type into a form are not visible. We do not intentionally record chat messages, contact details, or other private text in session replay. We do not use advertising trackers or sell data to advertisers.

10. Third-Party Services

PairMee integrates with third-party services (mapping providers, authentication providers). These services have their own privacy policies, and we encourage you to review them. We are not responsible for third-party data practices.

11. Children's Privacy

PairMee is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a user under 18, we will delete it promptly.

12. International Data Transfers

Your data may be processed in countries other than your country of residence, including the United States and Israel. We ensure appropriate safeguards are in place for international transfers in accordance with applicable data protection laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform with a revised effective date. Continued use after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please contact us through the Support page in the app or email us at pairmee.social@gmail.com.