CARPOOL MAX

Privacy Policy

Last updated 2026-08-29

What is stored

• People. Names, family grouping, and role (driver, rider). Children are usually listed by first name.
• Meeting spots. Names, and the map pin your group places for each — typically a street corner, not a home address.
• Trips. Dates, times, who is driving, who is riding, and each run’s stops.
• Ride balances and activity. A log of changes made in the group, and a count of rides given and taken per family.
• Pickup records. When a driver marked riders aboard, so the app can learn how far ahead to remind each rider.
• Device. A random identifier and a name for this device, so the group can see which devices are using a name.
• Ride alerts. If you turn them on, the push subscription your browser issues.
• Google account. If you sign in, your email address, to hold your claim on a name.
• Email address, if you ask for updates. Only when you type it into the updates form. It is kept apart from your carpool, is not linked to your name on any roster, is used for nothing but news about the app, and you can ask us to remove it at any time.

Signing in with Google

Signing in with Google is optional — a carpool can be joined and used without it. When you do sign in, Carpool Max receives your email address and your Google account’s identifier, and stores those two things so your claim on a name holds on every device you use.

They are used for nothing else. Your email address is visible to your carpool’s admin, and the admin’s own is visible to the group; no other member sees it. It is never used for advertising, never sold, and never shared with data brokers. Signing out removes it from this device, and deleting your account removes it everywhere.

Carpool Max’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Location, and its limits

Only a driver, only during a run, only if they choose. When a driver taps Start trip, their phone shares where the car is with the families waiting for it. A rider already aboard can share the car’s position the same way when the driver is not holding their phone; it is published as the car’s position, never the rider’s own.

• Sharing starts only on a deliberate tap. It is never on in the background.
• The position is visible to members of that carpool, and to nobody else.
• It stops when the run finishes, when the driver stops sharing, or one hour in — whichever comes first — and is deleted then.
• No route, trail, or history is kept: the latest position while a run is on, nothing once it is over.
• Where riders are actually collected can nudge a meeting spot’s pin onto the kerb cars really use. That corrects a shared spot, not a person.

What is not collected

No advertising, no advertising identifier, no tracking across other apps or sites, and no profile of you. Nothing is sold or shared with data brokers.

Who can see it

Everything above is visible to members of your own carpool group and to nobody else. Groups are separated from one another. Whoever holds the invitation link can join and see its contents, so treat it as the key to the group.

Google sign-in email addresses are visible only to the group’s admin — except the admin’s own, which the group can see.

Where it is kept

Group data is stored with Supabase and served through Vercel. PostHog counts which screens get used and how fast they load, with the group’s invitation slug and every id stripped from the address before it is sent, so it measures screens and never which carpool — and it keeps nothing on your device, so it cannot recognise you on a later visit. Ride alerts are delivered by a push service that sees the notification text in order to deliver it: your browser vendor’s (Apple, Google, or Mozilla) on the web, and Google’s Firebase Cloud Messaging in the Android and iPhone apps, which reaches iPhones through Apple.

Cookies and what is kept on your device

This app sets no advertising cookies and no tracking cookies, and it asks you for no cookie consent because there is nothing to consent to: the usage measurement above keeps no identifier between visits, so it cannot follow you from one to the next.

What is kept on your device is what the app needs in order to work: which carpool you opened, which name on the roster is yours, the language you chose, whether you have agreed to these terms, and a copy of your group’s plan so it opens without waiting for the network. That stays on the device. Clearing your browser’s data for this site removes all of it, and signs this device out of its carpool.

How long, and getting rid of it

• Group data is kept while the group exists.
• The group’s admin can delete the entire carpool: its people, trips, meeting spots, balances, invitations, and alerts, for everyone.
• Leaving a carpool takes this account out of it, from Profile → Leave carpool.
• Deleting your account removes the sign-in itself, every membership it holds, and its alerts, on every device. Names and rides inside a carpool stay with the group.
• A driver’s shared position is deleted when the run ends, and is never kept as history.
• Turning off notifications in your browser or phone settings stops ride alerts.

Children

Carpool Max is for parents and guardians organising rides. A child’s entry holds a name and a meeting spot — nothing more. If a child’s details were added without a parent’s permission, ask the group’s admin to remove them.

Getting in touch

Questions about any of this, or about what is held on you, go to carpoolmax@carpoolmax.com. To delete your account and what it holds without asking anyone, use the account deletion page.

Changes

If these terms change in a way that matters, the app will ask you to agree again.