Privacy Policy

1. Introduction & Overview

NextRide (“NextRide”, “we”, “our”, or “us”) is committed to protecting the privacy and personal data of our users. NextRide provides automated Interactive Voice Response (IVR) telephone services and two-way Short Message Service (SMS) transit and communal information specifically engineered for Orthodox Jewish commuters worldwide who live a kosher lifestyle using feature phones without internet access.

This Privacy Policy explains how we collect, store, use, and protect your information when you interact with our telephony lines (+44 330 053 3944), send SMS text messages to our numbers, or access our portal at nextride.online.

2. Information We Collect

We collect only the minimal data necessary to deliver sub-second automated transit and communal intelligence:

• Telephone Numbers & Caller ID: When you dial our IVR lines or transmit an SMS message, your phone number (E.164 format) is automatically identified via telephony signaling to locate your account, authenticate family member access, and resolve your localized community hub.
• Commuter Preferences & Settings: Saved transit speed dials (slots 1–9 for buses, trains, flights, weather, and zmanim), preferred language (English, Hebrew, Yiddish, French, Spanish, etc.), regional dialect, active location, and currency preference.
• Lookup & Call Telemetry: Logged transit queries (such as bus stop codes, train stations, or flight numbers queried), call timestamp, duration, DTMF keypad inputs, and token deduction history.
• Voice Audio Recordings: If you leave an audio voicemail ticket for our customer support desk, the recording is stored in private encrypted cloud storage to enable support agents to resolve your issue.
• Payment & Billing Data: Payment details are processed directly and securely by Stripe Inc. NextRide never stores raw credit or debit card numbers on its servers. We receive only transaction identifiers, subscription status, and billing currency.

3. How We Use Your Information

Your information is used strictly to provide automated mobility services:

• Delivering live bus, train, flight, weather, traffic, and halachic zmanim information in sub-1.5 seconds.
• Transmitting requested real-time SMS departure countdowns and IVR written summaries.
• Maintaining account quota and token balances across family members.
• Providing technical customer support and investigating telephony disruptions.
• Enforcing Halachic Melacha suppression guards to ensure outbound notifications never disrupt the Sabbath or Jewish Holidays.

4. Third-Party Service Providers

We rely on third-party cloud, search, and telecommunications infrastructure providers to deliver our global service, including:

• Twilio Inc. (Telephony & SMS): Handles voice call trunking, DTMF tone gathering, and SMS message transmission.
• Google Cloud Platform & Firebase (europe-west1): Provides core database storage (Google Cloud Firestore) and serverless execution (Cloud Run) hosted in the European Union (Belgium).
• Typesense Search Service (us-east1): Hosts transit-stop search indexes on cloud infrastructure located in the United States. The backend sends stop-search terms to Typesense for transit-stop lookup.
• Stripe Inc. (Payment Processing): Handles PCI-DSS Level 1 compliant multi-currency subscription and token payments.
• Transit & Weather Providers: Transit, rail, and weather queries are dispatched to external data services and public authority feeds (such as Transport for London and DfT BODS for bus transit, National Rail feeds for rail departures, and Open-Meteo for weather forecasts) to retrieve live schedule, departure, and outlook information.
• Calendar & Prayer-Time Sources: Halachic prayer times, Sabbath schedules, and holiday calendar information are retrieved from calendar and time sources (such as Hebcal), with astronomical calculations used where applicable.

5. Data Security & Storage

User documents and telephony records are logically isolated to prevent cross-account access. Data at rest is encrypted in Google Cloud Firestore. Customer web browser connections to the NextRide portal (nextride.online) and its web APIs are protected in transit using HTTPS.

6. Your Legal Rights (UK GDPR, EU GDPR & CCPA)

Depending on your jurisdiction, you possess the following statutory rights regarding your personal data:

• Right to Access: You can view your full query history, token usage, and saved stops in the Customer Portal at any time.
• Right to Rectification: You may edit your phone number, name, language, or saved speed dials via the portal.
• Right to Erasure (“Right to be Forgotten”): You may request the permanent deletion of your account, call logs, and phone number by emailing support@nextride.online.
• Right to Opt-Out of SMS: You can text STOP at any time to immediately revoke SMS messaging consent.

7. Contact the Data Protection Officer

For privacy inquiries, data subject access requests, or regulatory questions: