Privacy Policy

This Privacy Policy applies to drift web and mobile applications, related support channels, and operational systems.

Depending on how you use drift, we may collect:

• Account data: name, email, username, phone, profile details
• College context data: university/college association and related verification signals
• Ride and booking data: origin, destination, timing, seats, fare details, booking status
• Support and safety data: tickets, messages, moderation and audit records
• Device/app data: basic diagnostics, usage events, and security logs
• Location data (when enabled): coarse or precise coordinates from your device/browser permissions

We use data to operate and improve drift, including to:

• Create and secure user accounts
• Match riders with relevant routes and student communities
• Support bookings, ride coordination, and status notifications
• Prevent abuse, detect fraud, and enforce community standards
• Resolve support requests and safety incidents
• Analyze platform quality and improve reliability

Location is one of drift's most useful signals. It helps power better matching, clearer route context, and faster coordination between users.

In addition, location heartbeat signals support operational safety monitoring and help admins identify active usage patterns and last-known locations where permitted, which improves response quality in support and trust workflows.

You remain in control: location collection depends on browser/device permission settings, and can be turned off by updating those settings.

drift is designed for college communities. We use college-context data to improve relevance and trust so users can see rides that match their university ecosystem rather than broad, unrelated public listings.

We may share limited data with:

• Other users as necessary for ride coordination (for example, profile and ride details)
• Service providers that help us operate infrastructure, maps, storage, analytics, and support workflows
• Legal or safety authorities when required by law or to protect users and the platform

We do not sell personal data as a core business model.

We retain data for as long as needed to provide services, comply with legal obligations, resolve disputes, and enforce platform policies.

Retention periods may differ based on data type (for example, account records vs. security/audit logs).

drift uses reasonable technical and organizational controls to protect account and platform data, including access controls, authentication mechanisms, and operational monitoring.

No system is absolutely risk-free, but we continuously improve safeguards as the product evolves.

You can generally:

• Update profile/account information
• Manage visibility preferences where available
• Control location permissions at browser/device level
• Contact support regarding account and data concerns

drift is intended for users legally eligible to create an account under applicable law and institutional context. If we learn of unauthorized underage use, we may restrict or remove access.

We may revise this Privacy Policy to reflect product improvements, legal requirements, or operational changes. The latest version will always be published on this page.

For privacy questions, use in-app support or official support channels listed on website.