Privacy Policy

Last updated: April 27, 2026

This policy describes how RoadLift collects, uses, stores, and shares your personal information when you use the RoadLift mobile app or our services. RoadLift complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information We Collect

Information you provide

  • Account info: name, email address, phone number, password
  • Driver-only: licence number, insurance details, vehicle information, equipment photos, and any documents you upload during onboarding
  • Vehicle profiles: make, model, year, colour, licence plate
  • Saved locations you choose to add (e.g. home, work)
  • Photos and messages you send during a service request (job photos, chat messages, dispute evidence)
  • Support and feedback messages

Information collected automatically

  • Precise location, while the app is open and (for drivers) in the background while a job is active
  • Device info: device model, OS version, app version, language, push notification token
  • Usage and diagnostics: which screens you visit, crash reports
  • IP address and approximate region

Information from third parties

  • Payment status and payout details from Stripe (we never see or store your full card number)
  • Geocoding and routing results from Google Maps when you search an address

2. How We Use Your Information

  • To create and manage your account
  • To match customers with available service providers nearby
  • To process payments and driver payouts
  • To enable real-time tracking and in-app chat during a job
  • To send service-related notifications (job status, payments, chat)
  • To investigate disputes, fraud, and abuse
  • To improve the app and fix bugs (via aggregated diagnostics)
  • To comply with legal, tax, and regulatory obligations

3. Sharing With Third Parties

We share the minimum necessary information with the following service providers, each bound by their own privacy commitments:

  • Stripe — payment processing and driver payouts via Stripe Connect. See stripe.com/privacy.
  • Google Maps Platform — geocoding, directions, and map tiles.
  • Sentry — crash and error reports. We do not send personally identifiable information to Sentry.
  • Expo / Apple Push Notification service — delivery of push notifications.
  • Amazon Web Services (Canada Central region) — hosting and storage of your data.
  • Other users (limited) — when you book a job, the assigned driver sees the job pickup location, your first name, and vehicle details. The customer sees the driver's first name, vehicle, and live location while the job is active.
  • Law enforcement or regulators — when required by law or to protect the safety of users or the public.

We do not sell your personal information to anyone.

4. Where We Store Your Information

All personal information is stored on servers located in Canada (AWS ca-central-1 region). Data is encrypted in transit using TLS 1.3 and encrypted at rest.

5. How Long We Keep It

  • Active accounts: as long as your account exists.
  • Job records and receipts: retained for 7 years for tax and legal purposes, even after account deletion. Personally identifying fields (name, email, phone, location) are anonymized on deletion request.
  • Diagnostics and crash logs: up to 90 days.

6. Your Rights (PIPEDA)

You have the right to:

  • Access a copy of the personal information we hold about you
  • Correct any inaccurate information
  • Withdraw consent and request deletion of your account
  • Request that we stop sending non-essential notifications

You can exercise these rights from the Settings → Privacy & Data screen in the app, or by emailing [email protected]. We will respond within 30 days.

7. Children

RoadLift is not directed to anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with information, contact us and we will delete it.

8. Security Breach Notification

In the event of a privacy breach that creates a real risk of significant harm, we will notify affected users and the Office of the Privacy Commissioner of Canada within 72 hours, in line with PIPEDA requirements.

9. Changes to This Policy

We may update this policy as our service evolves. Material changes will be communicated through the app or by email at least 14 days before they take effect.

10. Contact Us

Questions or requests? [email protected]