1. Who we are

Ranom provides technology and operational support for arranging and managing recurring rides in the United Kingdom. In this policy, “Ranom”, “we”, “us” and “our” refer to the operator of the Ranom apps, website and related services.

For privacy questions or requests, contact support@ranom.uk.

Before publication, Ranom must add its full registered legal name, registered office address and, if applicable, company number and data protection officer or UK representative contact details.

2. Scope of this policy

This policy applies when you use the Ranom rider or driver app, visit our public website, contact support, apply to drive, take or provide a ride, receive notifications, or otherwise interact with Ranom. It should be read with our Terms of Service and any short privacy notice shown when particular information is collected.

Third parties such as Stripe, Google, Apple or your mobile platform may process information for their own purposes under their own privacy notices.

3. Information we collect

Depending on whether you are a rider, driver, applicant or other user, we may collect:

• Account and profile information: name, email address, phone number, profile image, role, authentication identifiers and account status.
• Ride and schedule information: pickup and destination addresses and coordinates, dates, times, time zone, return journeys, planned stops, route details, notes, matching and assignment information, ride status, cancellations and ride history.
• Location information: precise or approximate device location when you choose to use map, pickup or live-ride features; and a driver’s current location, base location, service area and arrival evidence when the relevant driver features are in use.
• Driver application information: National Insurance number where required, driving-licence details, licence, insurance and vehicle documents, vehicle information, availability, application status, approval or suspension details and operational review notes.
• Payment and earnings information: Stripe customer or connected-account references, limited payment-method details such as brand and last four digits, charges, billing periods, refunds, driver earnings, transfers, payout status and financial ledger records. Ranom does not store full card numbers.
• Communications: ride-scoped messages, message-read status, limited call-session records, support requests, reports and feedback. We do not currently record the audio content of calls through Ranom.
• Safety, eligibility and reliability information: arrival and no-show evidence, cancellations, ratings, reliability events, restricted-destination checks, reports and actions taken to protect users or the service.
• Notifications and device information: push tokens, installation identifiers, notification preferences, device platform, app version and delivery status.
• Technical and security information: IP address, request identifiers, access and security logs, timestamps, diagnostic information and information used to detect abuse or maintain the service.

We do not intentionally collect special-category information unless it is necessary and lawful. Please avoid putting medical, religious or other sensitive information in free-text ride notes or messages unless it is genuinely needed for the journey.

4. Where information comes from

We receive information:

• directly from you when you register, update your profile, create a plan, apply to drive, upload documents, message another user or contact support;
• automatically from your device and use of the service, subject to your device permissions;
• from another Ranom user where the information relates to a shared ride, communication, report or rating;
• from service providers such as Supabase, Stripe, Google Maps and Expo; and
• from our authorised operations team when they review accounts, applications, routes, payments, safety issues or support cases.

5. Why we use information and our lawful bases

We decide the appropriate lawful basis before using personal information. The basis can vary with the purpose and circumstances.

Where we rely on legitimate interests, we consider whether the use is necessary and balance it against your rights and reasonable expectations. Where we rely on consent, you may withdraw it at any time, although this does not affect earlier lawful use.

6. Location information

The app requests foreground location permission for features such as choosing pickup points, displaying maps and operating a ride. Drivers may send live location while online or during an active ride so that Ranom can match journeys, calculate arrival information, support ride progress and verify arrival or no-show events.

Ranom does not request background-location permission in the current app release. You can change location permissions in your device settings, but map, matching, arrival or active-ride features may then be limited or unavailable.

7. When we share information

We share only what is reasonably necessary with:

• Riders and drivers: matched users receive the identity, vehicle, ride, route, status and location information needed to arrange and perform the ride. We limit information before a match where practicable.
• Supabase: authentication, PostgreSQL database, file storage and realtime infrastructure.
• Stripe: payment methods, charges, refunds, connected-driver onboarding, transfers and payouts. Stripe may collect identity, bank and card details directly.
• Google Maps Platform: place search, geocoding, routes, distance, travel-time and time-zone services.
• Expo: app updates and push-notification delivery.
• Render: hosting and operation of Ranom’s backend services.
• Vercel: hosting and security logs for this public legal website once it is deployed there.
• Professional advisers, insurers and authorities: when reasonably necessary for legal advice, insurance, disputes, safety, fraud prevention, or compliance with law.
• A buyer, investor or successor: in connection with a genuine financing, reorganisation, merger or sale, subject to appropriate confidentiality and data-protection safeguards.

We do not sell personal information. We do not allow service providers to use Ranom information for their own advertising.

8. International transfers

Some providers or their subcontractors may process information outside the United Kingdom. Where UK data-protection law requires a transfer safeguard, we use an applicable adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard. Contact us if you would like information about the safeguard relevant to a particular transfer.

9. Retention

We keep information only for as long as needed for the purpose collected. The period depends on the type of record, whether an account or ride remains active, outstanding payments, refunds or payouts, safety and fraud risks, limitation periods, and legal, tax, accounting and regulatory duties.

In general:

• active account, plan and driver information is kept while the service or relationship remains active;
• precise current driver location is replaced as new operational location is received, while route, arrival, no-show and ride-event records may remain with the ride history;
• push tokens and notifications are deleted during completed account deletion;
• profile images and driver documents owned by the account are deleted during completed account deletion;
• direct account identifiers are removed or replaced when deletion completes; and
• ride, payment, payout, refund, ledger, safety and audit records may be retained in anonymised or restricted form where needed for financial integrity, legal duties, fraud prevention or legal claims.

Ranom should maintain a separate internal retention schedule with approved periods for each record category. Backups and provider logs may expire on a separate controlled cycle.

10. Account deletion

You can request deletion from Settings → Delete account in the Ranom app. This starts a staged process:

1. new plans and driver commitments are restricted;
2. active recurring activity is cancelled or released under the normal rules;
3. necessary rides, refunds, charges, transfers and payouts are allowed to settle safely;
4. account-owned profile images and driver documents are deleted;
5. the Supabase authentication identity is deleted; and
6. direct profile and driver identifiers are removed or anonymised, while required financial and ride history is retained under a non-direct identifier.

If unresolved activity prevents safe completion, the request may require support review. You may also contact support@ranom.uk.

11. Your rights

Subject to applicable UK data-protection law, you may have the right to:

• ask for access to your personal information;
• correct inaccurate or incomplete information;
• ask us to erase information;
• restrict how we use information;
• receive information you provided in a portable format;
• object to processing based on legitimate interests or direct marketing;
• withdraw consent where consent is the basis; and
• ask for human review of a qualifying solely automated decision.

Some rights depend on the lawful basis and may be limited where we must retain information or protect another person’s rights. Email support@ranom.uk to make a request. We may need to verify your identity and will normally respond within the period required by law.

You can complain to the UK Information Commissioner’s Office through ico.org.uk/make-a-complaint. We would appreciate the chance to address your concern first.

12. Matching, screening and other automated processing

Ranom uses rules and calculations to produce route quotes, identify drivers whose availability and service area fit a plan, screen destinations, detect inconsistent payment or account activity, and prioritise operational review. These processes can affect which routes or features are available, but significant account, driver-approval, suspension and support decisions are intended to include authorised human review.

If you believe an automated result is wrong, contact support and ask for review. Ranom does not use your information to train general-purpose artificial-intelligence models.

13. Children

Ranom accounts are intended for people aged 18 or over. We do not knowingly allow a child to create an account. A parent or guardian arranging a journey that involves a child must use their own account, follow applicable safeguarding requirements and provide only the information genuinely needed for the journey.

If you believe a child has provided personal information directly to Ranom, contact us.

14. Security

We use technical and organisational measures designed to protect information, including authentication and role checks, restricted database access, private document storage, short-lived document links, encryption in transit, provider access controls, audit records and operational monitoring.

No online service can guarantee absolute security. Keep your credentials and device secure and contact us promptly if you suspect unauthorised access.

15. Cookies and this website

This legal website does not intentionally set analytics, advertising or personalisation cookies. Its hosting provider may process IP addresses, request details and security logs to deliver and protect the site. If Ranom later adds non-essential cookies or analytics, we will update this policy and request consent where required.

16. Changes and contact

We may update this policy as Ranom, its providers or the law changes. We will publish the new version here, change the effective date and provide additional notice where the change materially affects you or the law requires it.

Questions and privacy requests: support@ranom.uk.