Privacy & your data

Account

Name, email, mobile number (optional). You sign in with an emailed link; there is no password.

Family

Your kids' first names and color, and the adults linked to them (parents, drivers).

Pickup addresses

Addresses you add, with optional notes such as a gate code.

Carpool activity

Rides you claim, who's going to each practice, “on my way” and arrival times, chat messages and read receipts.

Alerts

Alerts we sent you, and for push alerts the device's push address and browser type.

Sign-in

A session cookie that keeps you signed in while you use the app (it lapses after a year without use). No tracking or advertising cookies.

Connected apps

AI assistants you allow to act for you: which ones, what you allowed, and when they last connected.

• No location tracking. “I’m on my way” is a button you press, not GPS.
• No IP addresses stored against you. The sign-in page counts requests per network for 15 minutes to stop spam, in memory, and never links them to an account.
• No ads, analytics or tracking pixels, and no data bought from others.
• No selling or sharing. We don’t sell personal information or share it for cross-context advertising, so there is nothing to opt out of. Global Privacy Control signals are respected by default.

• Parents in your carpools see your name and mobile, the kids who ride, and the pickup address for each ride, so drivers know where to go.
• Service providers that run Koinoda for us, under contract: Microsoft Azure (hosting, database and email delivery, in the United States) and the push services built into your phone or browser (Apple, Google, Mozilla) to deliver alerts.
• SportsEngine calendars are read to fill in practices; we send them nothing about you.
• AI assistants you connect (Claude, ChatGPT, Grok…) receive what you can see in your carpools, including other families’ names, kids and pickup addresses, when you ask them about it. That’s your choice: nothing is shared until you allow it, their own privacy terms then apply, and you can disconnect them anytime in your profile.
• We disclose data to authorities only when the law requires it.

As long as your account exists. When you delete it, your data is removed immediately; encrypted database backups expire within 14 days and server logs within 30. Sign-in links and expired sessions are deleted a day after they stop working.

Accounts are for parents, guardians and drivers, not children under 13. Parents add their kids’ first names so drivers know who to collect, and can remove them at any time.

Wherever you live, and including under the California Consumer Privacy Act (CCPA/CPRA) and similar laws in other states, you can:

• know what personal information we hold and how we use it (this page and your download);
• get a copy of it in a portable format (Download my data);
• correct it (your profile);
• delete it (Delete my account);
• opt out of sale or sharing (we don’t do either);
• use these rights without being treated differently.

Can’t sign in, or acting for someone else? Email privacy@koinoda.com from the address on the account. We reply within 45 days, usually much sooner.