01Who we are
The data controller is YUNAN BV, Wijngaard 20, 3110 Rotselaar, Belgium. We operate the marketing site komee.io and the KoMee! app on the App Store. The rules of the road that go with this policy are on the Terms page.
Questions about anything below? Write to hello@komee.io.
02What the website collects
Nothing personal. No analytics, no cookies that identify you, no ad pixels, no fingerprinting, no third-party trackers. The site is hosted on Vercel, which keeps short-lived request logs (IP address and request line) for security and abuse prevention. That's it.
03What the app collects
Your name and either a phone number or email — captured through Sign in with Apple or by signing in with your email and a one-time code (OTP). If you use Apple's "Hide My Email," we never see your real address.
Only while you're actively offering or joining a ride. Used to render the map, calculate ETA, and tell your crew where the pickup is. Not collected in the background. Not sold. Not shared. Not used for ads.
Who's in your crews and the rides you've taken in them. Stored so you don't re-set up your network every week.
04What we don't collect
No contacts. No microphone. No camera. No photos. No health data. No browsing history. No advertising identifiers. No third-party analytics SDK. No crash reporter that ships personal data off your device.
05How we use it
- Run the service — match riders to drivers in your network.
- Deliver push notifications about your rides.
- Contact you about service issues, account security, or material changes to this policy.
- Comply with applicable law (legal obligation).
Legal basis under GDPR: performance of the contract you enter into when you create an account (Art. 6(1)(b)), plus legal obligation for the last bullet (Art. 6(1)(c)).
06Who we share it with
A short, named list:
- Apple — Sign in with Apple, push notifications (APNs), map tiles (MapKit).
- Supabase (EU region) — hosts our database and authentication.
- Vercel — hosts the marketing website.
Nobody else. Specifically: no advertisers, no data brokers, no analytics vendors. Each processor is bound by a Data Processing Agreement. Your ride data and our database are hosted in the EU; Apple handles sign-in and push and may transfer limited data to the US under the EU–US Data Privacy Framework.
07How long we keep it
- Account data — while your account exists, plus up to 30 days after deletion for backup rotation.
- Ride history — 12 months, then anonymised.
- Location pings — not stored after the ride ends. Only the start and end points are kept with the ride record.
08Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Have inaccurate data corrected.
- Have your data erased.
- Receive your data in a portable format.
- Restrict or object to processing.
- Withdraw any consent you've given.
- Lodge a complaint with the Belgian Gegevensbeschermingsautoriteit (Data Protection Authority).
One email to hello@komee.io handles all of these. We respond within 30 days.
09Deleting your account
In the app: Account → Edit profile → Delete account. Or email hello@komee.io and we'll do it for you.
When you delete your account, we give you a 30-day grace period before anything is erased for good. Change your mind in those 30 days? Just log back in and your account picks up right where you left off. After 30 days the deletion is permanent and can't be undone.
Once it's permanent, the other party in any rides you've taken still sees those rides on their side, but with your name anonymised. Audit logs we're legally required to keep stay for as long as the law requires.
10Children
KoMee! accounts are for adults (18+). School carpools are set up by a parent, who is the account holder; minors don't have their own KoMee! accounts.
11Changes to this policy
We'll post the updated policy here and bump the "Last updated" date. Material changes trigger an in-app notice before they take effect.