Privacy Policy

Key points

We do not collect precise location. We do not run ads. We do not sell or share personal information for advertising. We collect usage analytics to understand how the app is used and to improve it.

Riders never sign in. Drivers create an account with their first name, last name and email address. We send marketing email only to drivers who opt in, and you can opt out at any time.

Drivers can delete their account and saved data at any time.

What we collect from drivers

Name and email address. When you sign up, we collect your first name, last name and email address. We use them to create and run your account, send your sign-in email and contact you about your account and the service. Sign-in codes and links are stored as a keyed fingerprint and expire after 10 minutes.

Marketing choice. At sign-up you can check a box (it starts unchecked) to get marketing email from Ryder Radio, such as product news and offers. We record whether you opted in and when. If you don't check the box, we don't send you marketing email.

Account record. A random account id, your music service choice, your setup progress and a counter that lets you sign out of every device.

Spotify app details, only if you connect your own Spotify app for full rider search or optional one-tap Play. The Client ID, Client Secret and the Spotify access you approve are sealed with encryption on our servers and never sent to a browser.

Requests and History. Waiting rider requests (the song or link a rider sent) and your latest 100 selections from the past 30 days.

Request counts. Daily counts of requests and what happened to them, kept for 35 days, with no song, link or rider detail.

We may show drivers aggregate song counts, limited to songs picked by at least three drivers, with no driver or rider identified.

A sign-in cookie that keeps you signed in for 30 days after your last use.

What we collect from riders

For full song search, we use search words to find songs but do not store those search words. We save the chosen song for the driver.

Without a connected Spotify app, we save the rider's typed song and artist words as a waiting request. The driver and anyone with that rider link can read waiting requests.

To prevent duplicate requests, we keep a private keyed fingerprint of typed words. It is used for 60 seconds, is not saved in History and is removed on a later successful request change or account deletion.

When optional song finding is enabled, a rider's typed song and artist words may be sent to an AI service provider to find the matching song. The request is saved before any lookup, and a failed lookup leaves the typed request available.

A rider's page holds a short-lived pass that expires within an hour, so a request can only reach the driver whose QR code was scanned.

Marketing email

We send marketing email only if you opted in. Every marketing email includes an unsubscribe link. You can also opt out at any time by emailing support@ryderradio.com. Opting out stops marketing email but not messages about your account, such as sign-in email. We record when you opt out and honor it promptly. We do not sell your name or email address or share them for advertising.

Analytics

We collect usage analytics on Ryder Radio pages, such as which pages are viewed, which features are used, and the type of device and browser. Usage analytics are provided by Cloudflare Web Analytics, which does not use cookies and is not used to identify you. We use analytics to understand and improve Ryder Radio, not for advertising, and we do not sell it.

IP addresses and logs

To stop abuse we rate limit requests. For that we keep a keyed, daily-changing fingerprint of an IP address, not the address. Our app logs do not contain IP addresses, email addresses, song titles, links or tokens. Our hosting and network providers (Vercel and Cloudflare) handle IP addresses to deliver pages and protect the network.

Who we share data with

We use a small set of service providers to run Ryder Radio:

Hosting and data storage: Vercel runs our servers and stores app data in Vercel Blob storage.

DNS and usage analytics: Cloudflare runs our domain name service and provides Cloudflare Web Analytics.

Email: Resend delivers our email, including sign-in email and, if you opted in, marketing email, so it receives your email address and, for marketing email, your name.

Optional song finding: when it is enabled, Anthropic, an AI service provider, receives a rider's typed song and artist words to find the matching song.

Music: Spotify receives rider search words for full song search, provides song details and artwork and, for drivers who set it up, handles playback in the driver's own Spotify account. Spotify handles that data under its own privacy policy.

Each provider gets only what it needs to do its job.

Messages you send to support@ryderradio.com may be processed by an AI service provider to draft replies, and some replies may be sent automatically. We keep support messages only as long as needed to handle your request and keep a record of it.

We may disclose information if the law requires it or to protect people from harm. If Ryder Radio is ever sold or merged, this policy continues to apply to the data.

Inside Ryder Radio, access to driver names and email addresses is limited to authorized staff who need it to run the service, behind a separate login.

Where data is stored

Ryder Radio's servers run in the United States, and your data is processed in the United States by our service providers.

How long we keep it

Waiting requests expire after 15 minutes. History keeps your latest 100 selections from the past 30 days. Sign-in codes and links expire after 10 minutes. Rate limit records are short lived. Your account stays until you delete it.

We keep your name, email address and marketing choice while your account exists. If you opt out of marketing, we keep a record of the opt-out so we don't email you again.

Typed words stop appearing in waiting requests after 15 minutes. They are removed from storage when a matching song replaces them, the driver skips or clears requests or starts a new ride, or the account is deleted. Expired words can remain in storage until a later successful request save removes them. Typed words are not saved in History.

Your choices and rights

Delete your account any time: sign in, open Account, then tap Delete account. This deletes your account record, including your name and email address, saved Spotify app details, waiting requests and History, and signs out every device. We keep only a keyed fingerprint of your email and the deletion time, which cannot be turned back into your address, so a sign-in started before you deleted cannot bring the account back and we do not email you again.

If you connected Spotify, you can also remove Ryder Radio's access on Spotify's side: sign in to your Spotify account, open Manage apps (Apps), and remove access for the Ryder Radio app you connected. Deleting your Ryder Radio account also deletes the Spotify app details and access we saved.

Riders do not have an account to delete. Waiting requests expire after 15 minutes, and History is limited as described above. A rider can email support@ryderradio.com to ask us to delete a request they sent.

You can also email support@ryderradio.com to ask what we hold about you, or to correct or delete it. Depending on where you live, you may have more rights under local law, and we will respond as that law requires.

US state privacy rights. If you live in a US state with a consumer privacy law, you may have the right to access, correct, delete or get a copy of your personal information. To make a request, email support@ryderradio.com. We may need to confirm the request comes from you. We do not sell personal information or use it for targeted advertising, and we will not treat you differently for using these rights.

Security

Traffic is encrypted with HTTPS. Secrets are sealed at rest, sign-in uses one-time codes and links, and every page runs under a strict content security policy. No system is perfectly secure, so we keep what we store small.

Children

Riders may be under 18. Ryder Radio is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Drivers must be adults.

If we learn that we collected personal information from a child under 13, we delete it. A parent or guardian who thinks their child sent us information can email support@ryderradio.com and we will delete it.

Changes

If we change this policy we post the new version here with a new effective date.

Contact

Gryt, Inc. doing business as Ryder Radio, 2451 W Grapevine Mills Circle, Unit #64, Grapevine, TX 76051. Email support@ryderradio.com.