Spinr Mobility Inc. ("Spinr," "we," "us," or "our") operates a ride-share platform for Saskatchewan, Canada. This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and the choices and rights you have. It applies to everyone who uses the Spinr rider app or driver app.
We are subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for our drivers, to record-keeping obligations under Saskatchewan's ride-share regulatory framework. Where those two sets of obligations overlap — for example, PIPEDA gives you a right to ask us to delete your data, while Saskatchewan's transportation regulations require certain trip and driver records to be kept for a fixed number of years — we explain in the "Your Rights" section below exactly what that means for you.
1. what we collect
Account information: your name, phone number, and email address, collected when you sign up. We verify your phone number with a one-time passcode.
Trip information: pickup and drop-off locations, your route, fare, and payment amount for each ride. We only collect a saved home or work address if you choose to save one as a favorite — we never guess or infer where you live or work.
Location information: while you are matched to an active ride, we collect location updates so the app can show real-time position, calculate your fare and ETA, and — for drivers — establish which insurance coverage period applies to that moment of the trip. We retain the detailed GPS trail from a completed trip for 90 days, after which it is permanently deleted; we are separately required to retain the GPS trace at pickup and at drop-off only (not the full route) for three years, for regulatory and insurance-audit purposes.
Payment information: we use Stripe, a PCI-compliant payment processor, to handle card payments. We never see or store your full card number.
Communications: if you message your driver or rider through the in-app chat, or contact Support, we keep a record of that conversation. In-ride chat messages are deleted 90 days after they are sent. Do not use chat to share phone numbers or arrange payment outside the app.
Safety information: if you add emergency contacts, we store their name, phone number, and relationship to you, encrypted at rest. If you use the SOS feature, we record the incident, your location at the time, and the outcome.
Device and diagnostic information: crash reports and basic performance data from your device, used to fix bugs and keep the app reliable.
Driver-specific information: driver's license number, vehicle registration, insurance documents, and background check results, collected to verify eligibility to drive and stored encrypted. This information is never shared with riders.
2. why we collect it
We use your information to provide the ride-share service itself: matching you with a driver or rider, calculating fares, processing payment, showing real-time location during a trip, and providing customer support. We also use it to keep the platform safe — verifying driver eligibility, investigating safety reports, and operating the SOS feature — and to meet our legal and tax obligations, including issuing tax receipts and, for drivers, year-end earnings summaries.
We do not use your information to build advertising profiles, and we do not sell your personal information to third parties.
4. how long we keep your information
We keep different categories of information for different lengths of time, based on why we collected it:
Trip records, including fare and route summary: 7 years, to meet tax and financial audit requirements.
Driver and vehicle linkage to a specific trip: 7 years, for regulatory purposes.
Records of which insurance coverage period applied at each moment of a trip: 7 years, for insurance-audit purposes.
The detailed GPS trail of a completed trip: 90 days, then deleted; the GPS point at pickup and at drop-off only: 3 years.
Your account information, if you delete your account: your name, email, profile photo, and saved addresses are removed 30 days after the request; some other information is kept longer, as described under "Delete your information." Certain records described above are kept longer because Saskatchewan's transportation regulations require it — this is explained further in "Your Rights" below.
5. your rights
You can ask us to:
Access your information — from Settings, tap "Download My Data" to request a full export of your account information.
Correct your information — most profile fields can be edited directly in the app; for anything else, contact Support.
Delete your information — from Settings, tap "Delete Account." 30 days after your request, we remove your name, email, profile photo, and saved addresses. Some information stays longer: your phone number, driver eligibility documents and work-authorization data, bank and payout records, and the trip and insurance records we keep for regulatory, tax, and claims purposes. Contact our Privacy Officer for the basis and period that apply to a particular record. When we retain those records past a deletion request, we anonymize what we can — for example, removing your name and rounding saved addresses — while keeping the fare and route summary intact for tax purposes.
Withdraw marketing consent — you can turn off marketing emails, SMS, and push notifications independently in Settings at any time; this does not affect service notifications about your rides.
If you have a privacy concern we haven't resolved to your satisfaction, you may also contact the Office of the Privacy Commissioner of Canada.
6. how we protect your information
We encrypt sensitive information such as driver license numbers and emergency-contact details at rest. Access to personal information inside Spinr is limited to staff who need it to do their job — for example, our support team can see the information needed to resolve your ticket, not your full account history by default. If we ever become aware of a data breach that poses a real risk of harm to you, we will notify the Office of the Privacy Commissioner of Canada within the timeframe PIPEDA requires and notify you directly as soon as reasonably possible, explaining what happened, what information was involved, and what we're doing about it.
7. children's privacy
Spinr is not directed at children, and you must meet the age of majority in Saskatchewan to create an account. We do not knowingly collect personal information from children.
8. accessibility
We aim to meet WCAG 2.1 AA accessibility standards across our rider- and driver-facing surfaces, and we provide alternative formats of our policies on request. If you need this policy in an alternative format, or encounter an accessibility barrier anywhere in the Spinr app, contact accessibility@spinr.ca.
9. changes to this policy
If we make a material change to how we handle your information, we will notify you in the app before the change takes effect, and where required by law, we will ask for your renewed consent.
10. contact us
Questions about this policy, or to exercise any of the rights above, contact our Privacy Officer at privacy@spinr.ca. To report a suspected security or privacy incident, contact security@spinr.ca.