CERTIRIDE PRIVACY POLICY

1. INFORMATION YOU PROVIDE

Depending on the features you use, CertiRide may collect information you provide directly, including:

• Name
• Email address
• Phone number
• Account information
• Household membership information
• Application configuration and preferences
• Protected-app selections

Authentication credentials may be processed by authentication service providers. CertiRide should not store your plaintext account password.

2. ACCOUNT INFORMATION

CertiRide uses account information to authenticate users, associate devices and settings with accounts, support household functionality, maintain security, and provide application services.

3. LOCATION AND BACKGROUND DRIVING DETECTION

CertiRide may request foreground and background location permissions when those permissions are necessary to provide driving-detection and distraction-reduction functionality.

Location-related information may be processed to estimate movement or speed and determine whether driving-related conditions exist.

When background location permission is enabled, CertiRide may access permitted location information while the CertiRide application interface is not visible so that driving detection can continue without requiring the dashboard to remain open.

CertiRide may use an Android foreground service for ongoing driving detection. Android may display an ongoing system notification while that service is active.

After a device restart, CertiRide may attempt to restore its driving-detection service when setup is complete and the required permissions remain enabled. A device restart does not itself mean that Driving Mode is active; driving-related conditions must still be detected.

Permission to access location does not necessarily mean that every location observation is permanently stored. CertiRide's current driving-detection functionality is intended to use location-derived speed and movement information for operation of the protection feature.

CertiRide should collect or retain location information only as necessary for supported application functionality.

4. USAGE ACCESS

Android Usage Access may allow CertiRide to determine information about application usage, including which application is active or has recently been used.

CertiRide uses this capability to determine whether a protected application should be restricted while Driving Mode is active.

CertiRide does not obtain unrestricted access to the contents of every application merely because Usage Access is enabled.

5. ACCESSIBILITY SERVICE

CertiRide uses an Android Accessibility Service as part of its protected-application enforcement system.

Android Accessibility Services are powerful system capabilities and may expose information about applications or interface activity to an enabled accessibility service.

CertiRide is intended to use accessibility information only as necessary to provide its distraction-reduction and application-restriction functionality.

CertiRide is not intended to use the Accessibility Service to collect passwords, private communications, financial information, or unrelated sensitive content.

6. PROTECTED APPLICATIONS

CertiRide may store information identifying applications that a user or authorized household manager has selected for protection.

This information is used to determine which applications should be restricted under applicable CertiRide conditions.

7. DRIVING AND EVENT INFORMATION

CertiRide may generate operational information relating to its features, such as:

• Driving Mode activity
• Restriction events
• Passenger certification events
• Permission status
• Application-protection events
• Configuration changes
• Other security or diagnostic events

Such information may be stored locally or, where supported by CertiRide functionality, associated with the user's account or household.

8. PASSENGER CERTIFICATION

CertiRide may record that passenger certification occurred, the applicable certification period, and related operational information.

Passenger certification information may be used to control temporary access to protected applications and maintain event history.

9. HOUSEHOLDS

If you participate in a CertiRide household, certain account, device, status, configuration, or event information may be available to authorized members or managers of that household depending on the features provided by CertiRide.

Users should only add individuals or devices to households when they have appropriate authority to do so.

10. DEVICE AND TECHNICAL INFORMATION

CertiRide may process technical information necessary to operate, secure, diagnose, or improve the application.

This may include device type, operating-system information, application version, permission state, error information, and similar technical information.

11. FIREBASE AND CLOUD SERVICES

CertiRide may use cloud infrastructure and services provided by third parties, including Google Firebase, for features such as authentication, database services, and application infrastructure.

Information processed through these services may be subject to the security and data-processing practices of the applicable service provider.

12. PHONE AUTHENTICATION

If phone authentication is offered and you choose to use it, your phone number and verification information may be processed for authentication and account-security purposes.

SMS verification may involve telecommunications providers and authentication service providers.

13. BIOMETRIC AUTHENTICATION

CertiRide may support device biometric authentication such as fingerprint authentication.

Where implemented through Android's biometric security system, CertiRide is intended to receive only the authentication result necessary to authorize access.

CertiRide is not intended to receive or store your fingerprint image or biometric template.

Biometric information used by Android is managed by the device and operating system.

14. DATA SECURITY

CertiRide uses reasonable technical and organizational measures intended to protect information.

However, no application, device, network, database, or electronic storage system can guarantee absolute security.

Users are responsible for protecting their devices and authentication credentials.

15. DATA SHARING

CertiRide may share information with service providers when necessary to operate, secure, maintain, or support the service.

CertiRide may also disclose information when reasonably necessary to comply with law, enforce applicable agreements, protect users, investigate abuse, or protect the rights and security of CertiRide and others.

16. SALE OF PERSONAL INFORMATION

CertiRide does not sell personal information for monetary compensation.

If CertiRide's data practices materially change in the future, this Privacy Policy will be updated as appropriate.

17. CHILDREN AND FAMILY USE

CertiRide may provide family or household functionality intended to allow parents or guardians to manage distraction-reduction settings for younger drivers.

Parents and guardians are responsible for determining whether use of CertiRide is appropriate and lawful for a minor under their supervision.

Additional consent or privacy requirements may apply depending on the user's age and jurisdiction.

18. DATA RETENTION

Information may be retained for as long as reasonably necessary to provide CertiRide, maintain accounts, support security, maintain legally or operationally necessary records, resolve disputes, and comply with applicable obligations.

Different categories of information may have different retention periods.

19. ACCOUNT AND DATA DELETION

CertiRide intends to provide reasonable mechanisms for users to request account or personal-data deletion where required or appropriate.

Certain records may be retained when necessary for security, fraud prevention, legal compliance, dispute resolution, or establishment or defense of legal rights.

20. SECURITY INCIDENTS

Although CertiRide is designed with security safeguards, no software system can guarantee that unauthorized access, malware, compromised devices, third-party vulnerabilities, or other security incidents will never occur.

CertiRide will address identified security issues as reasonably appropriate.

21. PERMISSION CONTROL

Android permissions may generally be reviewed or changed through your device settings.

Disabling Accessibility, Usage Access, foreground or background location, notifications, or other permissions required by a CertiRide feature may prevent that feature from functioning correctly. In particular, disabling location permissions may prevent continuous driving detection or automatic restoration of driving monitoring after a device restart.

22. CHANGES TO THIS POLICY

This Privacy Policy may be updated as CertiRide develops.

When a material change requires renewed acknowledgment, CertiRide may require acceptance of the updated Privacy Policy before continued use.

23. QUESTIONS AND PRIVACY REQUESTS

CertiRide will provide appropriate contact information or an in-app mechanism for privacy questions, account requests, and data-related requests before general commercial release.

Beta Support, Bug Reports, and AI Assistance

During beta testing, CertiRide may provide a website-based support assistant and bug-reporting tools. Information you choose to submit may include your question, bug description, expected behavior, reproduction steps, device model, Android version, CertiRide version, and optional contact information.

Support-assistant questions may be processed by a third-party artificial intelligence service through CertiRide's server-side systems. CertiRide should not place its AI service credentials in the website or mobile application.

Bug reports may be stored in CertiRide's cloud systems and may be summarized or categorized to help diagnose and prioritize beta issues. Do not submit passwords, verification codes, authentication tokens, financial information, or other sensitive information through Beta Help.