Privacy Policy

1. What we collect

If you publish a ride: your name, your WhatsApp number, the pickup and dropoff locations you select, your schedule and return time, the number of seats, any price, and the make, model and year of your car.

If you request a seat: your name, your WhatsApp number, the listing you asked about, and any note you write.

Automatically: your IP address, the approximate time of your request, and basic device and browser information. We use these to apply rate limits and to detect abuse.

We do not ask for and do not want your CNIC, address, date of birth, payment details or documents. Please do not send them.

2. Why we collect it

To publish your listing and match it to searches. To pass an introduction between a rider and an owner. To review listings before they appear. To answer you if you contact us. To limit abuse of the service and protect people using it.

3. What the other person sees

If you request a seat, the owner receives your name, your WhatsApp number and your note, because that is how they reply to you.

If you publish a ride, riders see your first name only, along with the route, schedule, seats, price and car. Your phone number is never shown on a listing page or in search results. A rider reaches you only after requesting a seat, through a WhatsApp link that expires after 30 minutes.

Once the two of you are talking on WhatsApp, that conversation is between you. It does not pass through NaqlGo and we cannot see it.

4. Who else processes your data

We use a small number of service providers to run Pool, and your data passes through them: Vercel (website hosting), MongoDB Atlas (database), Upstash (rate limiting and caching), and Google Gmail (the internal email that alerts our team to a new request).

Location search: the text you type into a location field is sent to the mapping services Photon (Komoot) and Nominatim (OpenStreetMap) so they can return matching places. Do not type anything into those fields that you would not want to send to a third party.

Security: Cloudflare Turnstile runs a bot check on our forms and receives your IP address and browser information.

Analytics: on the live site we use Google Analytics and Vercel Analytics to count visits and understand which pages are used. These are not run during development.

We do not sell your data, and we do not share it for advertising.

5. How long we keep it

Listings are kept while they are active and for a period afterwards so we can deal with reports and disputes. Seat requests are kept so we can follow up where a rider never made contact.

The short-lived introduction links expire after 30 minutes and are removed automatically.

If you ask us to delete your data, we will remove your listing and your personal details, except where we need to keep something to comply with the law or to deal with an open report.

6. Your choices

You can ask us to remove your listing, to correct something, or to delete the personal information we hold about you.

To do that, Message us on WhatsApp using the link at the end of this page. Tell us the WhatsApp number you used, so we can find the right records.

Once you have exchanged numbers with someone on WhatsApp, we cannot remove your details from their phone. That is between the two of you.

7. Cookies and similar technology

Pool does not use advertising cookies. Analytics and the bot check may set cookies or store small amounts of data in your browser so they can work.

Your browser also stores your most recent search locally, so that returning from a ride page takes you back to your results. That stays on your device.

8. Children

Pool is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, tell us and we will remove it.

9. Security

We limit who on our team can see listing and request data, we keep phone numbers off public pages, and we use short-lived links for introductions.

No service can promise perfect security. If we become aware of a breach that affects you, we will tell you.

10. Changes, and contact

We may update this policy. The date at the top shows when it last changed.

Questions, or a request about your data? Message us on WhatsApp using the link at the end of this page.