Privacy Policy

Commuti is a free commute-sharing app for Australian commuters. We help people find compatible carpool partners for their regular commute. We are based in Brisbane, Queensland, and operate under Australian law.

Contact: commute@commuti.app

When you sign up:

• Mobile phone number (used to verify your identity via SMS)
• Name and suburb
• Profile bio (optional)
• Profile photo (optional)

When you set up your commute:

• Your pickup area and destination (suburb-level, not your exact home address)
• Days and times you commute
• Whether you drive or ride
• Vehicle details if you drive (make, model, colour, registration)

When you use the app:

• Messages you send to other Commuti members
• Trip history (dates, routes, who you travelled with)
• Ratings and reviews you give or receive
• Location during active trips (GPS, used for safety features)

Automatically:

• Device push notification token (to send you trip and match notifications)
• App usage data (crashes, errors - used to fix bugs)

We do not use your information for advertising. We do not sell your data to anyone.

We only access your device's GPS location during an active trip - when you have explicitly started a trip in the app. We use this to:

• Show your carpool partner that the trip is underway
• Alert your trusted contacts if the trip deviates significantly from the expected route
• Confirm trip completion

We do not track your location outside of active trips. Location data for completed trips is deleted after 30 days.

Other Commuti members:

When you match with someone or join their carpool, they can see your name, suburb, profile photo, rating, trip count, and vehicle details (if you drive). They cannot see your phone number unless you share it directly.

Trusted contacts:

If you add emergency contacts to your safety settings, they will be notified about your trip status if you activate the SOS feature or a route deviation is detected.

Service providers:

We use the following third-party services to operate the app:

• Supabase (database and authentication) - stores your account data on servers in Australia/AWS
• Twilio - sends your phone verification SMS
• Expo / Apple / Google - delivers push notifications to your device
• Expo Application Services (EAS) - builds and distributes the app

These providers process data only on our behalf and under our instructions.

We do not share your information with any other third parties.

• Active account: We keep your data for as long as your account is active
• Deleted account: We delete your personal data within 30 days of account deletion
• Messages: Retained for 12 months then automatically deleted
• Trip location data: Deleted 30 days after trip completion

Under the Australian Privacy Act 1988, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and associated data
• Opt out of non-essential communications

To exercise any of these rights, email us at commute@commuti.app. We will respond within 30 days.

We use industry-standard security practices including encrypted data transmission (TLS), phone number verification for all accounts, and access controls on our database. No system is completely secure - if you believe your account has been compromised, contact us immediately.

Commuti is not intended for use by anyone under the age of 18. We do not knowingly collect information from minors. If you believe a minor has created an account, please contact us and we will delete it promptly.

We may update this policy from time to time. If we make significant changes, we will notify you via the app or by SMS. Continued use of Commuti after changes are posted constitutes acceptance of the updated policy.