Privacy Policy
Effective and last updated: September 19, 2026
TORO Technologies LLC ("TORO," "we," "us," or "our") operates the TORO Rider application. This policy describes the data used by the app, why it is used, and the choices available to you.
TORO does not sell personal data, does not use third-party advertising SDKs, and does not track users across other companies' apps or websites.
1. Data We Collect
- Account and contact data: name, username, email, phone number, profile photo, user ID, authentication tokens, and saved addresses.
- Location: precise and coarse location, pickup and destination locations, routes, and—only with device permission—background location during an active trip, delivery, or safety event.
- Payments and transactions: billing details, payment method identifiers, wallet information, fares, tips, purchases, refunds, and trip, delivery, marketplace, auction, tourism, and legal-service history. Stripe processes complete payment card details; TORO does not store complete card numbers.
- User content: photos, videos, audio, documents, reviews, support requests, chat messages, package instructions, searches, and information submitted to marketplace, tourism, or legal features.
- Verification and sensitive data: driver license, vehicle, insurance, professional-license, incident, and compliance documents when required for a feature or role.
- Device and diagnostics: device and app identifiers, push token, IP address, operating system, app version, interactions, and technical or error diagnostics.
- First-party usage analytics: which screens of the app you open, when (local hour and time zone), the app version, your country, and errors together with the screen where they happened. This is collected by TORO itself and stored on TORO's own backend (Supabase); it is not shared with analytics or advertising companies. It is used only to find errors, see where the app is confusing, and improve it.
Face ID or Touch ID is evaluated by Apple on your device. TORO does not receive or store your biometric template.
2. How We Use Data
- Create and secure accounts, authenticate users, and provide customer support.
- Match riders and drivers, calculate prices and routes, operate trips, shared rides, deliveries, marketplace orders, tourism events, and related safety tools.
- Authorize and settle payments, tips, refunds, wallet entries, invoices, commissions, and fraud or dispute reviews.
- Send transactional email and push notifications.
- Comply with transportation, tax, accounting, safety, and legal obligations.
- Diagnose failures, protect the platform, measure feature use, and improve the service.
3. Artificial Intelligence Features
Some optional legal and marketplace tools use third-party artificial intelligence. Before any personal or user-provided content is sent to an AI provider, the app presents a separate disclosure and asks for explicit permission.
- Providers: Google Gemini, Groq, and OpenAI. The available provider may change if a primary provider is unavailable.
- Data that may be sent: the question, prompt, description, photo, audio, document, or case/product context selected by the user. This content may contain personal or sensitive information.
- Purpose: classify products, improve catalog images, summarize or extract documents, draft requested content, and answer questions within the selected AI feature.
- Your choice: you may decline. Core transportation and account functionality remains available, but the requested AI feature will not run. Permission can be revoked in Settings → Legal → AI data sharing.
- TORO Assistant (app and toro-ride.com): the assistant answers how-to questions about the app. Your question and the recent conversation are sent to one of the providers above to write the answer; in the app, the name of the screen you are on is also sent. The assistant cannot see your account, trips, orders, or payments. TORO keeps the question, the answer, the screen, the language, and your 👍/👎 rating to improve the guide, without your user ID; email addresses and phone numbers written in a question are masked before it is stored. Do not write passwords, codes, or card details in the chat.
TORO instructs processors to use submitted data only to provide and secure the requested service and requires contractual data protections appropriate to the information processed. TORO does not authorize AI providers to use this data for TORO advertising or cross-app tracking.
4. SMS and Text Messages
TORO may send SMS (text) messages to your mobile phone number for account verification codes, ride request and acceptance notifications, driver arrival updates, trip status updates, safety alerts, and other service-related communications. SMS messaging is optional and requires your explicit opt-in consent.
- How you opt in: During account registration, you may check the SMS consent checkbox. You may also enable or disable SMS notifications at any time in Settings → Notifications → SMS Notifications.
- Message frequency: Varies based on your ride activity. You will not receive more than 10 messages per day under normal use.
- Message and data rates: Standard message and data rates from your wireless carrier may apply.
- Opt out: Reply STOP to any TORO SMS to stop receiving messages. You may also disable SMS in the app Settings. After opting out, you will receive a one-time confirmation message.
- Help: Reply HELP to any TORO SMS for assistance, or contact support@toro-ride.com.
- No sharing: TORO does not sell, rent, or share your phone number or SMS opt-in consent with third parties for their marketing purposes.
- Carriers: Compatible with major U.S. carriers. Carriers are not liable for delayed or undelivered messages.
5. Providers and Disclosures
| Recipient | Purpose and data |
|---|---|
| Supabase and its infrastructure providers | Authentication, database, storage, and server functions; account, service, transaction, location, and user content. |
| Stripe | Payments, payouts, fraud prevention, and refunds; identity, billing, payment, and transaction data. |
| CJ Dropshipping (fulfillment partner for TORO Shop products) | Order fulfillment and shipping of TORO Shop products; recipient name, phone number, shipping address, and ordered items. Shared only when you buy a TORO Shop product. |
| Apple and Google | Optional sign-in and platform services; account tokens and information the user authorizes them to provide. |
| Google Firebase | Push notifications; device push token and delivery metadata. |
| Twilio | SMS delivery; phone number, message content, and delivery status. Twilio processes messages on behalf of TORO and does not use your data for its own marketing. |
| Mapbox, CARTO, OpenStreetMap/Nominatim, Photon/Komoot, and OSRM | Maps, address search, geocoding, and routing; coordinates, search text, and route requests. |
| Resend and Amazon SES | Transactional email; email address, message content, and delivery status. |
| Google Gemini, Groq, and OpenAI | Optional AI processing described in Section 3, only after explicit permission. |
| FacturAPI and other tax or invoicing processors | Legally required receipts, invoices, and associated transaction data. |
After a match or order, TORO shares the limited information needed between participants, such as first name, profile image, vehicle details, pickup/destination information, instructions, and live trip location. We may also disclose information when required by law, to respond to an emergency, to investigate abuse or fraud, or as part of a corporate transaction subject to appropriate safeguards.
6. Retention and Account Deletion
We retain information only while needed to provide the service and for security, dispute, accounting, tax, transportation, or other legal obligations. Retention depends on the data category and applicable jurisdiction.
You can request deletion inside the app at Settings → Delete account. A confirmed request disables the authentication identity and deletes or anonymizes profile data and user files. Records that must be retained for payment, tax, fraud prevention, safety, litigation, or dispute purposes may remain in restricted or anonymized form. Payment processors may retain records under their own legal obligations. Details are available on the account deletion page.
7. Your Choices and Rights
- Change camera, photo, notification, and location permissions in iOS Settings. Background location is optional but disabling it may stop active-trip tracking and safety functions.
- Opt out of SMS messages by replying STOP or disabling SMS in app Settings.
- Revoke optional AI sharing in the app's Legal settings.
- Request access, correction, portability, or deletion by emailing privacy@toro-ride.com.
- Opt out of promotional email through its unsubscribe control. Transactional service messages may still be sent.
Residents of California and other applicable jurisdictions may have additional rights, including the right to know, correct, delete, or obtain a copy of personal information and to receive non-discriminatory treatment for exercising those rights. Because TORO does not sell or share data for cross-context behavioral advertising, there is no sale or targeted-ad sharing to opt out of.
8. Security and International Processing
TORO uses access controls, encrypted network connections, platform secure storage, and database row-level security. No system can guarantee absolute security. Providers may process data in the United States or other locations where they operate, using contractual and legal safeguards appropriate to the transfer.
9. Children
The app is not directed to children under 18, and TORO does not knowingly create accounts for children under 18. Contact us if you believe a child submitted personal information.
10. Changes and Contact
We will update the effective date and provide notice in the app when a material policy change requires it.
- Controller: TORO Technologies LLC, Phoenix, Arizona, United States
- Privacy: privacy@toro-ride.com
- Support: support@toro-ride.com