Privacy Policy.

WiseRider (“we”, “us”, “our”) operates the WiseRider fare comparison application, available at wiserider.com.au and as a progressive web app (PWA). Our platform provides fare estimates based on route data, community-reported prices, regulated tariff schedules, and publicly available rate information.

For privacy questions, contact us at privacy@wiserider.com.au.

2.1 Information you provide directly

• ·Account registration: Full name, email address, and optionally mobile number when you create an account. If you sign up via Google, we receive only your name, email address, and profile photo. If you sign up via Apple (Sign in with Apple, iOS only), we receive a unique Apple user identifier and, only if you choose to share them, your name and email address. If you elect Apple’s “Hide My Email” option, Apple provides a private relay address that forwards to your real email; we treat that relay address as your account email.
• ·Profile information: Optional details including date of birth, gender, preferred language, and saved places (Home and Work addresses).
• ·Community price reports: When you voluntarily report a fare you paid (provider, ride type, price, and route data). Reports are anonymous unless you are signed in.
• ·Accuracy feedback: When you rate an estimate as accurate, too high, or too low.
• ·Ride follow-ups: If you return to WiseRider after tapping a provider’s “Open” button, you may be prompted to report the fare you paid.
• ·Emergency contacts: If you add emergency contacts to your profile (name, mobile number, relationship).
• ·Contact form: Your name, email, and message when you use the Contact Us form.

2.2 Information collected automatically

• ·Search data: Origin and destination addresses, coordinates, and route parameters.
• ·Location data: If you use “Use my current location”, we request your GPS coordinates to resolve your pickup address. The mobile app uses foreground-only location, we never access your location while WiseRider is closed or in the background.
• ·Smart Save planning data: When you open the Smart tab, we send your origin and destination coordinates (rounded to roughly 100 m for logging) plus the chosen multi-modal combo (e.g. walk, ferry, train, bus, rideshare leg) to our combo-planning service so we can improve route suggestions over time. No identifying account data is attached to the log entry.
• ·Price alerts (mobile): Price alerts you create are stored on your device only (local storage), and are delivered as scheduled local notifications. We do not store your alerts on our servers.
• ·Promo dismissals (mobile): If you tap “Hide promo” on a result card, we record the promo ID and its expiry on your device only so we don’t show it again until it expires. This list is never sent to our servers.
• ·Ride history: If logged in, your searches are recorded (provider, ride type, origin/destination, estimated price).
• ·Device information: Browser type, operating system, and screen size.
• ·Login security data: IP address and email of login attempts for brute-force protection.
• ·Usage analytics: If you accept cookies, Google Analytics 4 collects anonymised interaction data.

2.3 Information we do NOT collect

• ·We never collect payment card details or banking information.
• ·We do not access your Uber, DiDi, 13CABS, or any other provider account.
• ·We do not track your trips within third-party ride apps.
• ·We do not sell your personal data to third parties.
• ·We do not use advertising networks or tracking pixels.

• ·Fare estimation: Route and location data is used to calculate fare estimates across providers.
• ·Model training: Community-reported prices and accuracy feedback are used as training data for our ML fare estimation model. Processed in aggregate, your contributions are never individually attributed.
• ·Calibration: Reported prices are aggregated to adjust estimates for all users.
• ·Weather adjustments: Current weather from OpenWeatherMap is factored into estimates. No personal data is sent to OpenWeatherMap.
• ·Account management: Your name and email are used to identify your account and send transactional emails.
• ·Personalisation: Saved places and preferences improve your in-app experience.
• ·Security: Login attempt data is used to detect and prevent brute-force attacks.
• ·Marketing (optional): With your explicit opt-in consent only. You can opt out at any time.

WiseRider includes a voluntary crowd-sourcing feature where users can report actual fares and rate estimate accuracy. This data powers our machine learning model and calibration engine.

• ·Reports submitted while not logged in are fully anonymous.
• ·Reports submitted while logged in are stored with your user ID internally but are never displayed publicly in a way that identifies you.
• ·Training data is processed through regression models; individual reports cannot be reverse-engineered from model outputs.
• ·You own the data you submit. You may request deletion of your reports at any time.

We use the following third-party services to operate WiseRider:

• ·Google Maps Platform: address autocomplete, routing, and maps. When you search for an address, your query and coordinates are sent to Google. Google Privacy Policy
• ·Google Analytics 4: anonymised analytics, loaded only after you accept cookies. No data is sent if you decline. GA Data Practices
• ·OpenWeatherMap: current weather for the South-East Queensland region (Brisbane, Gold Coast, Sunshine Coast) to factor rain into estimates. Only the region’s general coordinates are sent; no user location data is shared. OWM Privacy Policy
• ·Google (OAuth): if you sign in with Google, we receive only your name, email, and profile photo.
• ·Apple (Sign in with Apple): on iOS, you may sign in with your Apple ID. We receive a unique Apple user identifier and, only if you grant permission, your name and email. Apple may provide a private relay email; if so, we use the relay address. Sign in with Apple Privacy

Deep links to provider apps

When you tap “Open” on a ride option, WiseRider constructs a deep link to the relevant provider app. The link contains only the origin and destination coordinates needed to pre-fill the booking. No personal data (name, email, account details) is included.

• ·Authentication cookie: A secure, httpOnly cookie containing your JWT session token. Essential for keeping you signed in.
• ·Cookie consent: A localStorage entry recording whether you accepted analytics cookies.
• ·Saved places: Home and Work addresses cached in localStorage for quick access.
• ·Ride follow-up: A temporary entry recording ride details when you tap “Open”. Cleared automatically after 2 hours.
• ·Google Analytics cookies: If you accept cookies, GA4 sets standard analytics cookies (_ga, _ga_*). Revoke consent at any time by clearing browser cookies.
• ·Service worker cache: Static assets cached for offline performance. No personal data is cached.

We do not use advertising cookies, cross-site tracking cookies, or third-party marketing pixels.

• ·Your data is stored in a secured database accessible only to WiseRider systems.
• ·Passwords are hashed using bcrypt with salt. We never store plaintext passwords.
• ·Authentication uses secure httpOnly cookies with JWT tokens.
• ·All data in transit is encrypted via HTTPS/TLS.
• ·Login attempts are rate-limited (10 failed attempts trigger a 15-minute lockout per email address).
• ·We apply the principle of least privilege: only the parts of the system that need your data can access it.

• ·Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• ·Ride history: Retained for up to 12 months, then permanently deleted.
• ·Price reports & feedback: Retained for up to 12 months, then anonymised permanently.
• ·Support requests: Retained for up to 12 months from resolution, then deleted.
• ·Login attempt logs: Retained for 24 hours for security monitoring, then automatically purged.
• ·Password reset codes: Expire after 15 minutes. Purged within 24 hours.
• ·Marketing consent records: Retained for 5 years as required by the Spam Act 2003.
• ·Emergency contacts: Retained while your account is active.

You can permanently delete your account at any time:

• ·In the WiseRider mobile app: open Profile → Settings → Delete account. The deletion runs immediately and cannot be undone.
• ·From the website: visit wiserider.com.au/delete-account or email support@wiserider.com.au from your registered address. We will process your request within 30 days.

Deletion removes all of your personal data, including:

• ·Your profile (name, email, mobile, date of birth, avatar).
• ·Saved places, preferences, and emergency contacts.
• ·Ride history and search history.
• ·Price reports and feedback associated with your account.
• ·Social account links (Google, Apple).
• ·Support request history.

Deletion is permanent and cannot be reversed. Anonymised aggregate data already incorporated into the ML model cannot be individually extracted or deleted.

WiseRider complies with the Notifiable Data Breaches (NDB) scheme. If we become aware of a breach likely to cause serious harm, we will:

• ·Contain and assess the breach as quickly as reasonably possible.
• ·Notify affected individuals directly by email as soon as practicable.
• ·Lodge a notification with the OAIC within 30 days.
• ·Publish a statement on our website if direct notification is not practicable.

If you suspect your account may have been compromised, contact us at privacy@wiserider.com.au.

Under the Australian Privacy Act and Australian Privacy Principles (APPs), you have the right to:

• ·Access the personal information we hold about you.
• ·Correct inaccurate or incomplete information via your profile settings.
• ·Delete your account and associated personal data via the in-app account deletion feature.
• ·Opt out of marketing communications at any time via the unsubscribe link or profile settings.
• ·Decline cookies via the cookie consent banner.
• ·Complain to the OAIC at oaic.gov.au if you believe we have mishandled your data.

To exercise any of these rights, email privacy@wiserider.com.au. We will respond within 30 days.

WiseRider requires users to be at least 13 years old to create an account, in compliance with the Australian Privacy Act 1988. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

WiseRider is operated from Australia and our database is hosted in Australia. Some third-party services (Google, Apple, Stripe, RevenueCat) may process data in other jurisdictions. By using WiseRider, you consent to these transfers in accordance with applicable data protection laws.

We may update this policy from time to time. When we do, we will update the “Last updated” date and, for material changes, notify registered users by email. Continued use of WiseRider after changes constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or complaints: