Privacy and deletion
Last updated: 17 October 2026
Reluctant Drivers is a small family feedback app operated by Catherine Chan under the Experimental AI Lab name. It is for playful ratings of family taxi duty. It does not book rides or track journeys.
Parent accounts and Google sign-in
Driver accounts are for adults. Google sign-in provides an account identifier, email address and basic profile details, which can include your name and profile picture. Supabase handles authentication and stores account and session information. We use this information to sign you in, associate your driver profile with your account and support or secure the app. We do not request access to your Gmail, contacts, calendar or Google password.
Driver profiles and passenger feedback
We store the driver nickname, ratings, optional passenger nicknames and comments, and creation dates. A person with a driver QR code or link can see that driver nickname and submit feedback. Reviews are shown in the driver's private dashboard. The app operator can access stored information for administration, support, safety and deletion requests. Do not put personal or sensitive details in nicknames or comments.
Passengers do not need an account. A nickname is optional. Feedback is not guaranteed to be unidentifiable: a comment, nickname or context can reveal who submitted it. We do not collect GPS coordinates or ask for school, address or journey information.
Children and families
Children should use the feedback form with a parent or guardian's permission and supervision. Keep feedback kind and avoid full names, schools, addresses, phone numbers, pickup locations and other identifying details. A parent or guardian can contact us to request removal of a child's feedback.
Cookies, security and spam prevention
Sign-in uses cookies and session data. To limit spam, the review server processes the submitting IP address and creates a secret-based hash that changes daily. The app's rate-limit table stores that hash, the driver identifier and a timestamp, rather than the raw IP address. Hosting and authentication providers may separately process IP addresses and technical logs for operating and securing their services. We do not use the Google account data for advertising or sell it.
Service providers and storage
Google provides sign-in, Supabase provides authentication and database storage, and Vercel hosts the website and server functions. Our Supabase project is configured in Sydney. Providers may process some account, support and technical information in other countries. Sydney database hosting does not mean all processing stays in Australia. Their own privacy notices also apply: Google, Supabase and Vercel.
Retention and deletion
Account and profile information remain until deleted or the service closes. Reviews remain until the driver or operator removes them, or their associated driver profile is deleted. Spam-prevention records currently remain until their driver profile is deleted or the operator cleans them up; the daily hash change does not itself delete old records. Provider logs and backups can remain under each provider's retention arrangements.
In Driver HQ you can delete individual reviews, delete your driver profile and its reviews while keeping your login account, or permanently delete your account. Permanent account deletion removes the Supabase login account and associated driver, reviews and rate-limit records from the active database. It does not delete your Google account. Signing in again can create a new account, but will not restore your old profile, QR link or reviews. You can also remove the app connection in your Google Account settings; doing so does not itself delete previously stored app data.
Passengers and parents or guardians can request removal by emailing us with the driver rating link, approximate submission date and enough detail to identify the feedback. Please do not send passwords or unnecessary information about a child. We may need to verify an account-related request.
Contact and changes
For access, corrections, deletion, privacy concerns or support, email catherine.chan.ai.lab@gmail.com.
We will update this notice when practices change and seek further consent where required before using Google user data for a new purpose.