Privacy Policy

We collect only what we need to operate the kiosk service:

• Account information — your name and email address when you create a driver account.
• Spotify OAuth tokens — the access and refresh tokens that let the kiosk queue and play music on your behalf.
• Stripe Connect data — the payout account details Stripe shares with us so tips reach your bank.
• Device fingerprint — a hashed signature of each registered kiosk tablet, used to secure kiosk access.
• Tip transaction records — the amount, time, and status of each tip processed.
• Usage analytics — anonymous events about how the kiosk is used (for example, songs queued, games played, or tips started), not linked to any passenger.

We use the information above to:

• Operate the kiosk service, including the music queue, games, and media features.
• Process tips securely through Stripe and reconcile your payouts.
• Secure kiosk access by verifying registered devices and detecting tampering.
• Understand how drivers and passengers use the kiosk, in aggregate, so we can improve it.

We do not sell your personal information.

BackRow relies on a small number of service providers, each of which processes only the data needed for its function:

• Spotify — music playback and search.
• Stripe — payment processing and driver payouts.
• Cloudflare — hosting, storage, and infrastructure.
• Umami — privacy-friendly, cookieless analytics that measures kiosk usage without collecting personal data.

Passengers do not create accounts and are not asked to identify themselves. The only passenger-related records we keep are anonymous tip transactions and anonymous usage analytics, neither of which is linked to a passenger's identity.

We keep account data for as long as your account is active. If you close your account, we delete your account data within 30 days, except where we are required to retain certain records (for example, tax or payment records) by law.

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, to object to or restrict certain processing, and to withdraw consent. California residents have the right to know what personal information we collect, to request its deletion, and not to be discriminated against for exercising these rights; we do not sell personal information. To exercise any of these rights, contact us at [email protected] and we will respond within the timeframes required by applicable law.

Questions about this policy or your data? Email us at [email protected].