Privacy Notice

1. Introduction

Welcome to CoNau.

CoNau is a collaborative mobility technology platform that seeks to connect people planning compatible journeys, allowing them to share available seats and contribute to the expenses associated with the trip.

We respect your privacy and recognize the importance of protecting the personal information you share when using our services.

This notice explains what information we collect, how we use it, with whom it may be shared, and what choices you have regarding your data.

2. Data controller

CoNau is the trade name of the platform operated by:

Data controller: [Full name of the individual or legal entity]
Address: [Address of the data controller]
Privacy contact: [Email address designated for privacy requests]
Website: https://conau.foraneo.lat

The data controller's details must be completed before this notice is used as a final public document.

3. Information we collect

Depending on the features you use, CoNau may collect and process the following categories of information:

Account and profile data

• First and last names.
• Email address.
• Telephone number, when provided.
• Date of birth.
• Profile photograph.
• Language preferences and settings.

Trip data

• Origin and destination.
• Coordinates and meeting locations.
• Trip date and time.
• Available and requested seats.
• Proposed financial contributions to share expenses.
• History of postings, bookings, and cancellations.

Vehicle data

• Make, model, year, and color.
• License plates and other details provided by the driver.
• Information associated with the vehicle used for a trip.

Usage and security data

• Technical information needed to maintain sessions and operate the platform.
• Identifiers and technical data related to notifications.
• Operational logs, errors, and security events.
• Incident reports, ratings, and support communications.

Descriptions freely provided by users may contain additional information. We recommend that you do not share sensitive personal data that is unnecessary to resolve a request.

4. Purposes of processing

We primarily use personal data to:

• Create, authenticate, and manage accounts.
• Verify email addresses and manage account access recovery.
• Check the declared age for access to certain features.
• Publish, find, and manage shared trips.
• Process seat requests and communicate booking decisions.
• Facilitate coordination between authorized drivers and passengers.
• Display information about the vehicle associated with a trip.
• Send operational communications about trips, changes, and cancellations.
• Enable ratings and incident reports.
• Prevent abuse, investigate problems, and protect the operation of the platform.
• Handle support requests and comply with applicable legal obligations.

Any additional purposes that may be introduced, including certain forms of advertising or commercial analysis, will be disclosed as appropriate and will be subject to applicable choice or consent mechanisms.

5. Information shared between users

To facilitate trips, certain data may be shown to other CoNau users depending on their participation and access conditions.

For example, a user may view general information about a journey, while more precise location or coordination details may be reserved for authorized participants.

CoNau seeks to limit public exposure of exact coordinates, private notes, contact details, and other information that is unnecessary to view a trip.

Users must use the information they receive exclusively for purposes related to the service and respect the privacy of other participants.

6. Technology providers

To provide our services, we use or may use external infrastructure and technology providers, including:

• DigitalOcean: hosting, storage, and infrastructure.
• Postmark: delivery of operational emails.
• Firebase and Web Push services: management and delivery of notifications.
• Photon, OpenStreetMap, and OSRM-compatible services: location search, map display, and route calculation.

Some features also allow users to open external applications, such as map or messaging services, through actions initiated by the user.

These providers may receive certain technical data, addresses, locations, identifiers, or communications information, depending on the feature used.

Processing by third parties will depend on the corresponding service, its configuration, and the applicable terms.

Transfers of personal data that require consent will be subject to the mechanisms established by applicable law.

7. Location and trip privacy

CoNau uses geographic information to search for journeys, estimate routes, and facilitate meeting points.

The precision of information available to other users may vary depending on the context, participation in a trip, and its status.

We recommend using suitable public meeting points to meet other participants, rather than disclosing home addresses when unnecessary.

Using external map or routing providers may involve transmitting locations to those services.

8. Advertising

CoNau is considering contextual advertising as a means of sustaining the platform.

As of this preliminary version, no active advertising integration has been identified in the platform code reviewed.

When we incorporate advertising providers, we will update the corresponding information to describe the data used, its purposes, and the privacy mechanisms available.

We will not treat contextual advertising as automatic authorization to share precise personal information about journeys or participants.

9. Information retention and protection

CoNau adopts technical authentication, authorization, and access restriction controls to protect personal and operational information.

Information will be retained for as long as necessary and justified for the purposes of the service, handling incidents, complying with obligations, and resolving potential disputes.

Some records may remain for additional periods when there is a legal or security reason justifying their retention.

Specific retention, blocking, and deletion periods and procedures must be defined in the platform's data processing policy.

No computer system can guarantee absolute security, so we remain committed to reviewing and improving protective measures.

10. Rights regarding your data

Under applicable Mexican law, you may request to exercise your rights of:

• Access: learn what personal data we process.
• Rectification: request correction of inaccurate data.
• Cancellation: request cancellation of information when legally appropriate.
• Objection: object to processing in applicable circumstances.

You may also request information about mechanisms to limit the use or disclosure of your data and to withdraw consent where applicable.

To submit a request, contact:

[Email address for privacy requests]

The request must include sufficient information to identify the data subject, understand the request, and respond securely, in accordance with applicable legal procedures and time limits.

11. Notifications

CoNau may send notifications related to bookings, trip changes, cancellations, and other operational events.

Push notifications require the corresponding device or browser permissions where applicable.

You can change notification permissions through the available application, browser, or device settings.

Disabling push notifications does not necessarily prevent essential communications from being sent through other available channels.

12. Changes to this privacy notice

CoNau may amend this notice to reflect changes in its features, providers, processing practices, or applicable provisions.

Updates will be communicated through this page and, where appropriate, through other available channels on the platform.

Last updated: October 26, 2026.

CoNau — Share the road, share the costs.