Privacy Policy
This policy explains what personal data Oya Ride Ltd ("Oya", "we", "us") collects when you use the Oya Ride app, the Oya Driver app and our website, why we collect it, who sees it, and the choices you have. We follow the Nigeria Data Protection Act 2023.
1. What we collect
| Data | Details |
|---|---|
| Account | Phone number, name, email, password (stored only as a one-way hash), language, and profile photo if you add one. If you sign in with Google, we receive your Google name and email address. |
| Location | Your pickup and drop-off, saved places, and your position during a trip. For drivers, position while online and on a trip. Location is used only for the service and for safety. |
| Trips | Addresses, route, fare, time, ratings, messages and trip references. |
| Payments | Card payments are handled by Paystack. We keep a token and the last four digits, not the full card number. We also keep your wallet balance, charges, refunds and, for drivers, a bank account for payouts. |
| Identity (optional for riders, required for drivers) | NIN or another accepted ID number, date of birth, and checks against the issuing record. Drivers also give driving licence, vehicle papers, insurance, photos and a short guided video of the car. |
| Support | Messages you send to our support assistant or team, and your email for the case. |
| Device | Device type, app version and a push notification token. |
In-app voice calls between a rider and a driver pass directly between the two phones so that neither person sees the other's number. Oya does not record these calls.
2. Why we use your data
- To run your account, match you with a driver, calculate fares and take payment (to perform our contract with you).
- To keep riders and drivers safe, prevent fraud and check identities (our legitimate interest, and in some cases a legal duty).
- To meet Lagos State licensing, tax and accounting rules (legal obligation).
- To send trip receipts, security alerts and account notices.
- To send offers only if you agree. You can stop them at any time.
Where we rely on your consent, such as for location permission, you can withdraw it in your phone settings. The app may then not work fully.
3. Who we share it with
- The other person on your trip. A rider sees the driver's first name, photo, car and rating. A driver sees the rider's first name, rating and pickup point. Phone numbers stay hidden.
- Service providers who process data for us under contract: Paystack (payments), Google (maps and sign-in), Firebase Cloud Messaging (push notifications), SMS and email providers, ID verification providers, and cloud hosting and encrypted backup storage.
- Authorities when the law requires it, including the Lagos State Ministry of Transportation, which may inspect our driver and vehicle records, and the police for a lawful request.
We do not sell your personal data.
4. Transfers outside Nigeria
Some of our providers store or process data outside Nigeria. We use providers that protect data to a standard equal to the Nigeria Data Protection Act, and we limit what we send them.
5. How long we keep it
- While your account is open, we keep your account data.
- When you delete your account, we remove your profile, saved places and contacts after 30 days.
- Payment, trip and tax records are kept for as long as the law requires. Records needed to prevent fraud or settle a dispute are kept only as long as needed.
- Encrypted backups are deleted on a rolling schedule of about 30 days.
6. Your rights
You may ask us to give you a copy of your data, correct it, delete it, limit or object to how we use it, or move it to another service. You may withdraw consent at any time. To use these rights, delete your account in the app (Account, then Delete account) or contact us using the details below. We will reply within 30 days. You may also complain to the Nigeria Data Protection Commission.
7. Security
Data travels over encrypted connections. Passwords are hashed. Sign-in tokens on your phone are encrypted, and you can turn on fingerprint or face unlock. After five wrong passwords, sign-in is locked for one minute. No system is perfectly secure, so please keep your password private.
8. Age
Riders must be at least 18 years old. Drivers must be at least 21. We do not knowingly collect data from anyone younger. If you think a child has an account, contact us and we will remove it.
9. Changes
If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect.
Questions about this page: support@myoyaride.com or WhatsApp +234 813 694 4002.