1. Who we are
Drivio is operated by Drivio Limited (“Drivio”, “we”, “us”), a company incorporated in the Federal Republic of Nigeria. For the purposes of the Nigeria Data Protection Act, 2023 (the “NDPA”) and the Nigeria Data Protection Regulation, Drivio is the data controller of the personal data described in this policy.
This policy applies to the Drivio rider app, the Drivio Driver app, our website and related services (together, the “Platform”). It should be read together with our Terms of Service.
2. Information we collect
Information you give us
- Account details — full name, phone number, email address, password, and (for Drivers) referral codes.
- Identity & verification data (Drivers)— Bank Verification Number (BVN), National Identification Number (NIN), a selfie with liveness check, driver’s licence, and vehicle documents such as registration, insurance and road-worthiness certificates.
- Trip details — pickup and drop-off locations, the offers and fares, and trip status.
- Communications & content — in-app messages, ratings, reviews, support requests, and safety/SOS reports.
- Payment information — driver subscription payments are handled by our payment processors; we do not store your full card number. Rider fares are paid in cash directly to drivers, so we hold no rider payment details.
Information we collect automatically
- Location data — see section 6.
- Device & technical data — device model, operating system, app version, language, push-notification tokens, and approximate IP-based location.
- Usage data — how you interact with the Platform, including trips requested, offers made, and feature usage, for safety, fraud-prevention and product improvement.
Information from third parties
We may receive verification results from identity-verification providers, payment confirmations from payment processors, and information from the other party to a Trip (for example, a Rider’s drop-off when shared with a Driver).
3. How we collect it
We collect personal data (a) directly from you when you register, set up your profile, complete verification or use the Platform; (b) automatically through your device and use of the apps; and (c) from third parties such as verification and payment partners as described above.
4. Our lawful bases
Under the NDPA, we process personal data where:
- Performance of a contract — to provide the Platform, match Riders and Drivers, and process payments;
- Consent — for example, to access precise location or send you marketing; you may withdraw consent at any time;
- Legal obligation — for identity verification, anti-fraud, anti-money-laundering, tax and regulatory requirements;
- Legitimate interests — to keep the marketplace safe and trustworthy, prevent abuse, and improve our services, where not overridden by your rights;
- Vital interests / public interest — to protect the safety of users in an emergency.
5. How we use your information
- create and manage your account and verify your identity;
- match Riders with Drivers, surface offers, and enable Trips and communication between them;
- process driver subscription payments;
- provide safety features, investigate incidents and respond to SOS reports;
- calculate ratings, detect and prevent fraud, abuse and unsafe behaviour;
- provide customer support and send service messages (for example, trip and verification updates);
- improve and develop the Platform; and
- comply with legal obligations and enforce our Terms of Service.
6. Location information
Location is central to a ride-hailing service, so we want to be clear about it:
- Drivers — when you are online and available, we collect your precise location, including in the background, so we can show you nearby requests and share your live position with a Rider during a Trip. When you go offline, we stop collecting your live location.
- Riders — we collect your location to set your pickup, match you with nearby Drivers, and follow the Trip to your drop-off. During an active Trip your location may be visible to your assigned Driver.
- Trip sharing — if you share a trip link, the people you share it with can see the live Trip until it ends.
You can control location permissions in your device settings, but turning them off will prevent core features from working.
8. International transfers
Some of our service providers may store or process data outside Nigeria. Where we transfer personal data abroad, we do so in accordance with the NDPA — transferring only to jurisdictions or recipients that provide an adequate level of protection, or under appropriate safeguards (such as contractual protections) or another lawful basis recognised by the Nigeria Data Protection Commission.
9. How long we keep it
We keep personal data only as long as necessary for the purposes described here, including to provide the Platform, comply with legal, tax and regulatory obligations, resolve disputes and enforce our agreements. Verification records and transaction data are generally retained for the period required by applicable law. When data is no longer needed, we delete it or irreversibly anonymise it.
10. How we protect it
We use technical and organisational measures appropriate to the risk — including encryption in transit, access controls and row-level security on our database, and restricted staff access — to protect personal data against loss, misuse and unauthorised access. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your data and to notify you and the regulator of a breach where the law requires.
11. Your data-protection rights
Subject to the NDPA, you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data where there is no overriding legal basis to keep it;
- Restrict or object to certain processing;
- Port your data to another provider where applicable;
- Withdraw consent at any time, without affecting processing already carried out; and
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
To exercise any of these, contact us at contact@drivedrivio.com. We will respond within the timeframe required by law. We may need to verify your identity first.
12. Children
The Platform is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
14. Changes to this policy
We may update this policy from time to time. If we make material changes, we will give reasonable notice (for example, in the app or by updating the date at the top of this page). Please review it periodically.
15. Contact us & complaints
For any privacy question or request, or to reach our Data Protection Officer:
Drivio Limited
Data Protection Officer: contact@drivedrivio.com
You also have the right to complain to the Nigeria Data Protection Commission at ndpc.gov.ng if you believe your data has been mishandled.