Skip to content

Privacy Policy

Last updated:

Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.

1. Information We Collect

We collect several types of information to provide and improve our services:

Personal Information:

  • Account Data: Name, email address, phone number, profile photo
  • Verification Data: For drivers - driver's license, vehicle registration, insurance documents
  • Payment Information: Bank account details, card information (processed securely by payment providers)

Usage Data:

  • Location Data: Real-time GPS location during active rides, pickup and drop-off addresses
  • Transaction Data: Ride history, payment records, earnings (for drivers)
  • Device Information: Device type, operating system, browser type, IP address
  • Usage Patterns: App interactions, features used, session duration

Communications:

  • Support messages, feedback submissions, survey responses
  • In-app messages between riders and drivers related to rides

2. How We Use Your Data

Your information enables us to deliver, improve, and protect our services:

Service Delivery:

  • Matching riders with available drivers
  • Processing ride requests and payments
  • Providing real-time ride tracking and notifications
  • Calculating fares and driver earnings

Platform Improvement:

  • Analyzing usage patterns to enhance user experience
  • Testing new features and optimizing performance
  • Conducting research and development

Safety & Security:

  • Verifying driver credentials and identity
  • Preventing fraud and unauthorized access
  • Investigating safety incidents and disputes
  • Monitoring for suspicious activity

Communication:

  • Sending ride confirmations, receipts, and updates
  • Providing customer support
  • Sharing important service announcements
  • Marketing communications (with your consent)

3. Data Security

We employ industry-standard security measures to protect your information:

Technical Safeguards:

  • Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL protocols
  • Secure Storage: Personal data is stored on secure servers with encryption at rest
  • Access Controls: Strict authentication and authorization mechanisms limit data access to authorized personnel only
  • Regular Monitoring: Continuous security monitoring and intrusion detection systems

Organizational Safeguards:

  • Employee training on data protection and privacy
  • Background checks for staff with data access
  • Regular security audits and vulnerability assessments
  • Incident response plan for data breaches

While we implement robust security measures, no system is 100% secure. We encourage users to protect their account credentials and report suspicious activity immediately.

4. Sharing Your Information

We never sell your personal data. Limited information may be shared only when necessary:

With Drivers/Riders:

  • First name, profile photo, and pickup/drop-off locations are shared to facilitate rides
  • Contact information (masked phone numbers) for ride coordination

With Service Providers:

  • Payment Processors: To process transactions securely (e.g., Paystack, Flutterwave)
  • Cloud Hosting: To store and process data (e.g., Supabase, AWS)
  • Analytics Providers: To understand platform usage (anonymized data)
  • Customer Support Tools: To provide assistance

Legal Requirements:

  • To comply with legal obligations, court orders, or government requests
  • To enforce our Terms of Service and protect rights, safety, or property
  • In connection with investigations of fraud or security incidents

All third parties are contractually obligated to protect your data and use it only for specified purposes.

5. Your Privacy Rights

You have the following rights regarding your personal data:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Update or correct inaccurate information in your account settings
  • Deletion: Request deletion of your account and personal data (subject to legal retention requirements)
  • Portability: Request your data in a machine-readable format
  • Restriction: Request limitation of processing under certain circumstances
  • Objection: Object to processing of your data for direct marketing
  • Withdraw Consent: Withdraw consent for data processing where consent is the legal basis

To exercise any of these rights, contact us at privacy@shuttlex.com. We will respond to your request within 30 days.

You also have the right to lodge a complaint with your local data protection authority if you believe your privacy rights have been violated.

6. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

  • Active Accounts: Data is retained while your account is active
  • Closed Accounts: Some data may be retained for legal, tax, and regulatory compliance (typically 7 years)
  • Transaction Records: Payment and ride history retained for accounting and dispute resolution
  • Support Communications: Retained for quality assurance and training purposes

After the retention period expires, personal data is securely deleted or anonymized. Anonymized data may be retained indefinitely for analytics and research.

7. Cookies & Tracking

We use cookies and similar technologies to enhance your experience:

Types of Cookies:

  • Essential Cookies: Required for platform functionality (authentication, security)
  • Performance Cookies: Help us understand how users interact with the platform
  • Functional Cookies: Remember your preferences and settings
  • Marketing Cookies: Used for targeted advertising (with your consent)

You can manage cookie preferences in your browser settings. Note that disabling certain cookies may affect platform functionality.

8. Children's Privacy

shuttleX is intended for users aged 18 and above. We do not knowingly collect personal information from children under 18.

If we become aware that a user is under 18, we will promptly delete their account and associated data. Parents or guardians who believe their child has provided information to us should contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than Nigeria, including countries that may not have the same data protection laws.

When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

  • Standard contractual clauses approved by regulatory authorities
  • Ensuring service providers comply with recognized data protection frameworks
  • Implementing technical and organizational security measures

10. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements.

Significant changes will be communicated via email or in-app notification. The "Last Updated" date at the top indicates when the policy was last revised.

We encourage you to review this policy regularly to stay informed about how we protect your information.