Privacy Policy

Last updated: [DATE] — Draft template, see notice below.

Template notice: this is a starting-point draft, not legal advice. Have a Nigerian lawyer familiar with the NDPR (Nigeria Data Protection Regulation) review this before it goes live or is submitted with an App Store/Play Store listing. Replace every [BRACKETED] placeholder with real details before publishing.

This Privacy Policy explains what information Arrivo ("we," "us," "our") collects from riders, drivers, and vehicle owners who use our apps and website, and how we use, store, and protect it.

1. Who we are

Arrivo is operated by [LEGAL ENTITY NAME], registered in Nigeria under CAC number [CAC NUMBER]. For any privacy question, contact us at hello@ridearrivo.com.

2. Information we collect

From riders

Name, email address, phone number, and password (stored as a secure hash, never in plain text)
Preferred language
Pickup and drop-off locations, flight number, and luggage details for each ride
Payment information — handled entirely by our payment processor, Paystack; we never see or store your full card number
Live location during an active ride, for tracking and safety features

From drivers

Name, email, phone number
Driver's license number and LASDRI number, for verification
Vehicle details (make, model, plate number)
Location while online, to match you with nearby ride requests
Earnings and trip history

From vehicle owners

Name, contact details, and bank details for payouts
Vehicle documents (insurance, roadworthiness certification)

3. How we use this information

To provide and improve the core service — matching riders with drivers and vehicles, processing payments, and enabling live tracking
To verify driver and vehicle owner identity before allowing them to operate on the platform
To communicate with you about your account, a ride in progress, or important service updates
To meet legal and regulatory obligations, including those under Lagos State transport regulations

4. Who we share it with

Paystack — to process payments. See Paystack's own privacy policy for how they handle payment data.
AviationStack — we send your flight number to look up flight status; no other personal data is shared with them.
Your matched driver or rider — limited details necessary to complete a ride (name, live location during the trip, contact number where relevant).
We do not sell your personal data to third parties.

5. Data retention

We keep your account and ride history for as long as your account is active, and for a reasonable period afterward to meet legal, tax, and dispute-resolution obligations. You can request deletion of your account at any time (see Section 7).

6. Security

Passwords are hashed, not stored in plain text. Data in transit is encrypted (HTTPS). Access to rider and driver data is restricted to what our systems and support team need to operate the service.

7. Your rights

Under the NDPR, you have the right to access, correct, or request deletion of your personal data. To exercise any of these rights, email hello@ridearrivo.com.

8. Children

Arrivo is not intended for anyone under 18. We do not knowingly collect data from children.

9. Changes to this policy

We'll update the date at the top of this page whenever this policy changes. Continued use of Arrivo after a change means you accept the updated policy.

10. Contact

Questions about this policy? Email hello@ridearrivo.com.