Legal
Privacy Policy

Last updated: 1 January 2025

Plain-language summary: Drivva collects personal information to provide you with our driver-booking service. We collect what we need, use it only for legitimate purposes, and never sell your data. This policy explains exactly what we collect, why, and what your rights are.

1. Overview

Drivva Services Ltd (“Drivva”, “we”, “us”, “our”) is a technology company registered in Nigeria. We operate the Drivva platform — including the mobile application, website, and related services — that connects riders with professional drivers.

This Privacy Policy explains how we collect, use, store, and share personal information when you use our services as a rider, driver, or visitor to our website (collectively, “Services”).

By using Drivva's Services, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Services.

2. Data We Collect

Information You Provide

  • Account information: Full name, email address, phone number, and password when you create a Drivva account.
  • Profile data: Profile photo, vehicle information (for drivers), and preferences.
  • Verification documents: For drivers — government-issued ID, driver's license, and any other documents required for the vetting process.
  • Payment information: Bank card details or bank account information for processing payments. Card data is tokenised and not stored directly by Drivva.
  • Communications: Messages you send to our support team, feedback, and reviews.

Information Collected Automatically

  • Location data: GPS location is collected when you use the app to match you with nearby drivers or to track active trips.
  • Device information: Device type, operating system, app version, and unique device identifiers.
  • Usage data: How you interact with the app, features you use, and error logs.
  • Trip data: Pick-up and drop-off locations, trip duration, distance, and booking type.

3. How We Use Your Data

We use your data to provide and improve our Services, match riders with drivers, process payments, verify driver credentials, monitor trip safety, resolve disputes, send notifications, prevent fraud, and (with your consent) send marketing communications.

We will never use your data for purposes incompatible with those above without informing you and obtaining any necessary consent.

4. Sharing Your Data

Drivva does not sell your personal information. We share your data only in the following circumstances:

Between Riders and Drivers

When a booking is confirmed, a rider's first name and pickup location are shared with their matched driver. A driver's name, photo, vehicle details, and rating are shared with the rider.

Service Providers

We use trusted third-party providers for payment processing, background checks, cloud hosting, analytics, and customer support. These providers process data only on our behalf and are bound by contractual data protection obligations.

Legal Requirements

We may disclose your information if required by Nigerian law, court order, or to cooperate with law enforcement.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes — ever.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide Services. Specific retention periods:

  • Account data: Retained while your account is active, plus 3 years after account closure for legal purposes.
  • Trip history: Retained for 5 years for dispute resolution and safety purposes.
  • Payment records: Retained for 7 years in line with Nigerian financial regulations.
  • Driver verification documents: Retained for the duration of driver engagement plus 2 years.

6. Cookies & Tracking

Our website uses cookies and similar technologies. Types of cookies we use: Essential (required for the site to function), Analytics (how visitors use the site), Preference (remember your settings), and Marketing (with your consent, for relevant advertising).

You can manage cookie preferences through your browser settings or our cookie consent tool.

7. Your Rights

Under the Nigerian Data Protection Regulation (NDPR), you have the right to access, correct, delete, port, object to, restrict, and withdraw consent for your data. To exercise your rights, email privacy@getdrivva.com. We will respond within 30 days.

8. Security

We implement TLS/HTTPS encryption, encrypted storage at rest, strict access controls, regular security assessments, and tokenisation of payment card data. If you suspect your account has been compromised, contact security@getdrivva.com immediately.

9. Children's Privacy

Drivva's Services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have collected data from a minor, please contact us at privacy@getdrivva.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or in-app notification at least 14 days before the changes take effect. Continued use of the Services after that period constitutes acceptance of the updated policy.