LetRyde Privacy Policy
1 Who We Are
LetRyde is a digital mobility platform — a trading name under which Letsail Tech Ltd (RC No. 9518541, TIN: 2623093075833, registered in Ibadan, Oyo State, Nigeria under CAMA 2020) operates. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the LetRyde mobile application, website, or related services.
References to "LetRyde", "we", "us", or "our" throughout this policy mean Letsail Tech Ltd, trading as LetRyde. We process personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation 2019 (NDPR).
2 Data We Collect
We collect only the data we actually need to operate the platform. Here is exactly what we collect and why:
| Category | What specifically | Who it applies to |
|---|---|---|
| Identity | Full name; National Identification Number (NIN) — verified via QoreID liveness check but the raw NIN is not stored on our servers beyond verification; profile photo | All users |
| Driver identity | Driver's licence number, licence class, expiry date, licence photo; vehicle registration number, make, model, colour, vehicle photos; cargo/goods photos (for delivery drivers) | Drivers & delivery partners only |
| Contact | Phone number; email address (if provided or used for Google Sign-In) | All users |
| Location | Trip pickup and drop-off points; route taken during a trip; driver's live GPS location while they are online and available or on an active trip | All users (location during trips); drivers (live location while online) |
| Payment | Transaction records (amounts, dates, trip references) processed via Paystack. Card details never touch our servers — all payment card data is handled entirely by Paystack under PCI-DSS compliance. | All users making or receiving payments |
| Messages | In-app chat messages sent within 1:1 trip chat threads or shared-ride request threads between riders and drivers | All users |
| Device | Push notification token (to send ride alerts, trip updates, and safety notifications to your device) | All users |
| Account activity | Trip history (dates, routes, fares), ratings given and received, account creation date, last active date | All users |
Data we do NOT collect
- Payment card numbers, CVVs, or bank account details — these go directly to Paystack and never pass through our systems.
- Precise location when you are not using the app (we do not track you in the background).
- Contacts, photos from your phone gallery, or any data not listed above.
3 How We Use Your Data
| Purpose | Data used | Legal basis |
|---|---|---|
| Creating and managing your account | Name, phone, email, profile photo | Contract performance |
| Verifying driver identity and eligibility | NIN, licence data, vehicle data, liveness verification via QoreID | Legal obligation / legitimate interest (platform safety) |
| Matching riders with drivers and showing ETAs | Location, trip details | Contract performance |
| Processing payments and disbursing driver earnings | Payment records via Paystack | Contract performance |
| Enabling in-app trip chat | Chat messages, user IDs | Contract performance |
| Sending push notifications (ride status, safety alerts, promos) | Push token, phone number | Contract performance / consent |
| Safety monitoring and fraud prevention | Trip routes, location, payment patterns, account activity | Legitimate interest |
| Resolving disputes and customer support | Trip records, chat messages, payment records | Legitimate interest / legal obligation |
| Compliance with Nigerian law (FIRS, CBN, law enforcement) | Identity data, payment records, trip records | Legal obligation |
4 Third-Party Processors We Use
We share your data with the following third-party processors only to the extent necessary to operate the platform. Each processor is bound by data processing agreements and their own privacy commitments.
5 Location Data
Riders: We collect your precise location only when you open the app to request a ride or delivery. Your pickup point and destination are used to match you with a driver and calculate the route. We do not collect your location in the background when the app is closed or when you are not in an active session.
Drivers: When you go online in the driver app, your live GPS location is continuously collected and shared with nearby riders so they can see available drivers. This stops as soon as you go offline. Your location during active trips is recorded as part of the trip record.
Trip routes (origin, destination, and the path taken) are retained as part of your trip history. See Section 7 for retention and deletion details.
6 Your Rights Under the NDPA 2023
Under the Nigeria Data Protection Act 2023, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to correct inaccurate or incomplete data.
- Deletion: Request deletion of your personal data (see Section 7 for what is deleted and what is retained).
- Portability: Request your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Restriction: Ask us to pause processing while a dispute is resolved.
- Withdrawal of consent: Where processing is based on consent (e.g. marketing push notifications), you may withdraw at any time via Notification Settings in the app.
To exercise any of these rights, email us at privacy@letsailtech.com. We will respond within 30 days. We may need to verify your identity before processing your request.
If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.
7 Account Deletion & Data Retention
How to delete your account
You can delete your account at any time using either of these methods:
📱 In the app
- Open the LetRyde app
- Go to Profile → Delete my account
- Confirm the deletion request with your password (or type DELETE if you signed up with Google)
✉️ By email
- Send a deletion request to privacy@letsailtech.com from the email address registered to your account
- Include your registered phone number in the email for verification
- We will process and confirm the deletion within 14 days
A full guide is also available at: letryde.com/delete-account
What gets permanently deleted
When your account is deleted, the following personal data is permanently and irreversibly erased from our systems:
- Your name, phone number, and email address
- Your profile photo
- Your NIN verification record and identity verification data
- Driver's licence data and vehicle documents (for drivers)
- Your push notification token
- In-app chat messages associated with your account
What is retained in anonymised form
Completed trip records and payment transaction records are retained in anonymised form after account deletion. This means all identifying information (name, phone, user ID) is removed or replaced with a non-reversible internal reference. The anonymised records are retained for:
- Financial records: 7 years — as required by the Federal Inland Revenue Service (FIRS) and Nigerian financial regulations
- Dispute resolution and legal compliance: For as long as necessary to resolve any pending legal claims
Anonymised records cannot be linked back to you and are not considered personal data under the NDPA 2023.
Active account retention
While your account is active, your personal data is retained for as long as needed to provide the service. If your account is inactive for 24 consecutive months, we will notify you and may delete your account unless you confirm you wish to keep it.
8 Data Security
We implement the following technical and organisational measures to protect your personal data:
- All data transmitted between the app and our servers is encrypted using TLS 1.2 or higher
- Sensitive data at rest (identity records, documents) is encrypted on our servers
- Payment card data is never stored on our servers — handled entirely by Paystack's PCI-DSS compliant infrastructure
- Driver live location data is only accessible to matched riders during an active trip
- Access to user data within our team is role-restricted on a need-to-know basis
- Files and documents uploaded to Cloudflare R2 are access-controlled and not publicly accessible by URL
No system is completely secure. If you suspect a security incident involving your account, contact us immediately at privacy@letsailtech.com or call our safety line at +2348052861190.
9 Children's Data
LetRyde is not intended for persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please notify us at privacy@letsailtech.com and we will delete the account promptly.
10 Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will:
- Update the Effective Date at the top of this page
- Notify you via push notification or email at least 14 days before material changes take effect
Continued use of the LetRyde platform after the effective date constitutes your acceptance of the updated policy.