Privacy Policy

Rides is a Rwandan ride-hailing platform. We collect the data we need to match riders with drivers, complete payments, keep the service safe, and meet our legal obligations. We do not sell your data. We do not use it for advertising on other platforms.

If something below is unclear, write to us at privacy@rides.rw and we will answer in plain language.

Rides (operated by Amoria Global Ltd., registered in Kigali, Rwanda) is the controller of the personal data described in this policy. Our registered office is in Kimironko, Kigali. If you contact us about your data, our Data Protection Officer will respond.

We collect the categories of information below. We never ask for more than we need.

• Account information — name, phone number, email, password (hashed), and your role (rider or driver).
• Driver verification— driver's licence, vehicle plate, insurance certificate, and Rwanda Police authorization. Stored encrypted; reviewed by our trust and safety team.
• Location data — your device location when you have the app open and, for drivers, when you are online. This is required to match rides and to provide turn-by-turn navigation.
• Ride records — pickup, drop-off, route, fare, driver/rider ratings, and any negotiation messages.
• Payment information — MTN MoMo or Airtel Money phone number (or merchant code). We do not store full card details — payment partners handle that under their own privacy terms.
• Device and usage — device model, OS version, language, app version, crash logs, and basic interaction analytics.
• Support and safety — messages you send us, incident reports, SOS triggers, and any evidence shared with us during a safety review.

• To create your account and verify your identity.
• To match riders with nearby drivers and provide navigation.
• To process payments through MTN MoMo or Airtel Money and generate receipts.
• To keep the platform safe — investigating fraud, reviewing incidents, and reaching out during an SOS.
• To send service messages by SMS (delivered via Africa's Talking) and in-app notifications.
• To improve the app — fix bugs, measure performance, design new features.
• To comply with Rwandan law and respond to lawful requests.

We share data only with the parties below, and only the minimum they need to do their job.

• Drivers and riders— a driver sees the rider's pickup location and first name during a ride; a rider sees the driver's name, vehicle, and live location.
• Payment partners — MTN Rwanda and Airtel Rwanda receive what they need to settle a transaction.
• Infrastructure providers — hosting, maps, SMS delivery, and crash reporting. We bind them by contract to use the data only for our purposes.
• Authorities— only where required by Rwandan law or to protect someone's safety.

We do not sell your personal data. Ever.

We keep data only as long as we need it. Ride history is kept for 5 years for tax and dispute reasons. Account data is kept while your account is active and deleted within 90 days of account closure, except where law requires longer retention.

You can ask us to:

• Show you a copy of the data we hold about you.
• Correct information that is wrong or incomplete.
• Delete your account (subject to retention obligations such as tax records).
• Export your ride history in a portable format (JSON or CSV).
• Stop processing your data for a specific purpose.

Email privacy@rides.rw and we will respond within 30 days.

We encrypt data in transit (TLS 1.2+) and at rest. Driver documents are stored in encrypted object storage with time-limited signed URLs. Admin access requires two-factor authentication. We monitor for unauthorized access and notify affected users if a breach affects them.

On the web (rides.rw and the admin dashboard), we use a small number of strictly necessary cookies to keep you signed in and remember your preferences. We do not use third-party advertising cookies. We do not run cross-site tracking.

Rides is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has signed up, write to privacy@rides.rw and we will close the account.

Most data stays on servers in the African region. Some service providers (for crash reporting and email delivery) operate from other regions; in those cases we use providers with adequate data protection standards.

When we update this policy, we change the “last updated” date at the top and notify you in the app for any material change. Continued use of Rides after a change means you accept it.

Questions, complaints, or requests: privacy@rides.rw.

Read our Terms of Service for the rules of using Rides.