Introduction
TaxiNaija Technologies LTD ("TaxiNaija," "we," "us," or "our") is a ride-sharing platform registered in Nigeria (RC 9320671) and the United States (TaxiNaija Technologies LLC, Wyoming). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, our website (taxinaija.com), and related services.
We process personal data in accordance with the Nigeria Data Protection Act, 2023 (NDPA), regulations and guidance issued by the Nigeria Data Protection Commission (NDPC), and other applicable laws. TaxiNaija Technologies LTD is the data controller for personal data processed through our services.
By using TaxiNaija, you consent to the data practices described in this policy. If you do not agree, please do not use our services.
Information We Collect
Personal Information:
- Full name, email address, phone number, and profile photograph
- Government-issued identification (for identity and driver verification, processed through our licensed verification and payment partners — we never request these details by email)
- Bank account details for payouts and refunds
- Vehicle information (for drivers): make, model, year, plate number, and vehicle photographs
Payment Information:
- Card and payment details are collected and processed directly by our licensed payment processor, Flutterwave, in PCI-DSS-compliant systems. We do not store your full card number on our servers.
- Wallet balance and transaction history
Location Data:
- Real-time GPS location during active trips for navigation, fare calculation, and safety features including our Smart Trip Check-In system
- Pickup and drop-off locations
- Movement patterns for stagnation detection and safety alerts
Usage Data:
- Trip history, ratings, and reviews
- App usage patterns, device information, and crash logs
- Communication between riders and drivers within the app
- Safety check-in responses and emergency alert data
Also collected (added October 2026):
- Driver identity checks: your National Identification Number (NIN), driver's licence number and live selfies, checked with NIMC through our identity partner Dojah (see section 04B). We do not keep your full NIN after the check, only the result, the partner's reference and the last 4 digits
- Driver location: while you are online and during trips, including when the Driver app is in the background, so you can receive ride requests and be navigated. We do not collect it when you are offline
- Rider location: while the app is open and during trips. If you press SOS, or share your trip, your live location is shared as described in section 04B
- BVN (riders, optional): only if you ask for a personal bank-transfer account to top up your wallet. It goes straight to Flutterwave to open the account; we keep only the last 4 digits
- Messages to Oráku, our in-app AI assistant, and any report you make about an Oráku reply
- In-app call details: who called whom, when and for how long. We do not record calls
- Ride audio recordings, only if you switch ride recording on (see section 04B)
- Device and security details: device identifiers, push-notification token, and an approximate location worked out from your IP address when you sign in
- People you tell us about: emergency contacts, driver guarantors, and people a rider books a trip for (name and phone number)
How We Use Your Information (Lawful Bases)
We process your personal data where it is necessary to perform our contract with you, to comply with legal obligations, for our legitimate interests, or with your consent (for example, marketing messages). We use your information:
- To facilitate ride-sharing services, match riders with drivers, and process payments
- To calculate fares, including base fare and overtime charges for trips exceeding estimated duration
- To operate safety features including Smart Trip Check-In, SOS alerts, and live trip sharing with trusted contacts
- To provide real-time navigation with AI-powered voice guidance
- To verify user identity, vehicle details, and driving qualifications, and to comply with Know-Your-Customer (KYC) and anti-fraud obligations
- To maintain driver performance tracking and rating systems
- To process payments and wallet transactions via our payment partners
- To communicate important service updates and, with your consent, promotional offers (you may opt out at any time)
- To improve our platform and develop new features
- To comply with legal obligations and resolve disputes
Data Sharing and Disclosure
We share your information only in the following circumstances:
- Between riders and drivers: Limited information necessary to complete a trip
- Payment processing: Flutterwave processes payments and wallet funding on our behalf and may perform identity verification required by law
- Mapping services: Location coordinates are processed by our mapping provider (Mapbox) to display maps and routes
- Service providers: Cloud hosting (including Google Firebase), SMS and notification delivery, and analytics providers acting under our instructions
- Emergency services: When SOS alerts are triggered or safety incidents are reported
- Trusted contacts: When a rider or driver uses the live trip sharing feature
- Legal requirements: When required by law, regulation, or valid legal process
We do not sell your personal information to third parties for marketing purposes.
The full list of service providers that process personal data for us is in section 04A.
Who We Share Data With
These service providers process personal data for us, on our instructions, only for the purposes below:
| Service | What it does for us | Personal data it receives | Where |
|---|---|---|---|
| Google Firebase / Google Cloud Privacy | Hosting, sign-in, database, file storage, server functions, push notifications, crash reports (Crashlytics), app analytics, app integrity checks (App Check) | All data described in this policy, as our host | EU (database, Belgium) and USA |
| Google Maps Platform (Places) Privacy | Address search, called from our servers | What you type in the search box, and the approximate area you are in | USA / global |
| Google Sign-In and Sign in with Apple Apple privacy | Optional sign-in with your Google or Apple account. Apple also delivers notifications to iPhones | Name, email address, sign-in token, push token | USA / global |
| Mapbox Privacy | Maps, routes, turn-by-turn navigation and address lookup | GPS location, pickup and destination, search text, IP address | USA |
| Flutterwave Privacy | Wallet top-ups (card, bank transfer, personal transfer account), card payments, driver payouts, bank account name checks | Name, email, phone, amounts and references; card details (entered on Flutterwave's own page); BVN if you open a transfer account; drivers' bank account number and bank | Nigeria / USA |
| Dojah Privacy | Driver identity checks: NIN check with NIMC, liveness and face match, driver's licence check | NIN, selfie, licence number and photo ID; Dojah returns the name and photo held by NIMC | Nigeria |
| Termii Privacy | SMS messages, including SOS alerts to emergency contacts and notices to guarantors and people booked for | Phone numbers and the message text (for example a name, plate number, trip PIN or SOS location link) | Nigeria |
| OpenAI Privacy | Oráku, our in-app AI support assistant; automatic checks of driver document and vehicle photos (for example a photo of a screen, or an unreadable plate); vehicle pictures; the spoken navigation voice in the Driver app | Your messages to Oráku and the facts about your own account and trips that Oráku needs to answer (never your NIN, PIN or full bank details); driver document and vehicle photos; vehicle make, model and colour; for the navigation voice, navigation phrases only (text, no personal data) | USA |
| Agora Privacy | In-app voice calls between rider and driver during a trip, and from TaxiNaija staff to drivers | Live call audio (not recorded), IP address, a call reference | USA / global |
| Hostinger Privacy | Sending our emails (receipts, security codes, account notices) | Email address, name, email content (account numbers masked) | EU / global |
| ipapi Privacy | Approximate location from your IP address at sign-in, to spot suspicious sign-ins | IP address | USA |
| Slack Privacy | Internal alerts to our operations team | Account and trip reference numbers only; no names or contact details | USA |
| OpenStreetMap Overpass Privacy | Traffic-light and road data along your route | The map area around your route, and IP address | Germany / EU |
| Netlify, Google Fonts, YouTube Netlify privacy | Hosting this website, its fonts (also used in the apps), the videos on our homepage, and our launch waitlist form (Netlify Forms) | Your IP address and browser details when you visit; YouTube may set cookies when you play a video; if you join the waitlist: your name, phone, email, city/area and (for drivers) vehicle type and ownership — used only to contact you about launch and driver onboarding, deleted on request | USA / global |
Our staff use 8x8 Jitsi as a Service for internal video meetings; no rider or driver data is shared through it. Vehicle pictures may also come from Wikimedia Commons and similar picture services; we send them only the vehicle year, make and model.
Oráku, Calls, Recordings, Identity Checks and Location
Oráku AI assistant: Oráku answers support questions in the apps. Your messages, and the facts about your own account and trips that Oráku needs, are processed by OpenAI to write the reply. Oráku can only read your own information and cannot change it. Oráku can make mistakes. Every Oráku reply has a Report option: if a reply is offensive, harmful or wrong, report it and our team will review it. A report includes the reply, your reason and your account reference. Oráku and support chats are deleted after 180 days.
In-app calls: riders and drivers can call each other in the app during an active trip, and TaxiNaija staff can call drivers. Calls run through Agora. Neither side sees the other's phone number, and we do not record calls.
Ride audio recordings (optional): ride recording is off until you switch it on and accept a consent screen. A recording stays on your phone and is deleted automatically after 72 hours. It is uploaded to us only if SOS is pressed or the trip is reported. Only our Safety team and administrators can listen, and every listen is logged. Uploaded recordings are deleted after 30 days, unless they are needed for an open safety case.
Driver identity checks: to drive with TaxiNaija you prove you are the person on your NIN and licence. You enter your NIN and take a live selfie. Dojah checks the NIN with NIMC and compares your selfie with the NIMC photo. Selfies are biometric data; we use them only to confirm your identity and to stop account sharing. Framing your selfie uses face detection on your phone only. A failed match is always reviewed by a person.
Location: drivers share their location while online and during trips, including in the background. Riders share their location while the app is open and during trips. The rider and driver on a trip see each other's live location. If you press SOS, our Safety team sees your live location, and your emergency contacts can receive a live-location link by SMS. Trip-sharing links stop working after a set time (for SOS links, 2 hours by default).
Deleting your account: in the app (Rider: Settings → Delete Account; Driver: Security & Privacy → Request Account Deletion), or on the web at taxinaija-36ca3.web.app/delete-account.html. Driver deletion requests are reviewed by our team and then held for 7 days, in which you can change your mind. We cannot finish a deletion while a trip is active or money is owed either way. You can also download a copy of your data in the app.
International Data Transfers
Some of our service providers (including our cloud infrastructure and our affiliate, TaxiNaija Technologies LLC in the United States) store or process data outside Nigeria. Where personal data is transferred outside Nigeria, we do so in accordance with the NDPA — relying on transfers to jurisdictions with adequate levels of protection or on appropriate contractual and technical safeguards.
Data Security
- Encrypted data transmission (SSL/TLS)
- SIEM security monitoring for threat detection
- Firebase security rules and access controls
- Payment processing through PCI-DSS-compliant providers
- Regular security audits and vulnerability assessments
- Secure cloud infrastructure
No system is completely secure. Keep your account credentials confidential and contact us immediately if you suspect unauthorised access to your account.
Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Trip and transaction records are retained for a minimum of 3 years (or longer where required by financial and tax regulations). When data is no longer required, it is securely deleted or anonymised. You may request deletion of your account by contacting contact@taxinaija.com.
Specific periods set in our systems:
- Oráku and support chats: 180 days
- Ride audio recordings: 72 hours on your phone; if uploaded after an SOS or report, 30 days, or until an open safety case closes
- SOS alerts and safety cases: 365 days
- Full NIN: not kept after the identity check (we keep the result, the partner's reference and the last 4 digits); BVN: not kept (last 4 digits only)
- Sign-in location lookups: 24 hours
- App performance data: detailed events 7 days, summaries up to 13 months
- When you delete your account, we erase or anonymise your personal data. We keep payment, payout and tax records, without your name or contact details, as the law requires. Security logs are kept, anonymised, for 1 year
Your Rights
Under the Nigeria Data Protection Act, 2023 (NDPA) and applicable laws, you have the right to:
- Access and receive a copy of your personal data
- Request correction of inaccurate or incomplete information
- Request deletion of your data (subject to legal retention requirements)
- Object to or restrict certain processing
- Withdraw consent for data processing at any time (where processing is based on consent)
- Data portability — receive your data in a structured, commonly used, machine-readable format
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC)
To exercise any of these rights, contact us at contact@taxinaija.com. We respond within the timelines required by law.
Cookies and Similar Technologies
Our website uses cookies and similar technologies for essential functionality, security, and analytics. You can control cookies through your browser settings; disabling essential cookies may affect how the website functions.
This website is hosted by Netlify and loads its fonts from Google Fonts. The videos on our homepage are YouTube videos in privacy-enhanced mode; YouTube may set cookies when you play one. The mobile apps do not use browser cookies; they use Firebase Analytics and Crashlytics as described in section 04A.
Children's Privacy
TaxiNaija is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us personal data, contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date, and material changes will be notified through the app or website.
Contact Us
TaxiNaija Technologies LTD
No. 30, Apple Road, Oke Alaro, Olusoji Elebu Area
Oluyole Extension, Ibadan, Oyo State, Nigeria
TaxiNaija Technologies LLC
7308 E Independence Blvd, Suite C VIP1158
Charlotte, NC 28227, United States
Email: contact@taxinaija.com
Phone: +234 813 715 9044 (Nigeria) | +1 704 802 5993 (US)
