SafeRides

Privacy Policy

Last updated: 6 September 2026 · Applies to the SafeRides mobile app and https://app.ravdan.org

1. Who we are

SafeRides is operated from Zambia and served at https://app.ravdan.org. Contact: [email protected]. The registered legal entity name and physical address must be inserted by counsel before public launch.

The app is for people 18 years or older. We do not knowingly collect data from children.

2. Data we collect

Account and identity

• Name, email, phone number, role (driver, owner, client, mechanic), city/province, national registration number (NRC).
• KYC photos: driver’s licence, NRC, selfie-with-NRC, optional police clearance. Stored as files in object storage (Cloudflare R2 / cloud storage) and reviewed by platform admins.
• Profile photo and trust/rating scores.

Location

• Approximate and precise location while you use the app (marketplace, SOS, maps).
• Background location on Android when you are on an active lease, so the fleet owner can see the vehicle and so SOS still works if the app is minimized. A persistent notification is shown while phone GPS tracking is on.
• Hardware GPS (Traccar) if a tracker is installed on the vehicle — location is sent to our self-hosted Traccar server, not to Google or other ad networks.
• Home city is used to alert a fleet owner if a leased vehicle leaves that area.

Call logs (Android sideload / full build only)

• If you opt in, we may back up recent call history (number, name if on device, type, time, duration) for night-ride SOS. This is not included in the Google Play build.
• Call logs are stored with your driver safety record and can be included in an SOS packet for admins / next of kin. They are not sold.

Contacts you give us

• Emergency / next-of-kin contacts you type in (we do not read your address book).
• Passenger phone numbers you log when collecting a fare, for your own safety history.

Financial data

• Wallet balances, holds, ledger entries, MoMo / Lenco payment references, escrow, scheme contributions, ad purchases, subscription invoices.
• We do not store full card PAN in the app. Card/MoMo processing is handled by Lenco and mobile-money providers.

User-generated content

• Vehicle listings and photos, bids, in-app chat, ads, reviews, safety incident reports, and scheme membership.

Device and diagnostics

• Push notification token, app version, coarse device environment needed to deliver alerts. We do not sell advertising IDs to third-party ad networks.

3. Why we use it

• Create and secure your account; verify identity (KYC) and paid driver verification.
• Run leases, escrow, wallets, subscriptions, ads, and vehicle schemes.
• Share live location with the owner of the vehicle you are leasing, and with SafeRides admins on SOS / immobilization / abuse cases.
• Send SOS to your next of kin, the fleet owner, and platform admins.
• Moderate listings, chat, and ads; handle reports; prevent fraud.
• Comply with law, tax, and payment-provider rules; defend legal claims.

4. Who we share with

• Fleet owners of a vehicle you lease: location while on lease, SOS/breakdown, immobilization status, relevant contract and payment status. They do not get your full call log or KYC images unless an incident investigation requires admin-mediated sharing.
• Other users you chat or contract with: name, role, rating, listing details you publish.
• Payment processors (Lenco, mobile-money operators) for deposits and payouts.
• Infrastructure: Supabase (auth/database), Cloudflare R2 or equivalent object storage, our API/Traccar hosts (including Oracle-hosted production at app.ravdan.org), email/SMS providers.
• Authorities when required by Zambian law or to protect life and property.

We do not sell personal information. We do not use your location or call logs for third-party advertising.

5. Retention

• Account and KYC: while the account is open, then typically up to 7 years if needed for financial/KYC/legal records.
• Location/telemetry: while a lease is active and a limited period afterwards for disputes and safety (target: 90 days unless an incident is open).
• Chat and listings: while the account is open; reports kept for moderation.
• Call-log backups (non-Play builds): last 7 days of device history; stored copies kept with safety data until you delete them or we complete account deletion.
• Wallet/ledger: retained as required for accounting and anti-fraud.

After you request deletion we deactivate the account and aim to erase or anonymize personal data within 30 days, except records we must keep (payments, tax, ongoing disputes, abuse, or legal holds).

6. Your rights

You can access and update profile data in the app, request a copy or correction by emailing [email protected], and request deletion in the app (Profile → Request account deletion) or at app.ravdan.org/delete-account.

7. Permissions (Android / iOS)

• Location (precise, background on Android) — lease fleet tracking, SOS, maps. Core to the product for drivers on a lease.
• Camera / photos — KYC, profile photo, listing and ad images. We do not need blanket access to all photos; the system picker is used.
• Notifications — lease, payment, and safety alerts.
• Call log / phone (non-Play Android only) — optional SOS backup. Omitted from the Play Store package.

8. Security

We use HTTPS in production, authenticated APIs, and role-based access. No system is perfectly secure. Immobilization and GPS are safety tools, not a guarantee against theft or harm.

9. International processing

Servers and vendors may process data outside Zambia (for example cloud storage or email). By using SafeRides you understand your data may be transferred to those processors under this policy and their terms.

10. Changes

We will update this page and bump the in-app terms version when we make material changes. Continued use after the effective date means you accept the updated policy, unless the law requires a new consent.