Xryde Driver — Privacy Policy

How we collect, use, and protect your personal data

Last Updated: June 16, 2026

This Privacy Policy explains how Tech Lab X Ltd (RC 9042513), the company that operates the Xryde ride-hailing platform ("Xryde", "we", "us", or "our"), collects, uses, shares, and protects your personal information when you use the Xryde Driver app to receive trip requests and earn on the platform in Nigeria.

Tech Lab X Ltd is the data controller responsible for your personal data. Because drivers carry passengers, we are required to verify your identity and documents, so the Driver app collects more information than the passenger app. We are committed to complying with the Nigeria Data Protection Act (NDPA) 2023 and the General Application and Implementation Directive (GAID) 2025.

1. Who We Are

Xryde is a technology platform operated by Tech Lab X Ltd that connects independent drivers with passengers who need rides in Nigeria. As a driver, you are an independent contractor; Xryde provides the app, trip-matching technology, safety tools, and support.

Company: Tech Lab X Ltd (RC 9042513)
Registered address: 24th Street, Ugbowo, Benin City, Edo State, Nigeria
Privacy contact: privacy@techlabx.org

2. Information We Collect

To onboard you, keep passengers safe, and pay out correctly, we collect the following categories of data:

Category	Examples	Why we collect it
Account & contact	Full name, phone number, email address, password (stored encrypted/hashed), profile photo.	To create and secure your account and present you to passengers.
Identity & KYC	National Identification Number (NIN), date of birth, residential address, state of origin, and passport photograph.	To verify who you are, as required for a driver carrying passengers, and to prevent fraud.
Driver's licence & experience	Licence number, licence expiry date, front and back images of your licence, and your driving experience.	To confirm you are legally permitted to drive.
Vehicle documents	Vehicle make, model, year, colour, licence plate, vehicle registration, insurance certificate, roadworthiness certificate, and vehicle photos.	To confirm the vehicle is roadworthy, insured, and properly registered.
Next of kin	Name, phone number, and relationship of your next of kin.	So we have an emergency point of contact for you.
Payment & bank data	Bank name, account number, and account name; and, when you pay your service commission, a Paystack payment authorisation and the last four digits of your card.	To identify you for payouts and to collect the Xryde service commission. (See Section 13.)
Location data	Real-time GPS location while you are online, including in the background during an active trip.	To match you with nearby requests, navigate, and keep trips safe and accurate.
Trip & earnings	Trips completed, timestamps, distances, fares, commission and balance records, ratings, and feedback.	To operate the service, calculate commission, and maintain quality.
Communications	In-app chat with passengers, in-app voice call records (time, duration, and status only), and support tickets including any photos you attach.	To enable driver–passenger contact and resolve your requests.
Trusted contacts	The name, phone number, and relationship of contacts you add. With your permission, we read your device contacts only so you can pick a contact.	So we can alert the people you choose if you raise an emergency (SOS) during a trip.
Safety / SOS data	Your live location streamed while an SOS is active, and the time and place it was raised.	To help our safety team and your trusted contacts respond to an emergency.
Device & technical	Device type, operating system, app version, push-notification token, and IP/network information.	To deliver notifications, keep the app working, and prevent fraud and abuse.

Sensitive documents are kept private. Your KYC and vehicle documents are stored in private cloud storage and are not publicly accessible. We do not record the audio of in-app voice calls — only basic call records are kept.

3. Identity Verification & Vetting

Before you can accept trips, our team reviews the documents you submit (your NIN, driver's licence, vehicle registration, insurance, roadworthiness certificate, and photos) and either approves or rejects your application. This manual review helps us confirm that drivers on Xryde are who they say they are and are legally allowed to drive.

We use the documents you provide for this verification and for fraud-prevention purposes. To detect attempts to re-register after removal, we may keep a one-way, irreversible code derived from your identity documents even after your account is deleted — this proves an identity was verified without storing the original document (see Sections 15 and 16).

4. How We Use Your Information

We use your personal information to:

Onboard and verify you as a driver and keep your documents up to date.
Match you with trips and route you to passengers efficiently.
Enable communication with passengers through in-app chat and calls.
Calculate earnings and commission, track your balance, and process commission payments.
Keep everyone safe — power the SOS feature, alert your trusted contacts, and let our safety team respond to incidents.
Support you and resolve disputes, complaints, and lost-item reports.
Maintain quality using ratings and feedback, and enforce our standards.
Improve the service and prevent fraud and abuse.
Communicate with you — send trip, earnings, account, and safety notices, and (with your consent) promotions you can opt out of.
Comply with the law, including identity, tax, and law-enforcement requirements.

5. Legal Bases for Processing

Under the NDPA, we process your data only when we have a lawful basis:

Performance of a contract — to operate your driver account and pay you correctly.
Legal obligation — to verify your identity, keep financial/tax records, and meet regulatory and law-enforcement requirements.
Your consent — for optional things like accessing your contacts and marketing messages, which you can withdraw at any time.
Legitimate interests — to keep the platform safe and secure and to prevent fraud.
Vital interests — to protect your safety or someone else's during an emergency (SOS).

6. How We Share Your Information

We share your information only when necessary, and never sell it. We may share data:

With passengers: your first name, profile photo, vehicle details and licence plate, rating, and an in-app way to contact you, so they can find and trust you.
With your trusted contacts: if you raise an SOS during a trip, we send them an SMS alert with your name and a live-location link.
With our service providers: trusted partners who help us run Xryde (hosting, mapping, payments, messaging, notifications, voice calls) under strict data-protection terms — see Section 7.
With emergency services or authorities: where needed to respond to a safety incident or where required by Nigerian law, court order, or lawful request.
In a business transfer: if Xryde or Tech Lab X Ltd is involved in a merger, acquisition, or sale of assets, your data may transfer to the new entity under this same policy.

We never sell your personal information.

7. Third-Party Service Providers

We rely on carefully selected providers to operate the app. They process data only on our instructions and only for the purposes below:

Provider	Purpose
Google (Maps, Places & Geocoding)	Maps, place search, and address lookup.
OpenStreetMap / OSRM & Nominatim	Route and travel-time calculation, and address lookup as a fallback.
Paystack	Processing your commission/debt payments by card. (Card details are handled by Paystack; we store only a payment reference and the last four digits.)
Firebase Cloud Messaging (Google)	Delivering push notifications, including trip offers. (Your notification token is stored in our own database; Firebase is used only to deliver messages.)
Google Cloud (hosting & storage)	Secure cloud hosting and private storage of your account, KYC, and vehicle documents.
Agora	Powering in-app voice calls between you and your passenger.
Resend	Sending transactional emails such as approval, payment, and account notices.
SMS & WhatsApp (incl. Meta) providers	Delivering one-time passcodes and emergency SMS alerts.

8. International Data Transfers

Some of our service providers (for example Google, Firebase, Agora, Resend, and Meta/WhatsApp) process data on servers located outside Nigeria. Where this happens, we take the steps required by the NDPA to ensure your data remains protected — including using providers that offer an adequate level of protection and appropriate contractual safeguards. By using Xryde Driver, you understand that your information may be processed outside Nigeria for the purposes described in this policy.

9. Location Data & Background Location

The Xryde Driver app uses your location to operate. Specifically, we use it to:

Show your position on the map and match you with nearby trip requests while you are online.
Provide turn-by-turn navigation to the pickup point and destination.
Keep trips accurate and support safety and dispute resolution.
Stream your live location during an SOS so help can reach you.

Background location: So that trips keep working when the app is minimised or your screen is off, the Driver app collects location in the background while you are online or on an active trip. You can disable background location in your device settings, but you will not be able to go online or complete trips without it. Location is not collected when you are offline.

10. In-App Chat and Voice Calls

Xryde lets you contact your passenger through in-app chat and in-app voice calls so you can coordinate the trip without sharing your personal phone number.

Chat: messages between you and your passenger are stored so the conversation is available during the trip and for support and safety.
Voice calls: in-app calls are carried by Agora. We keep a basic call record (time, duration, status); we do not record or listen to the audio. Making a call requires microphone permission.

11. Emergency (SOS) & Trusted Contacts

Your safety matters to us. The Driver app includes an emergency SOS feature you can use during a trip.

Trusted contacts: you can add people you trust by entering their details, or by selecting them from your device contacts (with your permission). We store these contacts only to alert them in an emergency.
Raising an SOS: pressing SOS during a trip alerts the Xryde safety team in real time and sends your trusted contacts an SMS with your details and a live-location link.
Live location: while the SOS is active, your location is streamed so responders can see where you are. You can cancel the SOS at any time.

Because SOS exists to protect life, we may retain a record of SOS alerts (in anonymised form) even after you delete your account — see Sections 15 and 16.

12. Push Notifications

We send push notifications for trip offers, earnings and account updates, chat messages, and safety alerts. To do this, we store a push-notification token for your device in our own database and use Firebase Cloud Messaging only to deliver the message. Turning off notifications means you may miss trip requests and important updates.

13. Earnings, Commission & Payment Data

Passengers pay you directly in cash. Xryde charges a service commission on completed trips, which you settle through the app:

We keep records of your completed trips, fares, the commission due, your outstanding balance, and your payments.
When you pay your commission, the card payment is processed by Paystack. We do not store your full card number — Paystack handles the card data, and we keep only a secure payment authorisation and the last four digits so you can pay again easily.
We store the bank details you provide (bank name, account name, account number) to identify you for payment-related purposes.

These financial records are kept for the period required by Nigerian tax and accounting law (see Section 15).

14. Data Security

We take the security of your data seriously and use measures including:

Encryption of data in transit (HTTPS/TLS) and hashing of passwords.
Private cloud storage for your KYC and vehicle documents, served only through short-lived, signed links so they are not publicly accessible.
Access controls that limit staff access to personal data on a need-to-know basis.
Tokenised card handling through Paystack, so we never hold your full card number.
Regular review of our systems and practices.

No online system is ever completely secure, so while we work hard to protect your data, we cannot guarantee absolute security.

15. Data Retention

We keep your personal information only for as long as we need it:

While your account is active — to provide the service and meet our verification obligations.
Financial, commission, and tax records — retained for the period required by Nigerian law.
Safety records — SOS alerts may be retained, in anonymised form, as a safety and liability record.
Fraud-prevention proof — a one-way, irreversible code derived from your verified identity may be retained so we can detect attempts to re-register after removal.

16. Account Deletion & Data Deletion

You are in control of your data. You can delete your entire account, or request deletion of specific items of personal data while keeping your account active.

Deleting your entire account. You can request full deletion at any time from the app's settings (Account → Delete Account), through our dedicated account deletion page, or by contacting us. When you do:

Your account is deactivated and enters a 21-day grace period, during which you may change your mind by logging back into the app.
After 21 days, we permanently delete your personal data — including your profile, KYC and vehicle documents, trusted contacts, chat messages, support tickets and attachments, stored payment authorisations, and one-time-passcode records.
For legal, financial, and safety reasons we retain a limited set of records in anonymised form that can no longer directly identify you — for example commission/tax records, SOS safety records, and the fraud-prevention identity proof described above.

Deleting specific data (partial deletion). If you want to remove only certain information without closing your account, you can:

Remove your profile photo, or update your contact details, directly in the app.
Delete individual trusted contacts you have added.
Ask us to delete other specific personal data we hold about you by emailing privacy@techlabx.org.

We will action partial-deletion requests unless we are legally required to keep the data — for example your identity (KYC), licence, and financial/tax records, which we must retain while your driver account is active — or still need it to protect safety or resolve a dispute. If we are unable to delete something you have asked us to remove, we will explain why.

We will send a reminder before any grace period ends. To start a deletion request, use the app settings, visit our account deletion page, or email privacy@techlabx.org.

17. Your Rights Under Nigerian Law

Under the NDPA 2023, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete information.
Delete your account, or request deletion of specific personal data, subject to lawful retention for identity, financial, and safety purposes.
Object to or restrict certain processing, such as marketing.
Withdraw consent for optional processing (e.g. contacts access) at any time.
Data portability — receive your data in a portable format.
Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been breached.

To exercise any of these rights, contact us at privacy@techlabx.org or through the app's settings. We respond within the timelines set by the NDPA.

18. Changes to This Policy

We may update this Privacy Policy from time to time to reflect new features, technologies, or legal requirements. When we make significant changes, we will post the updated policy in the app with a new "Last Updated" date and, where appropriate, notify you in-app or by email. Your continued use of Xryde Driver after changes take effect means you accept the updated policy.

19. Contact Us

If you have questions, concerns, or requests about this policy or your personal data, reach out to us:

Company: Tech Lab X Ltd (RC 9042513)
Privacy email: privacy@techlabx.org
Support email: support@techlabx.org
Phone: +234 816 063 8494
Address: 24th Street, Ugbowo, Benin City, Edo State, Nigeria
In-App Support: Available through the Help section

Thank you for driving with Xryde. We are committed to protecting your data and supporting you as you earn on the platform.