Xryde — Privacy Policy

How we collect, use, and protect your personal data

Last Updated: June 16, 2026

This Privacy Policy explains how Tech Lab X Ltd (RC 9042513), the company that operates the Xryde ride-hailing platform ("Xryde", "we", "us", or "our"), collects, uses, shares, and protects your personal information when you use the Xryde app to book and take rides in Nigeria.

Tech Lab X Ltd is the data controller responsible for your personal data. We are committed to complying with the Nigeria Data Protection Act (NDPA) 2023 and the General Application and Implementation Directive (GAID) 2025. By creating an account and using Xryde, you acknowledge the practices described in this policy.

1. Who We Are

Xryde is a technology platform operated by Tech Lab X Ltd that connects passengers with independent drivers for transportation in Nigeria. We provide the app, matching technology, safety tools, and customer support. We are not a transport company and do not employ drivers.

Company: Tech Lab X Ltd (RC 9042513)
Registered address: 24th Street, Ugbowo, Benin City, Edo State, Nigeria
Privacy contact: privacy@techlabx.org

2. Information We Collect

We only collect the data we need to give you safe, reliable rides. The table below summarises what we collect and why.

Category	Examples	Why we collect it
Account & profile	Full name, phone number, email address, password (stored encrypted/hashed), profile photo.	To create and secure your account and identify you to your driver.
Verification data	One-time passcodes (OTPs) sent to your phone by SMS or WhatsApp.	To verify your phone number and protect your account.
Location data	Real-time GPS location while the app is in use, pickup and drop-off points, and trip route.	To show nearby drivers, set your pickup, navigate, and calculate fares.
Trip information	Ride history, timestamps, fare amounts, distance, ride type, and the ratings and feedback you give.	To deliver the service, show your history, and maintain quality.
Communications	In-app chat messages with your driver, in-app voice call records (time, duration, and status only), and support tickets including any photos you attach.	To enable driver–passenger contact and resolve your requests.
Trusted contacts	The name, phone number, and relationship of contacts you choose to add. With your permission, we read your device contact list only so you can pick a contact.	So we can alert the people you choose if you raise an emergency (SOS).
Safety / SOS data	Your live location streamed while an SOS is active, and the time and place the SOS was raised.	To help our safety team and your trusted contacts respond to an emergency.
Device & technical	Device type, operating system, app version, push-notification token, and IP/network information.	To deliver notifications, keep the app working, and prevent fraud and abuse.

What we do not collect: Xryde passengers pay drivers in cash, so we do not collect or store your card or bank account details. We also do not record the audio of in-app voice calls — only basic call records (such as time and duration) are kept.

3. How We Collect Your Information

Directly from you — when you register, complete your profile, add trusted contacts, chat, contact support, or rate a trip.
Automatically — when you use the app, we collect location (with your permission), device, and usage data needed to run the service.
From your device — with your permission, we access your camera/photos (to set a profile photo) and contacts (to add trusted contacts). You can grant or revoke these permissions at any time in your device settings.

4. How We Use Your Information

We use your personal information to:

Provide rides: match you with nearby drivers, estimate and calculate fares, navigate, and complete pickups and drop-offs.
Enable communication: let you and your driver chat or call within the app to coordinate the trip.
Keep you safe: power the SOS feature, alert your trusted contacts, and let our safety team respond to incidents.
Support you: respond to your questions, complaints, and lost-item reports.
Maintain quality: use ratings and feedback to uphold standards on the platform.
Improve the service: understand how the app is used so we can fix problems and add features.
Communicate with you: send trip updates, security alerts, and service announcements. With your consent, we may also send promotions — you can opt out at any time.
Stay compliant & prevent fraud: meet legal obligations, detect and prevent fraud or abuse, and cooperate with lawful requests.

5. Legal Bases for Processing

Under the NDPA, we process your data only when we have a lawful basis to do so:

Performance of a contract — to provide the rides and features you request.
Your consent — for optional things like location access, accessing your contacts, and marketing messages. You can withdraw consent at any time.
Legitimate interests — to keep the platform safe, secure, and reliable, and to prevent fraud.
Vital interests — to protect your safety or someone else's during an emergency (SOS).
Legal obligation — to comply with Nigerian law, including tax and law-enforcement requirements.

6. How We Share Your Information

We share your information only when necessary, and never sell it. We may share data:

With your driver: your first name, profile photo, pickup/drop-off points, and a way to contact you in-app, so they can complete your trip.
With your trusted contacts: if you raise an SOS, we send them an alert by SMS that includes your name and a live-location link.
With our service providers: trusted partners who help us run Xryde (mapping, hosting, messaging, notifications, voice calls) under strict data-protection terms — see Section 7.
With emergency services or authorities: where needed to respond to a safety incident or where required by Nigerian law, court order, or lawful request.
In a business transfer: if Xryde or Tech Lab X Ltd is involved in a merger, acquisition, or sale of assets, your data may transfer to the new entity under this same policy.

We never sell your personal information to third parties for marketing purposes.

7. Third-Party Service Providers

We rely on carefully selected providers to operate the app. They process data only on our instructions and only for the purposes below:

Provider	Purpose
Google (Maps, Places & Geocoding)	Maps, place search/autocomplete, and address lookup.
OpenStreetMap / OSRM & Nominatim	Route and travel-time calculation, and address lookup as a fallback.
Firebase Cloud Messaging (Google)	Delivering push notifications to your device. (Your notification token is stored in our own database; Firebase is used only to deliver messages.)
Google Cloud (hosting & storage)	Secure cloud hosting and storage of app data and uploaded images.
Agora	Powering in-app voice calls between you and your driver.
Resend	Sending transactional emails such as receipts and account notices.
SMS & WhatsApp (incl. Meta) providers	Delivering one-time passcodes and emergency SMS alerts.

8. International Data Transfers

Some of our service providers (for example Google, Firebase, Agora, Resend, and Meta/WhatsApp) process data on servers located outside Nigeria. Where this happens, we take steps required by the NDPA to ensure your data remains protected — including using providers that offer an adequate level of protection and contractual safeguards. By using Xryde, you understand that your information may be processed outside Nigeria for the purposes described in this policy.

9. Location Data and Permissions

Xryde needs access to your device location to:

Show nearby drivers and estimated arrival times.
Set your pickup location automatically.
Provide real-time navigation and trip tracking.
Stream your live location during an SOS so help can reach you.

The passenger app collects location while you are using it; it does not track your location in the background after you close the app, except briefly while an SOS you started is active. You can control location permission in your device settings at any time, but disabling it will limit your ability to book and take rides.

10. In-App Chat and Voice Calls

To help you coordinate with your driver, Xryde offers in-app text chat and in-app voice calling.

Chat: messages between you and your driver are stored so the conversation is available during the trip and for support and safety purposes.
Voice calls: in-app calls let you reach your driver without revealing your real phone number. We use Agora to carry the call and we keep a basic call record (such as the time, duration, and status). We do not record or listen to the audio of your calls. Making a call requires microphone permission.

11. Emergency (SOS) & Trusted Contacts

Your safety matters to us. Xryde includes an emergency SOS feature you can use while you are on a trip.

Trusted contacts: you can add people you trust as emergency contacts by entering their name and phone number, or by selecting them from your device contacts (with your permission). We store these contacts only to alert them in an emergency.
Raising an SOS: when you press SOS during a ride, we alert the Xryde safety team in real time and send an SMS to your trusted contacts containing your name, your driver's details, and a live-location link.
Live location: while the SOS is active, your location is streamed so responders can see where you are. You can cancel the SOS at any time.

Because SOS exists to protect life, we may retain a record of SOS alerts (in anonymised form) even after you delete your account — see Sections 15 and 16.

12. Push Notifications

We send push notifications for things like driver arrival, trip updates, chat messages, and safety alerts. To do this, we store a push-notification token for your device in our own database and use Firebase Cloud Messaging only to deliver the message. You can turn off notifications in your device settings, though you may then miss important trip and safety updates.

13. Payments

In this version of Xryde, passengers pay their driver directly in cash at the end of the trip. We do not collect, process, or store passenger card or bank-account details. The fare you see in the app is an estimate; the final amount is shown after the trip. If card payments are introduced in the future, we will update this policy and obtain any consent required before collecting payment data.

14. Data Security

We take the security of your data seriously and use measures including:

Encryption of data in transit (HTTPS/TLS) and hashing of passwords.
Private cloud storage with access controls and authentication.
Short-lived, signed links for any sensitive images so they are not publicly accessible.
Limiting staff access to personal data on a need-to-know basis.
Regular review of our systems and practices.

No online system is ever completely secure, so while we work hard to protect your data, we cannot guarantee absolute security.

15. Data Retention

We keep your personal information only for as long as we need it:

While your account is active — to provide the service.
Financial and tax records — retained for the period required by Nigerian law.
Safety records — SOS alerts may be retained, in anonymised form, as a safety and liability record.
Disputes and legal obligations — kept as long as needed to resolve disputes and meet legal requirements.

16. Account Deletion & Data Deletion

You are in control of your data. You can delete your entire account, or request deletion of specific items of personal data while keeping your account active.

Deleting your entire account. You can request full deletion at any time from the app's settings (Account → Delete Account), through our dedicated account deletion page, or by contacting us. When you do:

Your account is deactivated immediately and enters a 21-day grace period, during which you may change your mind by logging back into the app.
After 21 days, we permanently delete your personal data — including your profile, saved places, trusted contacts, chat messages, support tickets and attachments, and one-time-passcode records.
For legal and safety reasons we retain a limited set of records in anonymised form that can no longer identify you — for example financial/tax records and SOS safety records.

Deleting specific data (partial deletion). If you want to remove only certain information without closing your account, you can:

Remove your profile photo, or update your name, email, or phone number, directly in the app.
Delete individual trusted contacts you have added.
Ask us to delete other specific personal data we hold about you by emailing privacy@techlabx.org.

We will action partial-deletion requests unless we are legally required to keep the data (for example, financial and tax records) or still need it to protect safety or resolve a dispute. If we are unable to delete something you have asked us to remove, we will explain why.

We will send a reminder before any grace period ends. To start a deletion request, use the app settings, visit our account deletion page, or email privacy@techlabx.org.

17. Your Rights Under Nigerian Law

Under the NDPA 2023, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete information.
Delete your account, or request deletion of specific personal data, subject to lawful retention.
Object to or restrict certain processing, such as marketing.
Withdraw consent for optional processing (e.g. location or contacts access) at any time.
Data portability — receive your data in a portable format.
Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been breached.

To exercise any of these rights, contact us at privacy@techlabx.org or through the app's settings. We respond within the timelines set by the NDPA.

18. Children's Privacy

Xryde is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

19. Changes to This Policy

We may update this Privacy Policy from time to time to reflect new features, technologies, or legal requirements. When we make significant changes, we will post the updated policy in the app with a new "Last Updated" date and, where appropriate, notify you in-app or by email. Your continued use of Xryde after changes take effect means you accept the updated policy.

20. Contact Us

If you have questions, concerns, or requests about this policy or your personal data, reach out to us:

Company: Tech Lab X Ltd (RC 9042513)
Privacy email: privacy@techlabx.org
Support email: support@techlabx.org
Phone: +234 816 063 8494
Address: 24th Street, Ugbowo, Benin City, Edo State, Nigeria
In-App Support: Available through the Help section

Thank you for trusting Xryde with your transportation needs. We are committed to earning and maintaining your trust by protecting your privacy and providing safe, reliable rides across Nigeria.