Privacy policy
What we collect, why we collect it, who sees it, and how you stay in control. Written in plain English.
Who we are
Lino Rides (“Lino Rides”, “we”, “us”) runs a ride-hailing app for Lagos, Nigeria, and this website. We decide why and how your personal data is used, which makes us the “data controller” under the Nigeria Data Protection Act 2023 (the “NDPA”).
You can reach us at support@linorides.com.ng for anything in this policy.
What this policy covers
This policy covers the Lino Rides Android app (used by both riders and drivers, in the same app) and this website, linorides.com.ng. It explains what personal data we collect, why, who we share it with, how long we keep it and what choices you have.
The app and the service are for Lagos only for now. The app is not published yet; this policy describes how it is built to work.
In short: we collect what we need to sign you in, match riders with drivers, work out fares, pay drivers and keep trips safe. We do not sell your personal data. This website sets no cookies and makes no requests to third parties.
What we collect and why
The table shows each kind of data, why we use it and the legal basis for doing so under the NDPA. Some data is only collected if you use a feature, for example drivers’ documents.
| Data | What we use it for | Legal basis |
|---|---|---|
| Phone number and country dial code | Creating your account, signing you in with a one-time code sent by SMS, and letting a rider and a driver on the same trip call or text each other. | Contract (providing the service); legitimate interests (preventing fraud and misuse) |
| Name, optional email address, optional profile photo | Running your account, showing the other person on a trip who you are, and contacting you about your account or a trip. | Contract; consent for the optional items, which you can remove in your profile |
| Password (optional) | An alternative way to sign in and to confirm sensitive actions. It is stored in hashed form, so we cannot read it. | Contract; legitimate interests (account security) |
| Location of a rider | While you use the app: to set your pickup point, show nearby service and price the trip, and to show your trip on the map. We do not ask riders for background location. | Contract; your consent through the Android location permission |
| Location of a driver | While you are online and on a trip: to receive trip requests near you, guide you to the pickup and the drop-off, let the rider follow your car, and record the route driven so the final fare can be calculated. See “Location” below for background use. | Contract; your consent through the Android location permission; legitimate interests (safety, and checking that a trip really took place) |
| Trip history and fares: pickup and drop-off, route, times, distance, ride type, fare breakdown, payment method, cancellations | Providing and showing your trips and receipts, calculating fares and driver earnings, handling cancellations, disputes and complaints. | Contract; legal obligation (accounting and tax records) |
| Ratings and feedback | Letting riders rate drivers and drivers rate riders, keeping the service safe and good. | Legitimate interests |
| Wallet and withdrawal records; for drivers, bank details (bank, account number, account name) | Keeping wallet balances, charging fares and fees, taking Lino’s commission, and paying approved withdrawals to your bank account. | Contract; legal obligation |
| Driver documents and vehicle details: documents such as a driver licence, vehicle registration and proof of address, vehicle photos and details, taken with the camera or chosen from your files | Checking that a driver and vehicle are suitable before the driver can go online, and again when documents expire. | Contract; legal obligation; legitimate interests (rider safety) |
| Device and notification tokens | Sending trip updates and account notifications to your phone. Tokens are removed when you delete your account. | Consent (the Android notification permission); legitimate interests |
| Messages to support and trip reports | Answering your questions and looking into problems. | Contract; legitimate interests |
| Technical and security data: IP address, request logs, app and sign-in session records | Running the service, keeping you signed in, limiting abuse and investigating security problems. | Legitimate interests |
You choose what to give us. If you do not give us something we need for a feature, for example your phone number or a driver’s documents, we may not be able to provide that feature.
We do not use the personal data above to make decisions about you that are made only by a computer and that have legal or similarly significant effects.
Location
Riders. The app uses your phone’s location while you have it open, to suggest your pickup point and to show you and your driver on the map. You can also type or pin an address instead of sharing your location.
Drivers. Location is shared while you are online and during trips. So that your location keeps updating when the app is not on screen, for example when you use another app during a trip, the app uses an Android foreground service for location while you are on duty. Android shows an ongoing notification whenever this runs. It stops when you go offline.
You can switch location permission off at any time in your phone’s settings. Parts of the app, such as going online as a driver, will then not work.
International transfers
Some of the providers above, including Google, Cloudflare, Expo and Firebase, process data in countries outside Nigeria. When your data leaves Nigeria we rely on the NDPA’s transfer rules: we send it only to providers that give a level of protection that meets the law, for example through contracts that require them to protect it, or in other ways the NDPA allows.
How long we keep it
- Account details are kept while your account is open.
- Trip, fare, wallet and withdrawal records are kept for as long as we need them to keep accurate accounts, meet tax and other legal duties, and deal with disputes, fraud and safety questions.
- Driver documents and vehicle records are kept while the driver’s profile is active and for as long as needed afterwards for safety, legal and dispute purposes.
- Support messages are kept for as long as needed to deal with your request and any follow-up.
- Technical logs are kept for a limited period for security and troubleshooting.
When we no longer need data, we delete it or remove what identifies you.
When you delete your account
You can delete your account in the app. When you do, the name, phone number, email address, profile photo and notification token are removed from your account, and every device is signed out. Records that must be kept, such as trip and payment records, stay in the system without your name and contact details on them. We may keep other records linked to the account for the reasons above, but only as long as we need them.
Backups that contain older copies of data are replaced on a regular cycle.
Security
We use measures that suit the risk, including:
- encrypted connections (HTTPS) between the app and our servers;
- verification codes that expire and can only be tried a limited number of times;
- passwords stored in hashed form, and your sign-in session stored in your phone’s secure storage;
- private storage for driver documents, opened only through short-lived, signed links for authorised people;
- limits on how often one person or address can request codes and other actions, to slow abuse;
- access to personal data limited to people who need it.
No online service is completely secure. Keep your phone locked and tell us at once if you think someone has used your account. If a personal data breach is likely to put your rights at risk, we will notify the Nigeria Data Protection Commission and, where required, you, as the NDPA says.
Your rights and how to use them
Under the NDPA you have the right to:
- be told how your data is used (this policy);
- ask for a copy of the personal data we hold about you;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data, or restrict how we use it;
- object to uses based on our legitimate interests;
- receive your data in a structured, common format (data portability) where the law gives you that right;
- withdraw consent where we rely on it, without affecting what happened before.
How to use them
- Correct your details: open Profile in the app and edit your name, email or photo.
- Delete your account: in the app, open Profile and choose Delete account. You confirm with your password, or with a code we text you if you never set a password. We cannot delete an account during an active trip, or while your wallet holds money or you owe a fee or commission. Withdraw the balance or settle what is owed first.
- Access, restriction, objection or portability: email support@linorides.com.ng from the phone number or email address on your account. We may ask you to prove who you are before we share or change anything.
- Location, camera and notifications: change these permissions in your phone’s settings at any time.
We aim to reply within one month. If we cannot do what you ask, for example because the law requires us to keep a record, we will tell you why.
If you are not happy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Nigeria Data Protection Commission.
Children
Lino Rides is not for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has created an account, email us and we will delete it.
This website
This website is a simple set of pages. It sets no cookies, has no analytics or advertising trackers, and loads no fonts, scripts, images or other files from third parties: everything comes from linorides.com.ng.
The site is delivered through Cloudflare, which handles the connection between your browser and the site. Like any host, Cloudflare processes technical data such as your IP address to deliver the pages and protect them against attacks. If you click an email link, such as “Get notified”, your own email app opens and what you send is handled by your email provider and ours.
Changes to this policy
We may update this policy, for example when we add a feature such as card payments. We will change the “Last updated” date at the top and, if the change matters to you, tell you in the app or on this website before it takes effect.
Contact
Questions, requests or concerns about your data: support@linorides.com.ng.
You can also read our Terms of use.