Privacy Policy

Information you give us

• Account & identity: your name, phone number and/or email address (used to sign you in with a one-time passcode), and optionally your gender, date of birth and profile photo.
• Verification documents: where you choose to verify your identity or become a driver, documents such as a national ID, driving licence, vehicle insurance or proof of address, including their status and expiry dates. These are stored privately and reviewed by our team.
• Vehicle information: if you offer rides, your vehicle's make, model, year, colour, number plate, capacity and insurance details.
• Bookings & travel: the journeys you search, book or offer, including origins, destinations, stops, dates, times, seat and passenger counts, and any notes you add.
• Payments: amounts, currency and a reference to each transaction. Card and mobile-money credentials are collected and processed by our payment providers; we do not store full card numbers.
• Content & communications: reviews and ratings you leave, messages and notifications, and any correspondence with our support team.

Information we collect automatically

• Location data: with your permission, your device location to help fill in pickup points and match rides. In the mobile app, if you are a driver with an active trip, we may collect your location in the background to share live progress with passengers; you can turn this off (see "Location and your privacy" below).
• Device & usage data: such as your IP address, device and browser type, operating system, app version, identifiers, the pages or screens you use, and diagnostic information.
• Push notification tokens: in the mobile app, a token that lets us deliver push notifications to your device.
• Cookies & similar technologies: as described under Cookies and Similar Technologies below.

We use your personal data to:

• create and manage your account and authenticate you;
• operate the Service: search, match rides, take and confirm bookings, and arrange parcels where available;
• process payments, service fees, payouts and refunds, and prevent fraud;
• verify identity and documents and calculate trust badges;
• facilitate contact and coordination between passengers, drivers, operators and agents for a booking;
• send you service messages, booking updates, receipts and (where you allow it) notifications and SMS;
• provide support, resolve disputes and handle complaints;
• keep the Service safe and secure and enforce our terms and policies;
• analyse and improve the Service and develop new features; and
• comply with legal, tax, accounting and regulatory obligations.

Under the DPPA, we rely on one or more of the following bases to process your personal data: your consent (which you can withdraw at any time); the performance of a contract with you (to provide the Service you request); compliance with a legal obligation; the legitimate interests of running, securing and improving the Service in a way that does not override your rights; and, where relevant, protecting someone's vital interests (for example, safety during a trip).

We share personal data only as needed to run the Service:

• With other users: to arrange a journey. Before a booking is accepted, others see only limited details (for example, a first name and a blurred profile photo). Once a booking is confirmed, the driver/operator and passenger may see each other's name, photo, trust level, contact phone number and the relevant pickup and drop-off details so they can coordinate the trip.
• With Transport Providers and operators: the booking and passenger information they need to carry you.
• With service providers (sub-processors): trusted third parties that process data on our behalf, listed below.
• For legal reasons: where we believe in good faith it is necessary to comply with the law, respond to lawful requests, enforce our terms, or protect the rights, property or safety of users, the public or SafariShare.
• In a business transfer: if we are involved in a merger, acquisition, financing or sale of assets, your data may be transferred subject to this Policy.
• Aggregated or de-identified data: which can no longer identify you, for analytics, research and reporting.

We do not sell your personal data.

We treat precise location with particular care. Other users are not shown your exact coordinates: pickup and drop-off points are "snapped" to a nearby road or place name before they are displayed, and shared route maps show only the overlapping part of a journey. Exact coordinates are used internally to match rides and estimate times.

In the mobile app, background location is collected only while you are an active driver on a trip so passengers can see live progress, and only after you grant the relevant permission. You can stop sharing at any time by ending the trip or turning off location permission in your device settings, though some features may then not work.

We use the following categories of providers to operate the Service. Each receives only the data needed for its function and is required to protect it:

• Cloud, database, authentication & storage: Supabase (hosting our database, sign-in and file storage) and DigitalOcean (infrastructure hosting).
• Messaging: Africa's Talking (SMS, including one-time passcodes) and Resend (transactional email).
• Payments: our mobile-money and card payment processors.
• Maps & places: Google Maps Platform (maps, place search and routing) and OpenStreetMap/Nominatim (geocoding).
• Push notifications: Expo, Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM).
• Analytics & monitoring: PostHog and Google Tag Manager (product and web analytics), and our self-hosted logging and monitoring tools.

Some routing and mapping is performed on our own self-hosted systems, in which case that data is not shared with a third party. We may update this list as our providers change; contact us at privacy@safarishare.co for the current details.

Some of our service providers are located outside Uganda, so your personal data may be transferred to, and processed in, other countries. Where we transfer data internationally, we take steps required by the DPPA to ensure it remains protected, including putting in place appropriate contractual safeguards with those providers.

We keep personal data for as long as your account is active and as needed to provide the Service. After that, we retain it only as long as necessary to comply with legal, tax and accounting obligations, resolve disputes, prevent fraud and enforce our agreements. When you delete your account, we delete or anonymise your personal data; some records (such as past bookings and transactions) are kept in anonymised form for legal and record-keeping purposes.

Subject to the DPPA, you have the right to:

• access the personal data we hold about you and ask how it is used;
• correct inaccurate or incomplete data;
• delete your data, by asking us or, where the feature is available, using "delete account" in the app;
• object to or restrict certain processing;
• withdraw consent where we rely on it (without affecting prior processing); and
• complain to the Personal Data Protection Office.

To exercise your rights, contact us at privacy@safarishare.co. We may need to verify your identity before acting on a request. You can also lodge a complaint with Uganda's Personal Data Protection Office (PDPO), Uganda.

We use administrative, technical and physical safeguards to protect your personal data, including encryption in transit, access controls, and storing session credentials securely (in the mobile app, in your device's secure keystore). No method of transmission or storage is completely secure, so we cannot guarantee absolute security; please keep your account credentials and device protected.

The Service is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us so we can remove it.

Cookies are small text files placed on your device when you visit a website. We also use similar technologies such as browser local storage, pixels and mobile SDKs, which we refer to collectively here as "cookies". We use them to keep you signed in, remember preferences, understand how the Service is used, and measure our marketing.

Categories we use

• Strictly necessary: required to operate the Service, such as keeping you signed in. These cannot be switched off through our controls.
• Functional: remember choices such as your notification and privacy preferences.
• Analytics & performance: help us understand usage so we can improve, using tools such as PostHog and Google Tag Manager.
• Marketing & measurement: where used, help us measure campaigns and understand how visitors arrive at the Service.
• Third-party content: features such as embedded Google Maps may set their own cookies governed by the provider's policy.

Your choices

Most browsers let you see, delete and block cookies through their settings. If you block strictly necessary cookies, parts of the Service may not function. Our mobile app does not use browser cookies in the same way: it stores your sign-in session securely in your device's keystore and may use analytics SDKs and device identifiers, which you can control through your device's privacy settings.

The mobile app may ask for permission to access your location (to find rides and, for drivers, share live trip progress), to send you notifications, and to use your photos (to add a profile or vehicle photo). You can grant or withdraw these permissions at any time in your device settings. Withdrawing a permission may limit related features.

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you and will update the "last updated" date above. Your continued use of the Service after changes take effect means you accept the updated Policy.

If you have questions about this Policy or how we handle your data, contact our data-protection contact:

Voyage Technologies Limited (operating as SafariShare) Plot 4, Kira Road, Kampala, Uganda P.O. Box 36846, Kampala, Uganda

• Privacy & data requests: privacy@safarishare.co
• Legal: legal@safarishare.co