Privacy Policy

Last updated: 19 July 2026

This policy explains what the O3 Drive rider app collects, why we collect it, who it is shared with, and what control you have over it. It covers the O3 Drive mobile application for passengers. Drivers are covered by a separate Driver Privacy Policy.

O3 Drive is a ride-hailing service operating in Osogbo, Osun State, Nigeria. By creating an account and using the app, you agree to the practices described here.

1. Information We Collect

1.1 Account information you provide

• Name, email address and phone number — used to identify your account, contact you about a trip, and let your driver reach you.
• Password — handled by our authentication provider and stored only as a cryptographic hash. Nobody at O3 Drive can read it.
• Profile photo — optional. If you upload one it is stored privately and shown to the driver assigned to your trip.

1.2 Location information

• Your device location — collected only while the app is open and in the foreground, and only after you grant location permission. It is used to place your pickup pin, show nearby drivers, and centre the map.
• Pickup and destination — the addresses you choose and their coordinates are stored on every ride request and completed trip.
• Live trip position — while a trip is in progress we store the current position associated with that trip so the map and arrival estimate stay accurate.

We do not track your location in the background. The rider app does not request background location permission and collects nothing when the app is closed or minimised.

1.3 Trip and booking records

• Pickup and destination addresses and coordinates, estimated distance and duration, and the vehicle category you selected.
• Trip status and timestamps — when the driver was assigned, when the trip started, when the destination was reached, and when payment completed.
• Fare details — estimated fare, actual time-based fare, any safety escort fee, and the total charged, in Nigerian Naira.
• The driver assigned to you and the vehicle plate number.
• Any rating and written review you leave after a trip.

1.4 Payment information

• We never see or store your card number. Card details are entered directly into our payment processor's secure checkout and are never transmitted to or stored on our systems.
• Wallet balance and transaction history — top-ups and debits, each with a reference, amount, channel, status and description.
• Payment references returned by the processor, so we can reconcile a payment with a trip and investigate disputes.

1.5 Identity verification (Executive bookings only)

Executive bookings require identity verification. If — and only if — you request one, we collect:

• Your National Identification Number (NIN).
• A photograph of your government-issued ID, captured with your camera or chosen from your photo library.
• The verification outcome, the date it was approved, and, if it was declined, the reason.

ID photographs are stored in private storage that is not publicly reachable. They are accessible only to authorised O3 Drive staff reviewing your verification, through short-lived signed links. Drivers never see your ID document or NIN.

1.6 Device and technical information

• Push notification token and whether you have enabled notifications, so we can alert you when a driver accepts, arrives, or a payment completes.
• Platform (iOS or Android) and the time you were last active, used for support and to route notifications correctly.

2. How We Use Your Information

We do not sell your personal data. We do not use your data for third-party advertising, and we do not build advertising profiles.

3. What Your Driver Can See

When a driver is assigned to your trip, they can see your name, profile photo, phone number, pickup and destination addresses, and your position during the trip. They cannot see your email address, wallet balance, payment details, NIN, ID document, or your history of other trips.

4. Who We Share Information With

We share only what each party needs to perform its function, and only with the following categories:

• Your assigned driver — as described in section 3.
• Payment processor (Paystack) — to take card payments and fund wallet top-ups. Card data goes directly to them.
• Backend and database hosting — stores your account, trips and transactions on our behalf.
• Private file storage — stores profile and identity photographs.
• Push notification delivery (Apple and Google) — to deliver notifications to your device.
• Maps and geocoding — to display maps, convert addresses to coordinates and calculate routes.
• Authorised O3 Drive staff — for support, dispute resolution, identity verification and safety investigations, limited by role.
• Law enforcement or regulators — where we are legally required to, or where disclosure is necessary to protect someone's safety.

5. How We Protect Your Information

• All traffic between the app and our servers is encrypted in transit.
• Database access is governed by row-level security, so your records are only readable by you and by authorised staff.
• Sensitive fields — including your wallet balance, account type and verification status — cannot be modified from the app. They are writable only by our servers, so they cannot be tampered with from a device.
• Identity and profile photographs are held in private storage and served only through short-lived signed links, never public URLs.
• Staff access to customer records is restricted by role.

No system is perfectly secure. We cannot guarantee absolute security, but we will notify you and the relevant authority of a breach affecting your personal data where the law requires it.

6. How Long We Keep Your Information

• Account information — kept while your account is active.
• Trip and payment records — retained after account closure for as long as required by Nigerian tax, accounting and financial record-keeping obligations, and to resolve any outstanding dispute.
• Identity verification documents — retained while your verification remains valid and for the period required for compliance, then deleted.
• Location points — trip pickup, destination and route data are kept as part of the trip record. We do not retain a continuous location history outside of trips.

7. Your Rights

Under the Nigeria Data Protection Act, you have the right to request access to the personal data we hold about you, correct inaccurate data, request deletion, object to or restrict certain processing, withdraw consent you previously gave, and receive a copy of your data in a portable format.

You can update your name, phone number and profile photo directly in the app, and turn notifications on or off at any time in Account → Notifications or in your device settings. Location permission can be revoked at any time in your device settings, though the app cannot set a pickup point without it.

To exercise any other right, or to request deletion of your account, email privacy@o3drive.com. We will respond within the period required by law. Note that we may need to retain certain trip and payment records even after deletion, where the law requires it.

8. Children

O3 Drive is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will remove it.

9. Where Your Data Is Processed

Our hosting, storage, payment and notification providers may process and store data on servers outside Nigeria. Where data is transferred abroad, we rely on providers that offer appropriate contractual safeguards for the protection of personal data.

10. Changes to This Policy

We may update this policy as the service changes. The date at the top of this page shows when it was last revised. Where a change materially affects how we handle your data, we will notify you in the app or by email before it takes effect.