Last updated: 27 May 2026
Moovfast ("Moovfast", "we", "us", "our") provides a multi-tenant logistics platform that lets dispatch companies operate delivery and ride services across Africa. This Privacy Policy explains what personal data we collect when you use Moovfast, why we collect it, how we use it, and the rights you have over it. It applies to dispatch operators who register a company on Moovfast, riders and drivers who work through one of those companies, and customers who book trips through any Moovfast-powered app or marketplace.
1. Who we are
Moovfast is operated by Moovfast Technologies, a company incorporated under the laws of the Federal Republic of Nigeria. For the purposes of data-protection law, Moovfast is the data controller for the platform infrastructure (accounts, dispatch engine, marketplace, settlement). Each dispatch operator registered on Moovfast is the data controller for their own customers, riders, and trip records. Moovfast acts as a data processor on their behalf for that data.
2. Information we collect
Account information. Name, phone number, email address, password (stored hashed), profile photo, role (operator, rider, customer), preferred language.
Identity and verification. For riders and operators: government ID number or image, driver's licence, vehicle registration, vehicle photos, business registration documents, bank account or mobile-money details used for settlement.
Location and movement. Live GPS coordinates from the driver app while a rider is on duty; pickup and drop-off coordinates for every trip; address autocomplete searches; saved places.
Trip and transaction data. Booking time, route, fare, payment method, status (requested, accepted, in transit, delivered, cancelled), ratings, feedback, in-app chat between rider and customer.
Device and technical data. Device model, OS, app version, IP address, push-notification tokens, crash logs, network type.
Communications. Support tickets, in-app chats, emails you send us, recorded calls when you contact our support line.
3. How we use your data
- To create and maintain your account and authenticate you on the platform.
- To match riders to trips, calculate fares, and run the cross-company marketplace.
- To process payments and remit settlements to operators and riders.
- To send transactional notifications (trip status, OTPs, receipts, payouts).
- To investigate fraud, abuse, safety incidents, and policy violations.
- To improve the platform — analytics, A/B testing, performance monitoring.
- To comply with legal obligations, court orders, and regulatory requests.
4. Legal basis
We process personal data on the following bases: contract (to deliver the Moovfast service you signed up for), legitimate interest (fraud prevention, network security, product analytics), consent (marketing communications, optional location features), and legal obligation (tax records, KYC). Our processing complies with the Nigeria Data Protection Act 2023 and, where applicable, the EU General Data Protection Regulation.
5. Sharing your data
We share data only as needed to run the platform:
- Between matched rider and customer: name, phone number (masked where possible), live location during an active trip, vehicle and licence-plate details.
- With the operating company: riders' and customers' trip data is visible to the dispatch operator whose company handled the trip.
- With service providers: map and geocoding APIs (Google Maps), payment gateways (Paystack, Flutterwave, Stripe, mobile-money providers), SMS/OTP providers, cloud hosting (Hostinger and AWS), crash analytics, push-notification services.
- With law enforcement: when legally compelled, or when necessary to protect the safety of a user or the public.
We do not sell personal data. Ever.
6. Data retention
Account data is retained for as long as your account is active. Trip and transaction records are retained for at least seven years to meet tax and regulatory obligations. Location pings for completed trips are downsampled after thirty days and fully anonymised after twelve months. Support communications are retained for two years.
7. Security
Personal data is encrypted in transit (TLS 1.2+) and at rest. Passwords are hashed with bcrypt. Access to production systems is restricted, logged, and reviewed quarterly. We run continuous backups and have a documented incident-response plan. No system is perfectly secure — if we ever discover a breach affecting your data, we will notify you and the relevant data-protection authority within seventy-two hours.
8. Your rights
You have the right to access the personal data we hold about you, correct it if it is wrong, request deletion (subject to legal retention requirements), object to certain processing, restrict processing, and ask for your data to be exported in a portable format. To exercise any of these rights, contact privacy@moovfast.com. We respond within thirty days.
9. Children
Moovfast is not intended for anyone under eighteen. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will remove the account.
10. International transfers
Data is primarily stored in Nigeria. Some service providers (payments, analytics, hosting) operate from outside Nigeria; transfers to those providers are protected by standard contractual clauses or equivalent safeguards.
11. Changes to this policy
We may update this policy as the platform evolves. Material changes will be communicated via in-app notification and email at least fourteen days before they take effect.
12. Contact
Data Protection Officer
Moovfast Technologies
privacy@moovfast.com