Your information, in plain words

Who is responsible

The company named at the bottom of this page runs mohto and decides how your information is used. In law it is the "controller". Questions and requests go to the privacy address below.

• Nigerian data protection law gives you the rights set out below.
• Companies that run cars on mohto (fleets and ride companies) are responsible for their own staff's information. We share only what a trip needs.

What we collect

• Your account: phone number, name, and an email address if you give one. You sign in with a code sent by text message.
• Your trips: pickup and drop-off places, the route, times, the fare, ratings, and messages you send to our support team.
• Your location: riders, while you are using the app to find a car and ride. Drivers, while they are online and on a trip. We do not collect it when you are not using the app, unless a screen in the app tells you otherwise and asks first.
• Payments: the amount, the method and a reference from the payment company. Card numbers are handled by the payment company. We do not see or keep them.
• Safety: people you choose as emergency contacts, trip-sharing links you create, and any alarm you raise.
• For drivers and companies: identity and licence documents, photos, vehicle papers, inspection results, and bank-letter details used for payouts. Licence numbers and dates of birth are stored encrypted.
• Your phone: a notification token, the app version and language, so we can send you trip alerts.
• Rewards: points and stamps you earn.
• Enquiries: if you ask on our website to become a fleet partner or to open a business account, we keep the company name, your name, phone number and email, and anything you add, so our team can contact you.

Why we use it

• To give you the service you asked for: matching you with a car, showing the trip, taking payment, sending receipts. (We need this to do what we promised you.)
• To keep people safe and stop fraud: checking drivers and cars, watching trips for anything odd, and reviewing unusual patterns such as many cancellations or refund requests. A person looks at every case before any action is taken.
• To meet the law: tax, accounting and answering lawful requests from the authorities.
• For things you choose: sharing a trip with a friend, adding a trip to your calendar, receiving offers. You can say no or change your mind.
• We do not sell your personal information and we do not show advertising from other companies in the app.

Who sees it

• Your driver sees your first name, pickup point and destination for the trip. You see your driver's name, photo, car and rating.
• The company that runs the car sees the trips its drivers take.
• If you ride on a company account, that company sees the trips on its account.
• Our staff see what they need to help you, and everything they do is recorded.
• Companies that work for us: payment (Paystack), text messages, email, phone notifications, maps and our hosting provider. They may only use your information to do their job for us.
• The authorities, when the law requires it.

Where it is kept

Our servers are in Cape Town, South Africa. Some of the companies that work for us may handle information elsewhere. We use written agreements and other safeguards for transfers outside Nigeria. Our lawyers are still confirming the exact basis, and we will update this page when they have.

How long we keep it

• Trip, payment and refund records: several years, because tax and accounting law requires it. Personal details on old records are removed where the law allows.
• Detailed location trails for a trip: a few months, longer if there is an open safety case or dispute.
• Driver identity documents: while the driver is active and for a limited time afterwards.
• Website enquiries: while we follow up. Our lawyers are still confirming how long we keep ones that do not lead to an account, and we will say here when they have.
• When you delete your account we remove or anonymise your details, except records we must keep by law.

Your rights

You can ask us to show you what we hold, correct it, delete it, limit how we use it, give you a copy, or stop using it for something you did not need to agree to. You can also ask for a person to review any decision made with the help of a computer.

• To delete your account, see Delete your account.
• For anything else, write to the privacy address below. We aim to reply within 30 days.
• You can complain to the Nigeria Data Protection Commission if you are not happy with our answer.

Decisions made with software

• Software may flag an account, trip or payment for review, and may suggest what to do. A person decides before an account is suspended or money is held.
• Nobody is permanently removed from mohto because of a score alone, and you can appeal.

Keeping it safe

• Information is encrypted when it travels, and personal fields such as licence numbers are encrypted when stored.
• Staff sign in with a second step, and only see what their job needs.
• If something goes wrong with your information, we tell the Commission within the time the law gives us, and we tell you if you are at risk.

Young people

mohto is for people aged 18 and over.

Changes

If we change this page in a way that matters, we will tell you in the app before it applies.

Who to write to

• Who we are: (to be completed before launch)
• Address: (to be completed before launch)
• Privacy and data requests: (to be completed before launch)
• Help and complaints: (to be completed before launch)