Safi Rides Driver Privacy Policy

This Privacy Policy explains how Safi -Rides, collects, uses, stores, discloses, and protects

the personal data of individuals (“Drivers”) who use the Safi Rides Driver Platform. We are committed to respecting your privacy and complying with all applicable data protection laws, including the Kenya Data Protection Act 2019 and, where relevant, the General Protection Regulation 2018 (GDPR).

1.     Who are we

Safi- rides.is a ride-hailing technology company operating in Kenya. For the purposes of this Privacy Policy, we are the Data Controller of your personal data.

2.     Personal Data We Collect

We collect and process the following types of data:

a)    Identity & Contact Information

Full name, Phone number, email address, national ID/ passport, date of birth, residential address.

b)    Driver and Vehicle Documentation

Driver’s license, PSV badge, NTSA compliance, Insurance certificates, vehicle logbook.

c)    Platform Usage Data

App login/ logout times, trip acceptance/cancellation rates, trip volume, earnings, complaints

d)    Geolocation Data

Real-time location, route history, pick-up/ drop-off points

e)    Financial & Tax data

KRA PIN, VAT registration, bank account details, payout history

f)     Communication Data

In-app messages, call records, support inquiries

g)    Multimedia & Device Data

Profile photo, selfies for verification, device identifiers (IP address, device model, OS Version)

3.     How We Collect Your Data

We collect your data from:

• Direct submissions (during onboarding or app use)
• Your device (with permission)
• App usage patterns
• Government or regulatory bodies (NTSA, KRA)
• Third-party verifiers (e.g., for background checks)

4.     Purpose and legal Basis for Processing

5. Sharing of Personal Data

Your data may be shared by the following:

a)    Riders

Your first name, vehicle registration, profile photo, and location during an active trip

b)    Service Providers

Background check agencies, payment processors, cloud infrastructure, driver onboarding partners

c)    Government Authorities

National Transport and Safety Authority (NTSA), Kenya revenue Authority (KRA), courts, police

d)    Affiliates and Contractors

Group Companies or agents providing support or analytics

All third-party recipients are bound by contractual obligations to safeguard your data.

6.     Driver Rating and Monitoring

Driver are rated by riders after each trip. These ratings influence your Driver Score, which may impact access to incentives or account status.

Metrics affecting your score include:

• Rider feedback
• Acceptance/ cancellation rates
• Complaints and misconduct reports
• Traffic law compliance (Via government reports)

You may contest any rating or account action by contacting support.

7.     Automated Decision making

We use automated systems to:

• Assign trip requests
• Monitor Driver Score
• Detect Fraud or unusual behavior

You may request human intervention or review for decisions that significantly affect you (e.g., deactivation)

8.     Data Retention Policy

You may request erasure where legally applicable.

9.     Security Measures

We use industry-standard practices to safeguard your data:

• End-to-end encryption (SSL/TLS)
• Secure cloud hosting with access controls
• Internal security policies and staff training
• 2FA for admin access
• Regular security audits

10. Your rights

Under data protection laws, you have the right to:

• Access your personal data
• Rectify incomplete or inaccurate data
• Request deletion (subject to legal retention obligation)
• Restrict or object to processing
• Receive a copy of your data (portability)
• Withdraw consent (where applicable)
• Lodge a complaint with Kenya’s ODPC

11. Cookies and App Tracking

The Driver App uses cookies and SDK’s for:

• Session tracking
• Crash diagnostics
• App improvement analytics

Note; You can disable tracking in your device settings, though this may affect app functionality

12. International Transfers

Data may be transferred outside Kenya (e.g., for hosting, support services), Safi Rides ensures all cross-border data transfers comply with legal safeguards such as:

• Data Processing Agreements (DPAs)
• Standard Contractual (SCCS)

13. Policy Updates

The Privacy Policy may be updated to reflect changes in laws or practices. We will notify you via:

• In-app messages
• Email notifications
• Website notices

Continued use of the platform implies acceptance of the updated policy.

14. Data Protection Complaints

If you believe that your personal data has been misused, misprocessed, or accessed unlawfully:

1. Contact our data Protection
2. Clearly describe the issue, include relevant supporting information (screenshots, dates, etc.)
3. We will acknowledge the receipt of your complaint within 72 hours and aim to resolve it within30days.

If you are unsatisfied with the resolution, you may escalate the issue to the office of the data Protection Commissioner (ODPC) in Kenya.

4. Safi -Rides is committed to resolving all complaints or disputes in a fair, timely, and transparent manner.

15. Platform or Driver Account Disputes

For non-data related dispute (e.g., trip deactivations, unfair Driver Score impacts, payout issues):

1. Submit your dispute via the Driver App>” support”>” Dispute or Account Appeal”.
2. Include clear details, trip ID, or relevant
3. Our drivers support tem will review your claim and provide a decision within 7 business days.
4. If the dispute involves automated decisions (e.g., deactivating based on ratings), you may request human review.

16. Arbitration Clause (Optional)

For disputes not resolved through internal procedures, Sari rides may propose alternative dispute resolution (ADR) mechanism, such as:

• Independent mediation through a neutral third-party
• Arbitration in Nairobi under Kenyan law, subject to mutual consent

These steps aim to avoid prolonged litigation and maintain transparency and trust with our driver community.