Privacy Policy

1. Who we are

Glyde is operated by SWIFT GLYDE LIMITED (“Glyde”, “we”, “us” or “our”). We are responsible for the personal data described in this policy.

Privacy enquiries: privacy@glyde.ng

2. Scope of this policy

This policy applies to the Glyde Passenger app, Glyde Driver app, Glyde websites, customer-support channels and the backend services that support them. It covers passengers, prospective and active drivers, people who contact support, and people whose information is supplied for safety or delivery purposes.

3. Data we collect

Account and profile information

• Name, phone number, email address and account role.
• Profile photograph, date of birth and gender where provided.
• Phone or email verification status, account status and referral information.
• Authentication, session and sign-in security records.

Location and journey information

• Precise or approximate device location, depending on the permission you grant.
• Pickup points, destinations, additional stops, saved places and searched addresses.
• Trip and route records, including timestamps, distance, duration, fare, status and location points recorded during a journey.
• For drivers, live location while online or completing a trip or bus run, including when the app is in the background.

Trips, bookings and communications

• Ride, shared-ride, bus, rental, event and sponsored-travel booking records.
• Ratings, feedback, cancellation information and promotion usage.
• In-app messages between passengers and drivers.
• Support requests, complaint records and communications with us.

Payments and wallet information

• Wallet balance, credits, debits, refunds, payouts and transaction history.
• Payment status, provider references, card brand and last four digits where supplied by a payment provider.

Payment-card details are handled by authorised payment providers. Glyde does not store full card numbers, card security codes or online-banking credentials.

Driver and vehicle information

• Driver’s licence, government identification and proof of address.
• Vehicle registration, insurance, roadworthiness and ownership information.
• Driver, vehicle and document photographs.
• Verification status, document expiry, training and performance information.
• Earnings, remittance and payout records.

Safety information

• Emergency contacts that you enter manually.
• SOS alerts, incident reports and the location associated with a safety event.
• Fraud, abuse, dispute and platform-integrity records.

Device, camera and technical information

• Device type, operating system, app version and language.
• Push-notification token and notification preferences.
• Network, diagnostic, crash, security and server-log information.
• Images you choose to upload from your camera or photo library, such as a profile picture, driver document or vehicle image.
• Camera access in the Driver app when a driver opens the bus ticket scanner. Ticket codes are scanned for validation; Glyde does not activate the camera continuously.

4. How we obtain data

• Directly from you when you register, book, drive, pay or contact us.
• Automatically from your device when you use a feature that needs it.
• From another Glyde user where necessary to complete a shared trip or safety action.
• From payment, mapping, identity-verification and other service providers.
• From an employer or organisation that sponsors travel, where applicable.
• From lawful public, regulatory or fraud-prevention sources where permitted.

5. Why we use data and our legal bases

• Providing the service: creating accounts, matching passengers and drivers, navigation, bookings, fare calculation, payments, receipts and support. We process this data to perform our agreement with you or take steps at your request.
• Safety and security: verifying drivers and vehicles, responding to emergencies, preventing fraud, enforcing platform rules and investigating incidents. We rely on legal obligations and our legitimate interests in operating a safe service.
• Legal compliance: keeping required transport, tax, accounting, payment and dispute records and responding to lawful authority requests.
• Service reliability and improvement: diagnosing faults, monitoring performance, measuring feature use and developing safer or more useful services. We rely on our legitimate interests, subject to your rights.
• Communications: sending verification codes, trip updates, receipts, safety messages and service notices. Optional marketing is sent only where permitted or with consent, and you may opt out.
• Consent: where applicable, for optional device permissions, marketing or another purpose explained when consent is requested. Withdrawing consent does not affect earlier lawful processing.

6. Location, camera and notification permissions

Passenger location

The Passenger app uses location while the app is in use to set a pickup, show nearby services, calculate routes and arrival estimates, support trip sharing and respond to an SOS request. You may enter some addresses manually, but core live-trip functions may be less accurate without location.

Driver foreground and background location

The Driver app uses location when a driver is online or completing an active trip or bus run. Background access lets dispatch and safety functions continue when the app is minimised or the screen is locked. It supports nearby-trip matching, passenger arrival tracking, navigation, route progress and journey records. Background collection stops when the driver goes offline and no active journey or run requires tracking. Android may show a persistent notification while tracking is active.

Camera and notifications

Camera access is requested when you choose a camera-dependent feature such as uploading an image or scanning a bus ticket. Notification access is used for verification, trip, chat, safety, operational and service messages. You can change these permissions in your device settings.

7. When we share data

We do not sell personal data. We may share limited data with:

• Passengers and drivers: information needed to recognise one another, coordinate pickup, complete the journey, communicate and support safety. This can include first name, photograph, rating, pickup, destination, live vehicle location and vehicle details.
• Payment and payout providers: such as Paystack, Stripe or Flutterwave, where enabled, to process transactions, refunds and driver payouts.
• Technology providers: hosting, database, file-storage, security, diagnostics, mapping, geocoding, routing, email, SMS and push-notification providers. These may include Railway, Supabase, Google Maps, Firebase and Sentry where enabled.
• Employers or travel sponsors: limited booking and billing information where an organisation funds your travel and you use that benefit.
• Emergency contacts, emergency services and insurers: when you request it, an emergency occurs, or disclosure is reasonably necessary to protect life or safety.
• Professional advisers, regulators and law enforcement: where necessary for legal compliance, claims, audits or the protection of rights and safety.
• Business transaction parties: under confidentiality protections if Glyde is involved in a financing, restructuring, acquisition or sale.

Providers may process data only for the services they supply to us, subject to their contracts, applicable law and their own legally required disclosures.

8. How long we keep data

We keep personal data only as long as needed for the purposes in this policy, including providing an active account, meeting legal duties, resolving disputes and preventing fraud. Current intended retention periods are:

• Account and profile data: while the account is active and during deletion processing.
• Trip, payment, wallet, payout, tax and accounting records: up to seven years after the relevant transaction or account closure where required for legal and audit purposes.
• Detailed live GPS route points: normally up to 90 days, after which they are deleted or de-identified unless needed for an active safety, fraud, dispute or legal matter.
• Support, safety and dispute records: for the life of the matter and a reasonable period afterward, taking account of legal limitation periods.
• Driver verification records: while the driver relationship is active and afterward for the period required by transport, insurance, fraud-prevention or legal obligations.

Backups are protected and removed on their normal rotation schedule. When deletion is not legally permitted, retained data is restricted to the reason for which it must be kept.

9. Account and data deletion

You may request deletion without reinstalling the app. Visit our account deletion page for the in-app and web request options, what we delete, what we may retain and how identity is verified.

A deletion request closes the account and starts deletion or de-identification of data associated with it, subject to records we must keep for legal, safety, fraud-prevention, accounting or dispute purposes. Merely uninstalling the app does not delete an account.

10. Your privacy rights

Subject to applicable law, you may ask us to:

• Confirm whether we process your data and provide access to it.
• Correct inaccurate or incomplete data.
• Delete data that we are not legally required to retain.
• Restrict or object to certain processing.
• Provide eligible data in a portable format.
• Withdraw consent where processing relies on consent.
• Opt out of direct marketing.

Contact privacy@glyde.ng. We may need to verify your identity before acting on a request. You may also complain to the Nigeria Data Protection Commission.

11. Your choices and controls

• Update profile and saved-place information from the app.
• Go offline in the Driver app to stop availability-based background tracking.
• Change location, camera and notification permissions in Android settings.
• Change eligible notification preferences in the app.
• Use the unsubscribe method in optional marketing messages.
• Request account deletion in the app or through the public deletion page.

12. How we protect data

We use administrative, technical and organisational safeguards designed to protect personal data. These include encrypted network connections, hashed credentials where password authentication is used, protected token storage on supported devices, access controls, logging, backups and restrictions on staff and service-provider access.

No system is completely secure. Please protect your device and verification codes and contact us promptly if you believe your account has been compromised.

13. International data transfers

Some service providers may process data outside Nigeria. Where personal data is transferred internationally, we use safeguards required by applicable Nigerian data protection law, which may include contractual protections, transfer assessments and security measures appropriate to the data and destination.

14. Children

Glyde passenger and driver accounts are intended for people aged 18 or over. We do not knowingly create accounts for children. If you believe a child has provided personal data, contact us so that we can investigate and take appropriate action.

15. Changes to this policy

We may update this policy when our services, providers or legal duties change. We will publish the revised version here, update the date above and provide additional notice in the app or by email where a material change requires it.

16. Contact us

Send privacy questions, rights requests and complaints to privacy@glyde.ng.