Privacy Policy

1. Who we are

This Privacy Policy explains how Swift9JA (the Super App for mobility, payments, marketplace and related services) and associated platform operators collect and process personal data when you use our mobile applications, websites, and APIs (together, the "Services").

Where Services are operated alongside the National Transportation Permit and Intelligence Platform (NTPIP), permit and compliance data may be processed under government or authorised operator mandates. Contact details for privacy requests will be published in-app and on our support channels.

2. Data we collect

• Account data — name, email, phone number, password (hashed), profile photo, preferred language, and optional home state.
• Identity & verification — where required for drivers, vendors, fleet operators or KYC (for example government ID references, business documents).
• Location — precise or approximate location when you request rides, deliveries, SOS, or enable driver/fleet tracking (with OS permission).
• Trip & order data — pick-up/drop-off, fares, chat messages during trips, call metadata (not call audio/video recordings by default), ratings, and support tickets.
• Payments — wallet balances, transaction history, and payment-provider references. We do not store full card PAN data on our servers when processors handle checkout.
• Device & push — device identifiers, app version, and Firebase Cloud Messaging tokens to deliver notifications (messages, incoming calls, trip updates).
• Usage & logs — IP address, API logs, crash diagnostics, and security audit events.

3. How we use data

• Create and secure your account; authenticate sessions (including multi-factor where enabled).
• Provide mobility, delivery, marketplace, wallet, insurance/protection, fuel, and care features.
• Match riders and drivers; enable in-app chat and call signalling; send status notifications.
• Process payments, commissions, refunds, and settlements with partners.
• Detect fraud, abuse, and safety incidents; comply with legal and regulatory obligations.
• Improve reliability, customer support, and product experience.

4. Legal bases

We process personal data where necessary to perform our contract with you, to comply with law, for legitimate interests (security, service improvement, fraud prevention) balanced against your rights, and where you have given consent (for example optional marketing or certain device permissions). Processing for regulated transport permits may also rely on public-interest or legal mandates applicable to NTPIP.

5. Sharing

We may share data with:

• Other users as needed to fulfil a trip or order (e.g. driver sees passenger pickup details).
• Vendors, mobility service providers, insurers, and fuel partners for the service you request.
• Payment processors, SMS/email/push providers, maps providers, and hosting/infrastructure vendors.
• Authorities where required by law, court order, or to protect safety and platform integrity.

We do not sell your personal data.

6. Calls, chat & notifications

In-trip chat messages are stored to deliver history and resolve disputes. Voice/video media for calls is typically peer-to-peer (WebRTC); we process call signalling metadata and may send push notifications for incoming calls and messages. We do not use your trip chat content for advertising.

7. International transfers & security

Data may be processed on infrastructure in Nigeria and/or other regions used by our cloud and vendor partners, with appropriate contractual and technical safeguards. We use encryption in transit (HTTPS / WSS), access controls, hashed passwords, and operational monitoring. No method of transmission is 100% secure; please protect your credentials and device.

8. Retention

We retain account and transaction records for as long as your account is active and as required for legal, tax, accounting, dispute, and safety purposes. You may request deletion subject to statutory retention and ongoing trip/order obligations.

9. Your rights (NDPR & similar)

Subject to applicable law (including Nigeria's NDPR), you may request access, correction, deletion, restriction, or objection to certain processing, and withdraw consent where processing is consent-based. Contact support through the app or the channels published on our website. You may also lodge a complaint with the relevant data protection authority.

10. Children

The Services are not directed to children under 18. If you believe we have collected data from a minor without appropriate authority, contact us to request deletion.

11. Changes

We may update this Policy from time to time. The "Last updated" date will change, and material updates may be notified in-app or by email/SMS where appropriate. Continued use after notice means you accept the updated Policy.

12. Contact

Privacy requests: use in-app Support, or email the address published for Swift9JA customer privacy inquiries on the official website / store listing. For NTPIP permit-related data requests, follow the channels provided by the relevant transport authority portal.