Last Updated: 17-12-2025 

Overview

Qwikfleet(“Qwikfleet”, “we”, “our”, or “us”) operates a mobile delivery platform connecting customers with riders and truckers. This policy outlines the personal data we collect, the reasons for collecting it, how we use and share it, and the rights available to you under the Nigeria Data Protection Regulation (NDPR) and relevant data protection frameworks. It is intended to be clear for both customers and drivers; role-specific notices may be provided where appropriate.

1. Scope & Role-specific Notices

Qwikfleet provides different services to customers (senders/receivers) and riders/truckers (service providers). Some processing applies to all users; other processing is role-specific (e.g., driver KYC, rider internal financial ledger). Where necessary, Qwikfleet will present separate notices or in-app disclosures tailored to each role. 

2. What We Collect

A. Account & Identity Data

• Full name, phone number, email address, profile photo (optional).

B. Location & Delivery Data

• Pickup and drop-off addresses; real-time GPS location while a delivery is active; route and trip metadata (distance, duration).

C. Payment & Transaction Data

• We do not store raw card numbers or bank account PANs. We may store transaction references, payment status, and order-to-payment linkage for accounting and dispute resolution purposes. All payment processing is performed by PCI-compliant third-party providers.

D. Rider Financial Ledger (Internal)

• Rider earnings, adjustments, and internal ledger entries are used for payouts, audits, and operational control. This is an internal record (not a customer wallet). Access is restricted and logged.

E. Device & Usage Data

• Device type, OS, IP address, crash logs and analytics, app version, and usage logs.

F. Support & Communication Data

• Messages to/from support, chat logs (where permitted), dispute records.

3. Why We Process Data (Legal Bases — NDPR)

We process personal data for the following legal bases:

• Contract performance/service delivery: to provide delivery services (bookings, matching, tracking).
• Consent: where required (e.g., push notifications, marketing).
• Legal obligations: responding to lawful requests from authorities, tax, and accounting.
• Legitimate interests: fraud prevention, platform integrity, service improvement (balanced against user rights).

We document our legal bases and restrict processing to what is necessary and proportionate. (This aligns with practices used by other logistics and transport providers.) 

4. How We Use & Share Data

Core uses:

• Create and manage accounts, match customers and riders, process payments and receipts, enable real-time tracking, and support dispute resolution.

With whom we share (examples):

• Riders/truckers: pickup/delivery details required to complete a trip.
• Payment processors: to complete transactions and verify payment status.
• Service providers: SMS gateways, crash analytics, cloud hosting, and email providers.
• Authorities: where required by law (e.g., regulatory, safety, or anti-fraud investigations).
• Business partners: logistics partners, customs, or third-party vendors only where necessary for service delivery (consistent with logistics industry practice).

We do not sell or rent personal data.

5. Retention & Deletion

We retain personal data only as long as necessary for:

• Service provision (e.g., transaction history for accounting purposes),
• Legal/regulatory compliance (tax, audit), and
• Legitimate dispute resolution.

Retention periods will be documented in internal data retention schedules. After retention periods expire, data will be securely deleted or irreversibly anonymized. (Large logistics firms publish retention windows; consider a default of 3–7 years for transaction and accounting records, subject to legal advice.) 

6. Security & Transfer Safeguards

We implement technical and organizational measures, including encryption in transit (HTTPS), role-based access, logging and audit trails, and vulnerability management. For cross-border transfers (if any), we’ll use appropriate safeguards (contractual clauses, standard contractual clauses, or equivalent) in line with corporate data protection frameworks like those used by global operators.

7. Rider-specific Controls & Operational Records

Because Qwikfleet operates a two-sided marketplace, we keep internal rider records (earnings, adjustments, KYC) to support payouts, compliance, and operational safety. Admin actions that affect rider finances or statuses are logged and auditable. Riders will have a separate privacy notice describing these processes. 

8. User Rights (How To Exercise Them)

Under the NDPR and applicable laws, you can:

• Access your data
• Correct inaccurate data
• Request deletion (subject to legal obligations)
• Withdraw consent to specific processing
• Object to processing where legitimate interests are asserted
• Lodge complaints with the Nigeria Data Protection Bureau (NDPB)

Make requests via: info@qwikfleet.africa or via the in-app privacy request form. Expect an acknowledgement within 2 days and a substantive reply within NDPR timelines.

9. Children & Age Limit

Qwikfleet is intended for users aged 18+. We do not knowingly collect personal data from children under 18. If we become aware of data collected from a minor, we will take steps to delete it.

10. App Store & Google Play Requirements

We will:

• Present transparent data collection summaries on store listing pages,
• Request permissions at runtime with clear justifications (e.g., location only during active deliveries), and
• Allow users to control permissions through OS-level settings.

11. Updates to this Policy

We may update this policy for legal, regulatory, or business reasons. We will post the revised policy in-app with an updated “Last Updated” date and, where material, notify users by email or push notification.

12. Contact & Complaints

Privacy contact: info@qwikfleet.africa

Mailing address: info@qwikfleet.africa

Regulator: Nigeria Data Protection Bureau (NDPB), details available on the NDPB website.