iRides Privacy Policy

Version: 2026.09.v1 Effective date: September 9, 2026

1. Who we are

iRides is a vehicle-rental marketplace operated by Ingenious Technology. This privacy policy explains how we collect, use, store, share, and protect information from renters, vehicle owners, drivers, security personnel, business representatives, admins, and visitors.

2. Information we collect

We collect account details such as name, email, phone number, role, profile photo, address, and communication preferences. We collect KYC/KYB information such as identity details, proof of address, business registration documents, board resolution or authorization letters, director/representative details, uploaded documents, and verification results.

We also collect booking information, vehicle listing information, availability, pricing, trip/session activity, inspection photos, dispute evidence, payment references, wallet transactions, bank-account tokens or masked bank details, push-notification device tokens, support messages, and admin activity records.

3. Location and trip data

For self-drive or live-tracked trips, iRides may collect precise location, tracking-consent records, timestamps, limited device information, route/session updates, pickup/return evidence, and driver-arrival or trip-status events. Before each self-drive session, the renter receives a separate, just-in-time disclosure and can accept or decline. On supported mobile devices, location collection may continue in the background while the app is minimised, closed, or not in active use, but only during an active trip session.

Location is used for trip safety, vehicle recovery, authorised owner monitoring, customer support, and short-term dispute handling. It is not used for advertising or made public. Access is limited to authorised booking participants and authorised iRides personnel. Tracking stops when the session ends. The last accepted session location and recent trail remain available for no more than 48 hours after session end and are then scheduled for automatic deletion.

4. How we use information

We use information to create and secure accounts, verify identity and business authority, process bookings, route payments and refunds, manage escrow and payouts, prevent fraud, enforce marketplace rules, provide notifications, support users, review disputes, comply with legal obligations, improve the platform, and maintain operational records.

5. KYC, KYB, and third-party verification

iRides may share required verification information with trusted identity, business-verification, payment, messaging, email, cloud-hosting, analytics, fraud-prevention, and compliance providers. These providers process information on our behalf or as required to deliver their services.

For business verification, Smile or another verification provider may validate business or representative information, while iRides admins may manually review board resolutions, authorization letters, uploaded certificates, and related documents before approving corporate accounts.

6. Payments and bank details

Payments, refunds, deposits, escrow movement, wallet balances, payout records, and bank-account tokenization may be processed through payment partners such as Paystack. iRides stores masked account information and provider tokens where needed; raw bank-account details should not be stored longer than required to verify and tokenize the account.

7. Notifications and communications

We may send transactional emails, in-app messages, push notifications, SMS or WhatsApp-style support communications where enabled. These include booking updates, KYC/KYB requests, payment reminders, driver assignment, driver arrival, trip start/end events, disputes, refunds, policy updates, and admin review outcomes.

8. Sharing and disclosure

We may share limited information with booking participants where necessary to complete a trip: for example renter contact details, owner or company details, assigned driver details, pickup information, vehicle information, and session status. We may also disclose information to regulators, law enforcement, courts, insurers, professional advisers, or fraud-prevention bodies where legally required or necessary to protect users and the platform.

9. Retention

We retain data for as long as needed to operate iRides, resolve disputes, satisfy tax/accounting obligations, handle compliance reviews, maintain safety records, and meet legal requirements. KYC/KYB, dispute, consent, payment, and admin audit records may be retained for several years where required by law or legitimate business need.

10. Security

We use access controls, authentication, audit logs, encryption-capable cloud services, role-based admin access, and operational safeguards. No platform can guarantee absolute security, so users must protect their passwords, devices, email accounts, and OTPs.

11. User choices and rights

Users may request correction, access, export, or deletion of eligible personal information by contacting iRides. A renter may decline the just-in-time tracking request or revoke the device permission before a session starts; a self-drive session cannot start without the required location permission and recorded consent. During an active session, users can contact iRides support to stop the trip and location collection safely. Some records cannot be deleted immediately where retention is required for compliance, fraud prevention, payments, disputes, safety, legal claims, or tax/accounting obligations.

12. Children

iRides is not intended for children. Users must be legally capable of entering into marketplace transactions and must meet any age requirements for renting, driving, or listing vehicles.

13. Updates

We may update this policy as the platform, law, or compliance requirements change. Material updates may be shown in-app or sent by email/notification.

14. Cookies and similar technologies

We use necessary technologies for website security, authentication, network stability, accessibility, and core functionality. These operate without an optional-cookie selection where permitted by law.

With a visitor's permission, we may also use functional, analytics, and advertising technologies. Optional technologies remain disabled until the visitor makes the applicable selection. Visitors can accept, reject, or change their selections through the cookie-preferences control on the website. Withdrawing consent stops future optional collection but does not make earlier lawful processing invalid.

15. Advertising measurement

When advertising consent is given, approved providers such as Meta Platforms may receive limited information about activity on public iRides marketing and vehicle-discovery pages. This may include page or event type, browser and device information, cookie identifiers, approximate network information, vehicle category or public listing identifier, displayed currency and value, and the time and source of an interaction.

We use this information to measure advertising, understand campaign performance, limit or improve advertisements, create permitted audiences, and show advertisements that may be more relevant. We do not intentionally provide KYC documents or status, bank details, wallet balances, payment-provider references, booking identifiers, private trip information, precise pickup or drop-off addresses, GPS location, dispute evidence, or admin activity to advertising providers.

Advertising providers may process information outside Nigeria and may attempt to associate an event with an account on their services. Their processing is also governed by their own privacy notices. iRides will identify enabled providers through its cookie-preferences interface or related notice and will not activate an advertising provider unless the required permission has been given.

16. Contact

Privacy questions should be sent to irides@ingenious-technology.org.