Privacy policy.

01Introduction & scope

KarryMi (“KarryMi”, “we”, “us” or “our”) operates a mobile platform for motorcycle ride-hailing and parcel delivery, and a related bike-ownership investment programme, in Ado-Ekiti, Ekiti State, Nigeria. We are committed to protecting your privacy and handling your personal data responsibly.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have. It applies to everyone who uses KarryMi — passengers, senders, riders and investors — across our app, website and supporting services.

By using KarryMi, you acknowledge that you have read and understood this policy. If you do not agree with it, please do not use our services.

02 Data we collect

We collect only the data we need to run a safe, trusted service. Depending on how you use KarryMi, this may include:

Account information

• Name, phone number and email address used to create and manage your account.
• A profile photo, where you choose to add one (and, for riders, a required photo on file).

Identity & verification data

• Your National Identification Number (NIN) and/or other government-issued ID.
• For riders: address details, vehicle and licence documents, and background-check results.

Payment & financial data

• Bank account and payout details, and limited card or transfer information needed to process wallet top-ups, fares and payouts. Full card numbers are handled by our payment processors, not stored by us.
• For investors: details needed to administer your bike investment and pay your returns.

Location data

• Precise location during trips and deliveries (pickup, drop-off, live tracking and routing). Riders share location while online; passengers and senders share it while a trip is active.

Device & usage data

• Device type, operating system, app version, identifiers and diagnostic logs.
• Trip history, ratings, in-app messages, support requests and how you interact with KarryMi.

03 How we use your data

We use your personal data to:

• Verify riders and confirm the identity of users, so every rider is named, checked and accountable.
• Match and provide rides and deliveries — connecting passengers and senders with nearby riders, routing trips and generating delivery codes.
• Process payments — wallet top-ups, fares, rider earnings and investor payouts.
• Keep everyone safe — live tracking, trip sharing, the pickup and delivery codes, and investigating safety reports.
• Provide support and respond to your questions, disputes and feedback.
• Improve KarryMi — understanding how the service is used so we can make it better and more reliable.
• Meet legal and regulatory obligations, prevent fraud and enforce our Terms of Service.

04 Legal basis for processing

We process your personal data on the following lawful bases under the Nigeria Data Protection Regulation (NDPR) and applicable law:

• Performance of a contract — to provide the rides, deliveries, rider services and investment services you sign up for.
• Consent — where you have given it, for example for precise location access or marketing communications. You may withdraw consent at any time.
• Legal obligation — where we must process data to comply with the law, including identity verification and financial regulations.
• Legitimate interests — to keep our platform safe, prevent fraud and improve our services, balanced against your rights.

05 How we share your data

We do not sell your personal data. We share it only where it is necessary to run the service or where the law requires it:

• Between riders and passengers/senders— to make a trip work, a rider sees your first name, pickup and drop-off, and a passenger sees the rider's name, photo, plate and rating. Phone numbers may be masked.
• Payment processors — licensed providers who handle wallet top-ups, fares and payouts securely.
• Identity-verification providers — such as Smile Identity, to confirm IDs and run background checks on riders.
• Service providers — vetted partners who help us with hosting, communications, mapping, analytics and customer support, under strict confidentiality terms.
• Law enforcement and regulators — where we are lawfully required to disclose data, or where it is necessary to protect safety, investigate crime or defend legal claims.

06 Data retention

We keep your personal data only for as long as we need it for the purposes set out in this policy, or for as long as the law requires.

• Account and profile data is kept while your account is active.
• Trip, delivery and transaction records, and rider verification documents, are kept for the period required by financial, tax and safety regulations.
• When data is no longer needed, we securely delete or anonymise it.

If you close your account, we will delete or anonymise your data except where we are required to retain it (for example, for completed financial transactions or legal compliance).

07 How we protect your data

We use technical and organisational measures designed to protect your personal data, including:

• Encryption of data in transit and at rest where appropriate.
• Strict access controls, so only authorised staff can access personal data on a need-to-know basis.
• Secure handling of payment and identity data through trusted, licensed partners.
• Ongoing monitoring, and procedures to respond to any data breach in line with our legal obligations.

08 Your rights under the NDPR

Under Nigeria's data protection framework, you have the right to:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Delete your data, where there is no legal reason for us to keep it.
• Object to or restrict certain processing of your data.
• Withdraw consent at any time, where we rely on your consent.
• Data portability — to receive your data in a usable format, where applicable.

To exercise any of these rights, contact our Data Protection Officer using the details below. We will respond within the timeframe required by law. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

09Cookies & analytics

Our website and app use cookies and similar technologies to keep you signed in, remember your preferences, and understand how our services are used so we can improve them.

You can control cookies through your browser or device settings. Some features may not work properly if you disable certain cookies. We use analytics tools to measure performance in an aggregated way that does not identify you personally wherever possible.

10 Children

KarryMi is not intended for anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a minor has provided us with their data, please contact us and we will take steps to delete it.

11 International data transfers

Your data is primarily processed in Nigeria. Some of our service providers may process data outside Nigeria. Where this happens, we take steps to ensure your data receives a level of protection consistent with the NDPR, including appropriate contractual safeguards.

12 Changes to this policy

We may update this Privacy Policy from time to time as our services and the law evolve. When we make material changes, we will update the “last updated” date and, where appropriate, notify you in the app or by email. Please review this page periodically.

13Contact & Data Protection Officer

If you have questions about this policy or how we handle your data, or you wish to exercise your rights, please contact our Data Protection Officer:

You can also reach our support team any time through the Contact & support page.