Privacy Policy

1. Who we are

Alpha1Rides is a Nigerian mobility technology service operated by The Alpha 1 Company. For personal data handled for our own purposes, The Alpha 1 Company acts as the data controller unless a different role is explained at the point of collection.

This Policy should be read with our Terms and Conditions and any specific privacy notice shown for a particular feature, promotion, partner service or employment relationship.

2. Quick guide

1. Data we collect
2. Location and trip data
3. How we use data
4. Lawful bases
5. Who we share data with
6. Safety and fraud
7. Retention
8. Your rights
9. International processing
10. Security
11. Children
12. Cookies and analytics
13. Contact

3. Personal data we may collect

Information you provide directly

• Name, phone number, email address and account credentials.
• Founding Rider, Founding Driver, fleet, business or partnership registration information.
• Profile information, preferences, emergency contacts and support communications.
• Pickup, destination, saved place and trip instructions.
• Payment-related information, transaction references, refunds and wallet activity. Full card or bank credentials may be handled directly by regulated payment providers rather than stored by us.
• Ratings, reviews, complaints, photographs, documents and other content you submit.

Driver and fleet information

• Identity and contact information.
• Driver's licence, vehicle registration, vehicle details, insurance, inspection or other onboarding documentation.
• Profile photograph, verification records and eligibility information.
• Trip acceptance, arrival, completion, cancellation, earnings, incentive and payout records.
• Fleet-owner or business-account information where applicable.

Information collected automatically

• Device type, operating system, app version, IP address, browser, identifiers and basic diagnostic data.
• Login, feature-use, crash, performance and security logs.
• Approximate or precise location where the relevant service requires location access and permissions allow it.
• Cookie, analytics and referral information on our websites where applicable.

4. Location, trip and mobility data

Location is central to ride-hailing. Depending on the feature and the permissions you grant, Alpha1Rides may process precise or approximate location to identify pickup points, display nearby drivers, match riders and drivers, calculate routes and fares, confirm arrival, track an active trip, support emergency or safety features, detect fraud and resolve disputes.

Driver location may be processed while a Driver is online and available for trips, during an accepted trip and for a limited period needed for safety, fraud prevention or trip records. Rider location may be processed while the app is in use or where a feature clearly requires background access. Device settings may allow you to change location permissions, although doing so can prevent core mobility features from working.

5. How we use personal data

We may use personal data to:

• register and manage Rider, Driver, fleet, partner or business accounts;
• operate pre-launch and founding-user registration channels;
• match riders and drivers and facilitate bookings, offers, negotiated fares and completed trips;
• calculate or display fares, charges, earnings, incentives, commissions, cancellations and refunds;
• process or reconcile payments and payouts;
• provide navigation, pickup, tracking, support and trip-history features;
• verify identity, driver eligibility, vehicles and account integrity;
• protect safety, investigate incidents, detect fraud and enforce Platform rules;
• communicate service messages, receipts, account updates and support responses;
• send marketing or launch updates where permitted and provide unsubscribe or preference controls where required;
• analyse performance, demand, service quality and product usage;
• improve routing, marketplace efficiency, customer support and product design;
• comply with legal, regulatory, tax, accounting, insurance, court or law-enforcement obligations;
• establish, exercise or defend legal claims.

6. Lawful bases for processing

We process personal data only where there is a lawful basis under the Nigeria Data Protection Act, 2023 and other applicable law. Depending on the activity, the basis may include:

• Contract: processing needed to provide a service you request or to take steps before entering a contract.
• Consent: where you have freely given specific consent, for example for certain optional communications or permissions. You may withdraw consent where consent is the basis.
• Legal obligation: processing required to comply with applicable law, regulation or a binding legal request.
• Legitimate interests: processing reasonably necessary for purposes such as service security, fraud prevention, platform integrity, product improvement, support and business operations, provided those interests are not overridden by your rights and interests.
• Vital interests or public interest: where applicable, including certain urgent safety situations or processing recognised by law.

Where we rely on a lawful basis other than consent, we do not treat the absence of consent as preventing processing that the law independently permits or requires.

7. Who we may share personal data with

We may share only the information reasonably necessary for the relevant purpose with:

• Riders and Drivers: for example, first name, profile information, vehicle information, pickup location, approximate arrival information, ratings and trip details needed to complete a ride.
• Fleet operators or business-account administrators: where a Driver, vehicle or trip is managed through that relationship.
• Payment, banking and payout providers: to authorise, process, reconcile or investigate transactions.
• Mapping, communications, cloud, analytics, identity, support and security providers: where they help us operate the Platform.
• Insurance, safety or professional advisers: where reasonably necessary for incident handling, claims, risk management or legal advice.
• Regulators, courts, law-enforcement agencies or other authorities: where disclosure is required or permitted by law.
• Corporate transaction parties: where Alpha1Rides or relevant assets are reorganised, financed, merged, acquired or transferred, subject to appropriate legal safeguards.

We do not sell personal data to advertisers as a data-broker product.

8. Safety, fraud and account integrity

We may combine account, location, device, trip, payment and behavioural signals to detect unsafe conduct, duplicate or fraudulent accounts, payment abuse, GPS manipulation, collusion, suspicious cancellations or attempts to divert Platform-arranged rides off-platform.

Serious incidents may require preserving relevant trip, location, communications or account records for investigation, insurance, legal claims or lawful requests.

9. Automated tools and decisions

We may use automated systems to assist with matching, fraud detection, risk alerts, service quality, pricing inputs, account security or marketplace operations. Where applicable law gives you rights in relation to a decision based solely on automated processing that has legal or similarly significant effects, we will provide an appropriate route to exercise those rights.

10. How long we keep personal data

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including providing services, maintaining financial and trip records, resolving disputes, protecting safety, detecting fraud and meeting legal or regulatory requirements.

Different data types have different retention periods. For example, an active account may require ongoing profile data, while closed-account records may be retained for a further period where needed for tax, accounting, legal, safety, fraud-prevention or limitation-period purposes. Data that is no longer required will be deleted, anonymised or otherwise handled in accordance with applicable law and our retention processes.

11. Your data protection rights

Subject to the Nigeria Data Protection Act, 2023 and applicable exceptions, you may have rights to:

• receive information about how your personal data is processed;
• request access to personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion where the legal conditions are met;
• object to certain processing or request restriction in appropriate circumstances;
• withdraw consent where processing is based on consent, without affecting prior lawful processing;
• request data portability where the law applies;
• raise concerns about qualifying solely automated decisions;
• lodge a complaint with the Nigeria Data Protection Commission or another competent authority.

We may need to verify your identity before acting on a rights request. Some rights are subject to lawful exemptions, including where records must be retained for legal obligations, fraud prevention, safety or legal claims.

Account deletion: If you want your Alpha1Rides account and associated personal data deleted, use our Account & Data Deletion Request page. We will verify the request before deletion and will explain if any limited records must be retained under applicable law or for legitimate safety, fraud-prevention, dispute or financial-record purposes.

12. International data processing and transfers

Some cloud, communications, analytics, payment or technology providers may process data outside Nigeria. Where personal data is transferred internationally, we will use a transfer mechanism or other safeguard recognised by applicable Nigerian data-protection law and take reasonable steps to require appropriate protection.

13. Security

We use administrative, technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. Measures may include access controls, encryption in transit, authentication, monitoring, backups, logging and vendor-security requirements where appropriate.

No digital system can be guaranteed completely secure. Users should protect their devices, account credentials and verification codes and should report suspected compromise promptly.

14. Children and minors

Alpha1Rides is not intended to allow children to create independent ride-hailing or Driver accounts where they lack legal capacity to do so. A minor may travel only where permitted by law, our product rules and any applicable guardian or account-holder arrangements.

If we learn that personal data of a child has been collected in circumstances requiring parental or guardian authorisation that was not obtained, we will take appropriate steps consistent with applicable law.

15. Cookies, analytics and similar technologies

Our websites may use essential cookies or similar technologies for security, session management and core functionality, and may use analytics or performance technologies to understand traffic and improve the site. Where consent is legally required for a non-essential technology, we will provide an appropriate choice mechanism before using it.

You may also be able to control cookies through your browser. Blocking essential technologies can affect site functionality.

16. Marketing and communications

We may send operational messages needed for an account or requested service. Marketing, relaunch or promotional messages will be handled in accordance with applicable law and the preferences available to you. Where required, marketing messages will include a practical way to opt out.

17. Third-party links and services

Alpha1Rides may link to third-party websites, applications or partner services. Their privacy practices are governed by their own notices. We encourage users to review those notices before providing personal data directly to a third party.

18. Changes to this Policy

We may update this Policy as Alpha1Rides adds features, changes providers or responds to legal and operational developments. Material changes will be communicated through the Platform or another appropriate channel where required. The current effective date appears at the top of this page.

19. Contact and privacy requests

For privacy questions, data-rights requests or concerns about how Alpha1Rides handles personal data, contact support@alpha1rides.ng. To request deletion of an Alpha1Rides account and associated data, use the Account & Data Deletion Request page.

You may also have the right to complain to the Nigeria Data Protection Commission under applicable data-protection law.

Please do not email highly sensitive identification documents unless our support process specifically requests them through an appropriate channel.