Privacy Policy

Effective 16 October 2026 · Version 1.1

1. Who we are

JIRO LTD is a private company limited by shares, registered in Nigeria with the Corporate Affairs Commission (RC 9909569), and is the data controller for the Services. Our website is jiro.ng. You can reach us about privacy at the contact details in section 16.

2. Data we collect

2.1 Everyone who uses Jiro

• Account data: your mobile phone number (your Jiro account), name, and — if you give it — email address and profile photo.
• Sign-in data: one-time codes are sent to you by WhatsApp, SMS or email. We keep a record that a code was sent, by which channel and whether it was delivered — never the code itself.
• Device and app data: app version, device model and operating system, a device label for your sign-in session, and technical logs (for example errors and request times) that keep the Services working and secure.
• Support data: messages, photos and documents you send us through Support, and our replies; requests to delete your account.

2.2 Riders

• Pickup and drop-off points, searches you make for places, saved places (such as Home and Work), notes you add about a place.
• Trip details: the fare you offered or accepted, ride options (for example air-conditioning or a child seat), the driver who took the trip, the route taken, times, ratings and comments, and cancellation reasons.
• Courier deliveries: the sender's or recipient's name and phone number and a short description of the package, which you provide.
• Shuttle bookings: the departure, seats booked and your boarding pass.
• Safety: emergency contacts you add (up to three names and phone numbers), and any SOS alert you raise.

2.3 Drivers

• Application and identity: name, date of birth, address, National Identification Number (NIN), driver's licence details, a live selfie, and photos of the documents we ask for (for example licence, vehicle papers, insurance and roadworthiness).
• Vehicle: make, model, year, colour, plate number and features; whether you take rides, deliveries or both.
• Inspection records: the results of your in-person driver and vehicle inspection at a Jiro Experience Centre.
• Location while online: see section 6.
• Work and earnings: trips, bids, acceptance, ratings, wallet top-ups, commission and other wallet entries.

2.4 Carrier staff (Jiro Carrier)

• For carrier drivers: name, phone, NIN, driver's licence details and photos, and a live selfie used to confirm identity; the runs you are assigned and the boarding passes you scan.
• For carrier owners and dispatchers: name, phone, role, and the timetables, vehicles and staff you manage.

3. How we use personal data

• To provide the Services: sign you in; match riders with nearby drivers; show fares, routes and live trip progress; complete deliveries and shuttle bookings; issue receipts.
• To keep people safe: verify drivers and carrier drivers before they can work; the trip PIN; SOS alerts to your emergency contacts and our operations team; the “follow my trip” link you choose to share; investigating reports and incidents.
• To handle money: record fares, commission, wallet top-ups, prepaid bookings and refunds in our ledger, and prevent fraud.
• To support you: answer support requests and account-deletion requests.
• To improve maps and the Services: learn places and roads that are missing from maps (for example from completed trips and places drivers guide us to), measure search quality, and fix problems. Where we share map improvements publicly (for example with OpenStreetMap), we share road and place information only — never who travelled.
• To communicate with you: trip updates and reminders; service messages. Promotional messages are sent only if you turn them on, and you can turn them off at any time.
• To meet legal obligations and respond to lawful requests from authorities.

We do not sell your personal data.

4. Legal bases

Under the NDPA we rely on: contract (to provide the Services you ask for); legal obligation (for example tax, accounting and lawful requests); legitimate interests (safety, fraud prevention, improving the Services — balanced against your rights); and consent (for example optional notifications, promotional messages, and location access on your phone, which you can withdraw in your phone's settings). Identity checks of drivers rely on our legal and safety obligations and on the driver's consent given in the application.

5. Who we share personal data with

5.1 Between riders and drivers

To make a trip happen, a rider sees the driver's first name, photo, rating, vehicle and live location; a driver sees the rider's name, photo, pickup, destination and requested ride options. Phone calls and chat inside the app are tied to the trip. The trip PIN is shown only to the rider.

5.2 Service providers who work for us

These providers may use the data only to provide their service to us and must protect it.

5.3 Others

• Your emergency contacts, when you raise an SOS.
• Anyone you share a “follow my trip” link with — they can see that trip's live progress until it ends.
• Shuttle carriers see the bookings and boarding passes for their own departures.
• Authorities, when the law requires it or to protect someone's life or safety.
• A buyer or successor of our business, under the same protections, if Jiro is reorganised or sold.

6. Location data

• Riders: the app uses your location to set your pickup and show nearby cars, only when you allow it. During a trip we record the route the car takes (a simplified line) for your receipt, safety and dispute handling.
• Drivers: while you are online, the Jiro Driver app reports your location — including in the background and with the screen off — so that riders can be matched with you and can see you arrive. When you go offline, location reporting stops. Live positions are kept only briefly for matching; trip routes are kept with the trip.
• You can switch off location access in your phone settings at any time, but the Services cannot match or track trips without it.

7. Identity checks for drivers and carrier drivers

Before anyone can drive with Jiro, we check who they are. We send the driver's NIN and live selfie to our identity provider, which compares the selfie with the photo held by the national identity database and tells us whether they match. We keep the result, the selfie and the documents the driver uploaded. We also inspect the driver and vehicle in person. These checks exist to protect riders; a driver may ask us about any decision made from them (see section 12).

8. Codes, messages and calls

• Sign-in codes go by WhatsApp when available and otherwise by SMS or email. If a WhatsApp message cannot be delivered, we send the same code by SMS.
• In-app chat between a rider and a driver is stored with the trip so either side can refer to it and so we can look into reports.
• Calls between a rider and a driver are connected through the app or your phone network. We do not record the audio of calls.

9. Payments

Riders usually pay drivers directly. Card and bank payments (wallet top-ups, prepaid scheduled rides and shuttle seats) are handled by Flutterwave or Paystack on their own secure pages; we receive the result and a reference, not your card details. We keep an accounting record of every payment, commission and refund, which by law cannot be edited or deleted.

10. How long we keep data

• Account data: while your account is open, and then as below.
• Trips, receipts, payments and ledger records: at least 6 years, for tax, accounting and dispute purposes.
• Driver identity and inspection records: while the driver works with Jiro and for up to 6 years after, for safety and legal claims.
• Safety reports and SOS records: as long as needed to handle the incident and any legal claim.
• Sign-in codes: a code expires within minutes; delivery records are kept for up to 12 months.
• Technical logs: generally no longer than 12 months.

When data is no longer needed we delete it or make it anonymous.

11. Security

We protect personal data with measures that include encrypted connections (HTTPS), encryption of sensitive fields such as NIN and payment settings, signed app builds, per-person staff accounts with limited roles and an audit trail, and an append-only financial ledger. No system is perfectly secure; if a breach affects your personal data in a way that is likely to harm you, we will tell you and the NDPC as the law requires.

12. Your rights

Under the NDPA you have the right to: be informed; access your personal data; have it corrected; have it deleted; restrict or object to certain processing; data portability; withdraw consent at any time; and not be subject to a decision based solely on automated processing that significantly affects you without the ability to ask for human review.

You can ask to delete your account from Account → Support in the app, or contact us (section 16). We will respond within the time the law allows (normally 30 days). We may keep some data after deletion where the law requires it (for example payment records). If you are not satisfied with our answer you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

13. International transfers

Some of our providers (for example Meta, Google and Zoho) may process data outside Nigeria. When that happens we rely on the safeguards the NDPA allows, such as the provider's contractual commitments, and share only what the service needs.

14. Children

You must be 18 or older to create a Jiro account. Drivers must meet the legal driving age and our driver requirements. A child may travel with an adult rider who is responsible for them. We do not knowingly collect personal data directly from children; if you believe we have, contact us and we will delete it.

15. Changes to this policy

We may update this policy as the Services change. We will post the new version here with a new effective date and, if the changes are significant, tell you in the app or by message before they take effect.

16. Contact us