1. Who we are (data controller)
Under the NDPA, the data controller for the Service is ROND by Miles Limited (RC 9470479, TIN 2622400080163), a company registered in Nigeria. You can reach our data protection team at privacy@getrond.com.
If you are not satisfied with our response to a privacy question or complaint, you have the right to complain to the Nigeria Data Protection Commission (NDPC) at the contact details published on their official website.
2. What information we collect
Account information. Phone number, full name, email address, date of birth, residential address and — for drivers only — National Identification Number (NIN), bank account details, work experience, and guarantor information. Clients provide a business name, business type, and industry.
Verification documents. Driver's licence (front and back), international passport, NIN slip, proof of address, your guarantor's photograph and ID, and other supporting documents that you upload as part of onboarding. Clients also take a selfie with the front camera. Drivers add a profile photograph; clients may add one (see "Face data" below).
Booking and activity data. Bookings you create, accept, decline, or complete, plus ratings, feedback, and any messages or timestamps related to those bookings.
Subscription and payment data. Membership status, transaction references, and payment method summaries returned by Apple (purchases on iPhone) or Payaza (purchases on Android and the web). We do not store your full card number or CVV.
Technical data. Device model, operating system version, app version, crash logs, and in-app events that we use to diagnose problems and improve the Service.
We do not collect your device's location.
3. Face data: selfies, photographs and Face ID
What we collect. These photographs are the only face data we collect: the selfie a client takes with the front camera during identity verification (each one, if they retake it); the photograph on identity documents (driver's licence, passport, NIN slip); a photograph of a driver's guarantor; a driver's profile photograph; and a profile photograph a client chooses to add. In the app, we collect each of these photographs only after you agree on the "Before you continue" screen, which explains what is collected and why. A document that ROND staff add to your account from our office is kept and protected the same way. We do not create face geometry, face templates or any other biometric identifier from these images, and we do not run automated facial recognition on them.
How we use it. A member of the ROND verification team compares a client's selfie with the photograph on their identity document, to confirm that the document belongs to them; a person makes that decision. Staff use identity document and guarantor photographs the same way, to confirm who a driver and their guarantor are. A driver's profile photograph is shown to clients browsing the registry, so they can recognise the driver they book. A client's profile photograph, if they add one, is shown to the drivers they book. The selfie is never used as a profile photograph. We never use face data to sign you in, for advertising or marketing, to build a profile of you, or to train artificial intelligence.
Where it is stored and who can see it. Selfies, identity documents and guarantor photographs are kept in a private file store run by Supabase in the European Union (Ireland), encrypted at rest, and sent only over encrypted (TLS) connections. They can be opened only by the account holder and by authorised ROND staff, through short-lived links, and are never shown to drivers or other clients. Profile photographs are kept in a separate store and shown only as described above.
Sharing. We do not sell face data or share it with any third party, including advertising platforms, analytics providers and data brokers. Supabase stores the files on our behalf under contract and cannot use them for its own purposes. We disclose them to law enforcement or a regulator only when compelled by a valid Nigerian court order or regulatory demand.
How long we keep it. We keep selfies, identity documents and guarantor photographs while your account is open, because they are the record of your verification. If you delete your account, they are kept for five years after the account closes, as Nigerian anti-money-laundering rules require for identity verification records, and then deleted or irreversibly anonymised. Profile photographs are deleted 30 days after the account is deleted.
Face ID and fingerprint unlock. If you turn on Face ID (iPhone) or biometric unlock (Android) to open the app, the check is done entirely by your phone. The app receives only a pass or fail result from the operating system. It never receives, stores or sends an image of your face or any data about your face or fingerprint.
4. How we use your information
To verify your identity and maintain a trusted driver roster. For drivers, this includes verifying your NIN and identity documents, reviewing documents, contacting guarantors, and calculating a trust score. For clients, our verification team checks your identity document and compares your selfie with it. Verification is the foundation of what we offer — without the data listed above we cannot place a driver on the platform or accept a booking from a client.
To connect drivers with clients. Clients browsing drivers see only the information necessary for their decision: first name, photograph, trust score, availability, general experience, and approximate location. They never see NIN, bank account, surname, phone number, or email.
To operate the Service. Hosting your content, delivering booking notifications, processing subscription payments, sending transactional messages (OTP codes, booking updates, receipts), and diagnosing problems.
To keep the Service secure. Detecting fraud, abuse, or account takeover, enforcing our Terms, and maintaining an append-only audit log of admin actions.
To comply with Nigerian legal and regulatory obligations. Anti-money-laundering checks, know-your-customer records, tax reporting, and responding to lawful requests from regulators or courts.
With your explicit consent, to send occasional product updates by email or push notification. You can opt out at any time from the Notifications screen in Settings.
5. How we decide the lawful basis
We process most personal data under the "contract" basis in the NDPA — you need us to process it to receive the Service you signed up for. Identity verification (NIN, bank data) is processed under both "contract" and "legal obligation" because Nigerian law requires us to verify who we are doing business with.
Product improvement analytics and optional marketing messages are processed under "consent" — you can withdraw consent at any time without losing access to the core Service.
Keeping a driver we have barred for safety reasons from registering again is processed under "legitimate interests": protecting clients, their households and their property. We assessed that this interest is not overridden by the barred person's rights because we keep only a coded fingerprint, for a limited time, and a member of staff reviews every match (see "How long we keep your information").
6. Bank details and identity verification
Your bank account details are collected only to verify your identity and enable driver payouts. We store them in encrypted form using database-level field encryption (Postgres pgcrypto). We never display them to clients or other drivers, and we never store them in plaintext anywhere.
We do not collect your Bank Verification Number (BVN). If you withdraw consent for identity processing, we must also end your driver account, because we cannot keep a driver on the platform without a verified identity.
7. Who we share information with
Clients. When you are a driver, clients who can see your profile receive only the public-facing fields described above. Sensitive identifiers are never shared.
ROND administrators. Authorised ROND staff can access full profile details for verification, vetting, support, and dispute resolution. Every administrative access to sensitive fields is logged in an append-only audit trail.
Service providers. We use a small number of vendors who process data on our behalf under contract — they cannot use your data for their own purposes. They are:
• Supabase (database, authentication, file storage — hosted in the European Union, Ireland);
• Apple (In-App Purchase, for memberships bought on iPhone);
• Payaza Africa (membership payments on Android and the web);
• Termii (SMS delivery for one-time passwords and transactional messages);
• Sentry (crash and error monitoring);
• PostHog (product analytics and feature flag evaluation, PostHog Cloud hosted in the European Union — we have disabled automatic event capture and session recording);
• Expo / Apple Push Notification Service / Firebase Cloud Messaging (mobile push notification delivery).
Law enforcement or regulators, only when compelled by a valid Nigerian court order or regulatory demand, or where we reasonably believe disclosure is necessary to prevent imminent harm.
We do not sell your personal information to anyone for any purpose.
8. Automated decisions and the trust score
We calculate a trust score for each driver, based on verified documents, guarantor strength, time on the platform, and booking history. The score influences visibility to clients and ranking in search. It does not produce final decisions on its own — a human administrator reviews any outcome that materially affects your ability to earn on the platform (for example, suspension or blacklisting).
One step is automatic: if a new account's verified phone number or NIN matches a driver our staff have barred, the account is put on hold at once — hidden from clients and unable to take bookings — until a member of staff reviews it and either confirms the bar or lifts the hold.
Under the NDPA you have the right to object to automated decision-making and to request human review of any score or ranking decision that affects you. Write to us at the privacy email above and we will respond within 30 days.
9. How long we keep your information
Active accounts. We keep your profile and activity data for as long as your account is active.
Deleted accounts. When you delete your account, it closes at once and you can restore it by signing in within 30 days. Once 30 days have passed, most personal data is removed. Limited records are retained longer where the law requires, specifically: identity verification records (NIN, identity documents, client selfies, guarantor documents) are retained for five years after account closure to meet CBN anti-money-laundering obligations; transaction records are retained for seven years to meet tax and accounting rules; audit logs are retained for two years for security investigations.
Barred drivers. If our staff bar a driver from ROND for safety reasons, we keep a coded fingerprint of the login phone number they used at the time and of their NIN, not the numbers themselves, for up to five years, even if they delete their account. We use it only to stop the same person registering again: a new account whose verified phone number or NIN matches is put on hold until our staff review it. An account put on hold this way is not added to the list unless our staff confirm the match.
After the retention period ends, data is permanently deleted or irreversibly anonymised.
10. How we protect your information
Sensitive identifiers (NIN, bank account number) are encrypted inside the database with AES-256 field encryption (Postgres pgcrypto); the key is held by the database and never sent to the apps. Uploaded files, including selfies and document photos, are kept in a private, encrypted file store. All traffic between the app and our servers uses TLS.
Row-level security policies in the database restrict which rows an account can read or write, and column-level policies prevent the client apps from reading sensitive fields at all — administrators must call a dedicated, logged function to view them. Anomalous access patterns are alerted to the engineering team.
No system is perfectly secure. If we detect a breach affecting your personal data, we will notify you and the NDPC within the timeframes required by the NDPA.
11. Your rights under the NDPA
You have the right to:
• access the personal data we hold about you;
• correct inaccurate data (most fields are editable in the app; write to us for anything else);
• request deletion of your account and associated data, subject to the legal retention exceptions above;
• receive a portable copy of the data you provided, in a structured machine-readable format;
• object to processing, including to automated decisions;
• withdraw consent for anything processed on that basis.
To exercise any of these rights, write to privacy@getrond.com. We respond within 30 days. If you are not satisfied with our response, you can complain to the Nigeria Data Protection Commission.
12. How to delete your account
You can delete your account from inside either app: open the Account tab and tap Delete account at the bottom of the screen. Confirmation is required. The account closes at once, and signing in within 30 days lets you restore it. Once 30 days have passed, most personal data is removed; limited records are retained as explained in the retention section above.
A driver membership does not renew automatically, so there is nothing to cancel before you delete your account.
13. International data transfers
Some of our service providers operate outside Nigeria — in particular, Supabase and PostHog host infrastructure in the European Union. Where data is transferred abroad, we rely on contractual safeguards (data processing agreements) and providers that meet international security standards.
14. Children
The Service is not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will remove it.
15. Tracking and advertising
We do not track you across apps or websites owned by other companies, and we do not sell advertising inside the app. Our product analytics (PostHog Cloud, hosted in the European Union) are used only by ROND, with automatic capture and session recording turned off, and never for advertising.
16. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be notified in-app at least 14 days before they take effect. If we need your consent for a new use, we will ask for it.
17. Contact
For privacy questions, write to privacy@getrond.com. You can also reach our general legal team at legal@getrond.com or the support team at support@getrond.com.