Privacy Policy

What we collect, why we hold it, who else sees it, and what you can make us do about it.

1. The short version

We collect what a ride actually needs: who you are, how to reach you, where you are going, and how the money moved. We do not sell your data, and we do not use it for advertising.

This policy applies to the Swift rider app, the Swift driver app, and https://swiftpassenger.vercel.app/legal. It is issued by soSwift Rides, operating in Aba, Abia State, Nigeria, which is the data controller for the information described here.

Nigeria’s Data Protection Act 2023 gives you rights over this information. Section 9 says what they are and how to use them.

2. What we collect from everyone

Account details: Your name, email address, phone number, and profile photo if you add one. Your email is how you sign in.
Sign-in data: A password (stored only as a one-way hash — we never see it), one-time codes sent to your email, and whether two-factor sign-in is on.
Trip data: Pickup and destination addresses, distance, the fare agreed, times, trip status, and who the other party was.
Payment data: What you paid or earned, the method, wallet movements and their references. Card details are entered on our payment provider’s page and never reach Swift’s systems.
Messages: In-app chat between rider and driver during a trip.
Ratings and reports: Scores, comments, and anything you tell us when you report a problem.
Device and technical data: Your device and browser type, IP address, and push-notification registration if you turn notifications on.

3. What we collect from riders specifically

Saved places: The addresses you save as Home, Work or a custom shortcut.
Emergency contact: The name, phone number and relationship of the person you nominate, plus next-of-kin details if you add them.
Government ID: A photograph of an ID document and the number printed on it. Optional at signup. We can require it before you book again if a driver reports you.
Location: Only when you allow it. Swift asks for a location permission to place you on the map — pickup and destination addresses are typed, so a refused permission does not stop you booking.

4. What we collect from drivers specifically

Identity documents: Your driver’s licence and a government ID, including the numbers on them.
Vehicle documents: Registration, proof of ownership, roadworthiness certificate and insurance, plus your vehicle’s make, model, colour and plate number.
Biometric data: A live face scan, taken in the app, matched against your ID so we know the person driving is the person on the documents. We ask for your explicit consent before taking it.
Location: Your live position while you are online, so riders near you can find you and so a rider can follow their own trip in progress. We stop collecting it when you go offline.
Bank and payout details: Bank name, account number and account name for withdrawals, and a transaction PIN stored only as a one-way hash.
Earnings history: Every trip, its fare, the commission applied, and every withdrawal.

A driver’s live location is the single most sensitive thing Swift holds. It is collected only while you are online and is not shared with riders who have not booked you.

5. Why we hold it

To run a ride: Matching you with a driver or a rider, showing each of you enough about the other to complete the trip safely, and getting you to the right place.
To move money: Charging the fare you agreed, crediting the driver, processing wallet top-ups, refunds and withdrawals, and keeping the records behind all of it.
To keep people safe: Verifying drivers before they can carry anyone, checking a reported rider’s identity, investigating incidents, and letting you share a live trip.
To support you: Answering questions and settling disputes — which is why a report is kept against a reference you can quote.
To meet legal obligations: Tax, financial records, and lawful requests from authorities.
To improve Swift: Understanding where the app fails, and where people get stuck — which is what the analytics in section 7 is for. You can switch it off without losing anything else.

Under the Data Protection Act 2023, our lawful bases are: performing our contract with you, our legitimate interest in a safe and functioning platform — which is what analytics rests on, and why you can object to it with a single switch — compliance with legal obligations, and, for the driver face scan and for push notifications, your consent.

6. Who else sees it

We do not sell your data. We share it in four situations, and no others.

With the other party to your trip. A driver sees the rider’s name, photo, phone number, pickup and destination. A rider sees the driver’s name, photo, rating, vehicle and plate, and their live position during the trip. Neither sees the other’s email, payment details or documents.

With anyone you share a trip link with. A shared link shows the trip, the driver’s first name and vehicle, and the live position, to whoever holds it, until the trip ends.

With the service providers Swift is built on. Each one only receives what its job needs:

Supabase: Our database and the storage bucket holding uploaded documents and face captures. Hosted in Ireland (EU).
Render: Runs the Swift backend.
Vercel: Serves the apps and this website.
Paystack: Processes card, USSD and bank payments and wallet top-ups. Your card details go to Paystack, not to Swift.
Mapbox: Turns addresses into coordinates, draws the map, and calculates route distances. It receives the addresses and coordinates involved in a trip.
Resend: Delivers our emails, including sign-in codes and receipts.
Amplitude: Product analytics for the rider app only — see section 7. Hosted in the European Union. It receives your Swift user ID, never your name, email or phone number.
Google (Apps Script and Sheets): Receives a mirror of problem reports and driver withdrawal requests so our operations team can work through them.
Push services (Google, Apple, Mozilla): Deliver push notifications to your device if you enable them.
WhatsApp (Meta): If you choose to contact support on WhatsApp, that conversation happens on Meta’s platform under their terms, not ours.

With authorities, where the law requires it, or where we need to establish or defend a legal claim.

Some of these providers are outside Nigeria, which means your information is transferred abroad — principally to the European Union and the United States. We only use providers who commit to protecting it to a comparable standard.

7. Analytics, and how to switch it off

The Swift rider app uses Amplitude to understand how the app is actually used and where it fails. There are no advertising trackers, and nothing here is sold or used to target ads.

The Swift driver app sends nothing to Amplitude at all.

What it collects: Which screens you open, what you tap, how long things take, and your device and browser type — captured automatically as you use the app.
What it is tied to: Your Swift user ID and nothing else. Amplitude never receives your name, email address or phone number, and the ID means nothing outside our own database.
Where it goes: Amplitude’s European Union region.

Analytics is ON unless you turn it off. Account → Privacy & Data → Usage Analytics.

Turning it off stops collection immediately and discards anything not yet sent. The setting is saved to your account rather than your browser, so it follows you to every device you sign in on — and if it is already off when you open the app, the analytics code is never downloaded at all.

We will not quietly widen this. Adding another analytics or advertising service, or starting to send Amplitude anything that identifies you by name, would change this policy and its version, which means being asked to read and agree again.

8. How long we keep it

Your account: For as long as it is open.
Trips and payments: Kept after an account closes. A trip is a shared record and a financial one — deleting it would erase the other party’s history and the trail behind money that moved. Nigerian record-keeping rules also require us to hold financial records.
Driver documents and face captures: For as long as you drive on Swift, and afterwards only for as long as we need them to answer a safety or legal question about a trip you took.
Rider ID documents: Until the matter they were requested for is resolved, and then no longer than we need for safety or legal purposes.
Messages, reports and ratings: Kept with the trip they belong to.
Saved places, notifications and devices: Deleted as soon as you ask.

9. Your rights, and how to use them

Under the Nigeria Data Protection Act 2023 you can ask us to show you the personal data we hold about you, correct anything wrong, delete what we are not required to keep, stop or limit a particular use, hand your data over in a portable form, or withdraw a consent you gave — including the driver face scan and push notifications.

Two of these you can do yourself, right now, from Account → Privacy & Data:

Usage Analytics: Turns analytics off for your account, on every device. Takes effect immediately. See section 7.
Delete My Data: Removes your saved places, notifications, reports and registered devices, clears your emergency contact, and hides your trip list from your app. Your account stays open.
Delete Account: Does all of the above, then removes your name and email, ends every session and stops you signing in. Your past trips and their payment records remain, without you identifiable on your side of them.

For anything else — access, correction, portability, or an objection — email support@swift.com.ng. We answer within 30 days.

If you think we have handled your data badly, tell us first and give us a chance to fix it. You can also complain to the Nigeria Data Protection Commission.

10. How we protect it

Traffic between the apps and our servers is encrypted in transit. Passwords and transaction PINs are stored as one-way hashes and cannot be read back, by us or anyone else. Uploaded documents sit in access-controlled storage, not on a public URL. Sign-in sessions expire and can be ended from any device by signing out.

No system is perfect. If a breach ever affects your personal data we will tell you and the Nigeria Data Protection Commission as the law requires.

11. Children

Swift is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has an account, tell us and we will remove it.

12. Changes to this policy

When this policy changes materially, the version number changes and the app asks you to read and agree to the new one. We keep a record of which version you agreed to and when.

13. Reaching us

Privacy and data questions: support@swift.com.ng

WhatsApp: +234 913 413 4951 (7am – 9pm, every day)

Aba, Abia State, Nigeria