Data safety

This page summarises how the RYDZ rider app and RYDZ Captain app, operated by RYDZ Technologies Limited, handle personal data. The Privacy Policy is the full and binding text; if anything here differs, the Privacy Policy applies.

• Privacy Policy
• Cookie and Tracking Technologies Policy

• You can sign in with an email address and password, with Google, or with Apple.
• Sign-in is handled by RYDZ's sign-in provider, Supabase Auth. Passwords are not visible to RYDZ staff.
• If you sign in with Google or Apple, RYDZ receives your name, email address and account identifier from that provider.

• Account and profile: name, phone number, email address, date of birth, profile photo and preferences.
• Location: the rider app uses your location to set pickup, show nearby captains and track your trip, and records it with app-usage events (such as opening the app or searching) when permission is granted. The Captain app uses location while the captain is online or on a trip, including in the background where the device allows it.
• Rides and tickets: pickup and drop-off, fares and offers, in-app chat between rider and captain, ratings, ticket bookings and ticket codes.
• Payments: RYDZ Wallet history, transaction references and the mobile-money number used. RYDZ never asks for your mobile-money PIN, and cards are not accepted.
• Captains: driving licence, insurance, certificate of fitness and vehicle photos uploaded for verification.
• Safety: emergency contacts you choose to save in the rider app.
• Device and usage: a device identifier created by the rider app, device and app version, notification token, and app-usage measurement through Google Firebase Analytics in the rider app.

RYDZ uses this data to provide rides and tickets, match riders with captains, take payments and refunds, keep people safe, prevent fraud, give support and improve the apps. RYDZ does not sell personal data.

• The matched captain sees the rider details needed for the trip; a bus or minibus Operator receives what it needs for a ticket.
• Service providers process data for RYDZ: Supabase (database, sign-in and file storage, outside Malawi), Google (push notifications, maps and rider-app analytics), Google and Apple (optional sign-in), PayChangu and Airtel Money (mobile-money payments).
• Authorities, insurers or emergency services only where the law requires it or to protect someone's vital interests.

• Data travels between the apps and RYDZ over encrypted (HTTPS) connections.
• Access to RYDZ's database is limited by role-based rules, so each person reaches only the records their role needs.
• Captain documents are kept in private storage that is not publicly accessible.

• Location, camera, photos and notifications can be switched off in your phone's settings; some features, such as live trip tracking, then stop working.
• In the app's notification settings you can choose which notifications you receive, including switching off offers and promotions.
• On rydzmw.com, Microsoft Clarity analytics runs only if you accept analytics cookies, and you can change that choice at any time.
• You can ask for a copy of your data, or for it to be corrected or deleted, by emailing support with the subject “Privacy Request”. The apps do not have a self-service data export.

Riders can delete their account in the app, with 30 days to change their mind; captains ask by email for now. What is deleted and what is kept is explained on the account deletion page.

• Delete your RYDZ account
• Data Rights, Retention and Account Deletion Policy

For data questions or requests, contact RYDZ support:

• Emailsupport@rydzmw.com
• Phone+265 222 247 247
• WhatsApp+265 222 247 247 (opens in a new tab)