Privacy Policy
This policy explains what personal data the CampusRide rider app, the CampusRide Driver app and this website collect, why, who receives it, where it is stored, how long it is kept and the rights you have under Ghana's Data Protection Act, 2012 (Act 843).
1. Who we are
CampusRide is operated by [OPERATOR'S FULL LEGAL NAME], an individual, of [OPERATOR'S POSTAL ADDRESS], Ghana ("CampusRide", "we", "us"). CampusRide is not yet a registered company. [OPERATOR'S FULL LEGAL NAME] is the data controller for the personal data described here.
Contact for anything about your data: support@campusride.app or [SUPPORT PHONE NUMBER].
2. The short version
- You sign in with your phone number and a texted code. We also ask for your name.
- Drivers add their car details, number plate and a photo.
- Riders' pickup and drop-off points are stored with each trip.
- While a driver is online, the Driver app uses their location, even when the app is closed or not in use, to match them with nearby requests and show riders on their trip where the car is. It stops when they go offline.
- The other person on your trip sees your name and phone number so you can find and call each other.
- We don't sell your data, show ads or use advertising or analytics trackers. Payments are in cash: we collect no card or mobile money details.
- You can delete your account in the app at any time.
3. What we collect
Your account (riders and drivers)
- Phone number (required): your login, and how the other person on a trip calls you.
- Name (required): shown to the other person on your trip and in trip notifications.
- Emergency contact (riders, optional): a name and phone number you choose to receive an alert if you press SOS. Please only add someone who agrees to it.
We do not ask for your email address, date of birth, ID documents, gender or home address.
Driver profile (drivers only)
- Car make, model and colour, and number plate (required to be approved).
- A profile photo, taken with your camera or chosen from your photos (required to be approved). It is uploaded to our photo host, Cloudinary.
- Whether you're approved and online, and which campus zone you're in.
Trips
- Pickup and drop-off points (exact map points and place names), an optional note for the driver, shared or private, number of seats, times, fare and payment method (cash).
- If you cancel: the reason you choose and any note you type.
- Ratings (1 to 5 stars) and optional comments, from riders about drivers and drivers about riders.
- For drivers: requests you declined or let time out, and the commission you owe on cash trips.
Safety (SOS)
If a rider presses SOS during a trip, we text their emergency contact (if saved) and CampusRide's support line. The text contains the rider's name, pickup and drop-off areas, the trip status, the driver's name and number plate, and a private tracking link. The link opens a page showing the rider's name, a button to call the rider, their pickup and drop-off places, the trip status and the driver's name, car and plate. It never shows the driver's phone number, exact map coordinates or other passengers. The link stops working 24 hours after the trip ends.
Sign-in and your phone
- Sign-in codes: we store only a scrambled (hashed) copy, with your phone number and the time. A code works for 5 minutes.
- Sign-in sessions: stored as hashed tokens, valid up to 30 days.
- A push notification token for your phone, and whether it's Android or iPhone, if you allow notifications.
Diagnostics
- Crash and error reports (through Sentry): the error, app version, phone model and operating system. We remove phone numbers, codes and tokens before reports are sent, and never send screenshots.
- Server logs: the address (IP) a request came from, the page requested and any error. Phone numbers in logs are masked.
4. Location, including drivers' background location
Riders
The rider app asks for location only while you're using it. It uses your position on your phone to suggest the nearest pickup point. Your position is not tracked and is not sent to us on its own. The pickup and drop-off points you book are sent to us and stored with the trip. The rider app never uses location in the background.
Drivers
The CampusRide Driver app collects location data to share your position with riders and match you with nearby ride requests while you are online, even when the app is closed or not in use. Before asking for permission, the app explains this on a full screen.
- While you're online: your phone works out which campus zone you're in and sends us only the zone, so requests near you reach you. We store your current zone, not your position.
- During a trip (from accepting a rider until the trip ends): your position is sent to us every few seconds and passed straight on to the riders on that trip, so they can see the car coming. We use it to tell riders you're nearly there. We don't store these positions.
- It stops when you go offline, sign out or close the app. On Android a notification ("You're online") shows the whole time; on iPhone the location indicator shows.
- If you allow location only "while using the app", you can still drive, but riders won't see you move while the app is in the background.
Maps and routes (both apps)
Maps are shown by Google Maps (Android) or Apple Maps (iPhone), which load map images to your phone under their own privacy policies. To draw road routes, our server sends trip points, rounded to about 11 metres and without any name or account, to the OSRM routing service (FOSSGIS e.V., Germany).
5. Why we use it
Act 843 allows us to process personal data only for a lawful reason. Ours are:
| Purpose | Data | Lawful reason |
|---|---|---|
| Creating your account and signing you in | Phone number, name, sign-in codes and sessions | Needed to provide the service you asked for (contract) |
| Booking, matching and completing trips; letting rider and driver find and call each other | Name, phone, trip points, driver location, car details, photo | Contract |
| Drivers' location in the background | Driver location | Your consent (the location permission), which you can withdraw in your phone's settings |
| Approving drivers | Driver profile and photo | Contract; our legitimate interest in rider safety |
| SOS alerts | Rider's and driver's details, emergency contact | Protecting the vital interests of the rider; consent (you add the contact) |
| Trip notifications | Push token, names, place names | Contract; consent (notification permission) |
| Ratings, safety reports and disputes | Trips, ratings, kept details after deletion | Legitimate interest in a safe, fair service |
| Drivers' commission and our accounts | Trip fares, commission records | Legal obligation (record keeping); contract |
| Fixing crashes, preventing abuse and keeping the service secure | Crash reports, logs, IP addresses, rate-limit counters | Legitimate interest |
| Responding to lawful requests from authorities | What the request covers | Legal obligation |
We do not use your data for advertising and we do not make automated decisions that have legal effects on you.
6. Who receives it
- The other person on your trip. Riders see their driver's name, phone number, photo, car, number plate and live position during the trip. Drivers see each rider's name, phone number, pickup and drop-off points, pickup note and average rating. Riders sharing a car do not see each other's phone numbers or exact points.
- A rider's emergency contact and our support line, if the rider presses SOS (see section 3).
- Service providers who process data for us, only for what they do for CampusRide:
- Moolre (Ghana): sends text messages (sign-in codes and SOS alerts), so receives phone numbers and the message.
- Expo (650 Industries, Inc., USA): relays push notifications and delivers app updates, so receives your push token and the notification text (which may include a first name or a pickup place).
- Google (Firebase Cloud Messaging) and Apple (Push Notification service): deliver notifications to Android phones and iPhones.
- Render: hosts our server (Frankfurt, Germany), so everything passes through it; it keeps our server logs.
- Neon: hosts our database (Frankfurt, Germany).
- Cloudinary: stores drivers' profile photos.
- Sentry (Functional Software, Inc.): receives crash and error reports, stored in Frankfurt, Germany.
- FOSSGIS e.V. (OSRM): calculates road routes from rounded points without any identity.
- Authorities, such as the Ghana Police Service, when the law requires it or when it's needed to protect someone's life or safety.
- A future company or buyer. If CampusRide becomes a company or is transferred, your data would move with it under this policy, and we would tell you first.
We do not sell personal data, share it with advertisers or let others use it for their own marketing.
Payments. All trips are paid in cash. We don't use a payment provider and don't collect card or mobile money details. If we add mobile money payments, we will update this policy first.
7. Where it is stored
Our database and server are in the European Union (Frankfurt, Germany), and crash reports are stored there too. Some providers listed above are in the United States or operate worldwide (Expo, Google, Apple, Cloudinary), and text messages go through Moolre in Ghana. Where data leaves Ghana, we use providers that protect it with security measures at least as strong as those Act 843 requires, and we send them only what their job needs.
8. How long we keep it
| Data | How long |
|---|---|
| Account: name, phone number, driver profile | While your account is open. When you delete it, removed from the service at once; see below for what's kept. |
| Name, phone number, and a driver's plate and photo, after you delete your account | Kept separately for 90 days, only for safety reports or police requests about a trip, then erased |
| Exact pickup and drop-off points, pickup notes, cancel notes and rating comments you wrote | While your account is open, then erased 90 days after you delete it |
| Trip records (time, area, fare, stars) and drivers' commission records | Kept as our business records, without your name once the 90 days are over |
| Emergency contact | Until you change or remove it, or delete your account |
| Drivers' live position during a trip | Not stored: passed on to riders and discarded |
| SOS tracking links | Stop working 24 hours after the trip ends; deleted with your account |
| Sign-in codes | Work for 5 minutes. The hashed record is deleted when your account is deleted |
| Push notification tokens | Until you sign out, delete your account or uninstall the app |
| Server logs and crash reports | A limited period set by our providers (typically days to a few weeks) |
| Records that an account was deleted | Kept, without a name, to show the request was completed |
9. How we protect it
- All connections between the apps and our server are encrypted (HTTPS).
- Sign-in codes and session tokens are stored only as hashes.
- Only the people on a trip can see that trip's exact points and contact details. Admin access is limited to named phone numbers and every admin action is logged.
- Crash reports and logs are scrubbed of phone numbers, codes and tokens.
No system is perfectly secure. If a breach affects your data, we will tell you and the Data Protection Commission as the law requires.
10. Your rights
Under the Data Protection Act, 2012 (Act 843) you can:
- Ask what data we hold about you and get a copy.
- Correct data that is wrong. Riders can change their name and emergency contact in the app; for anything else, including drivers' details, contact us.
- Delete your account and data: see Delete your account.
- Object to our use of your data, or withdraw consent. For example, turn off location or notifications in your phone's settings at any time (some features then stop working).
- Complain to the Data Protection Commission of Ghana (dataprotection.org.gh) if you think we've handled your data wrongly. We'd appreciate the chance to fix it first.
To use any of these rights, email support@campusride.app from anywhere, with the phone number on your account. We may text you a code to confirm it's you, and we reply within 30 days.
11. Age limit
CampusRide is only for people aged 18 or over, riders and drivers alike. We don't knowingly collect data from anyone younger. If you believe someone under 18 has an account, tell us and we'll delete it.
12. Phone permissions
| Permission | App | Used for |
|---|---|---|
| Location while using the app | Rider, Driver | Nearest pickup point (rider); going online and trips (driver) |
| Location all the time (background) | Driver only | Sharing your position with riders and getting nearby requests while online, when the app is in the background |
| Camera and photos | Driver only | Your profile photo |
| Notifications | Rider, Driver | Trip updates and ride requests |
Neither app uses your microphone, contacts or files.
13. This website
campusride.app sets no cookies, uses no analytics and has no forms. Our web host may keep standard technical logs (such as IP addresses) for security.
14. Changes to this policy
If we change this policy we'll update the date at the top. For important changes, such as collecting a new kind of data, we'll tell you in the app before they take effect.
15. Contact
[OPERATOR'S FULL LEGAL NAME], operator of CampusRide
[OPERATOR'S POSTAL ADDRESS], Ghana
Email: support@campusride.app
Phone: [SUPPORT PHONE NUMBER]