Privacy Policy

01. Information We Collect

We only collect data necessary to provide seamless, secure ride dispatch across Kigali:

• Account Identifiers: Your full legal name, telephone number (for SMS/MoMo ride verification), email address, username, date of birth, and nationality.
• Precise Geolocation: Real-time GPS coordinates collected from your device when you request, track, or complete a trip. Drivers submit location telemetry while on active duty.
• Transaction & Telemetry: Fare amounts, trip origin and destination points, MTN Mobile Money / Airtel Money reference identifiers (we never store PINs or CVV credentials).
• Driver Credentials: National ID (Indangamuntu), RURA commercial driver permit, driving license class A/B, motorcycle registration logbook (Carte Jaune), and police clearance certificates.

02. How We Use Your Data

Your data enables rapid matching, passenger safety, and fair pricing:

• Pairing passengers with the nearest available licensed driver in Nyarugenge, Gasabo, or Kicukiro.
• Calculating transparent, upfront fare estimates based on exact route distance without arbitrary surge markups.
• Enabling in-app cashless settlement via MTN MoMo and instant driver wallet payouts.
• Resolving safety incidents, lost item reports, or dispatch disputes via our 24/7 hotline.
• Preventing fraudulent bookings and unauthorized driver profile sharing.

03. Information Sharing & Third Parties

We do not sell, rent, or monetize your personal data. Disclosures are strictly operational:

• With Assigned Drivers: When you request a ride, your first name, pickup location, and destination are shared with the assigned driver. Telephone numbers are masked where available.
• With Mobile Telecoms: Payment references are communicated to MTN Rwanda and Airtel Rwanda to confirm Mobile Money transfer settlements.
• With Regulatory Authorities: In accordance with Rwandan Law, trip logs and driver identities may be provided to the Rwanda National Police (RNP) or RURA during emergency road safety investigations.

04. Data Retention & Security Measures

We employ multi-tiered technical safeguards to protect your records:

• Encryption: All transit data is protected with TLS 1.3 encryption. Stored databases utilize AES-256 at-rest encryption.
• Access Controls: Only authorized operations personnel with role-based permissions can view identifiable account data.
• Retention Timelines: Account data is retained during the active lifecycle of your account. Inactive trip telemetry is anonymized after 24 months for aggregate municipal transport analysis.

05. Your Rights under Law No. 058/2021

As a data subject in Rwanda, you possess fundamental privacy rights:

• Right to Access: You may request a copy of your personal data held in our systems.
• Right to Rectification: You can update inaccurate telephone numbers, names, or addresses directly in your profile.
• Right to Erasure (Forgetfulness): You may request full deletion of your account, provided there are no unsettled ride disputes or statutory retention mandates.
• Right to Object: You can withdraw consent for promotional notifications at any time.

06. Rwandan Regulatory Compliance

UMC Rides operates under the regulatory supervision of the National Cyber Security Authority (NCSA) Data Protection Office and the Rwanda Utilities Regulatory Authority (RURA). Our data collection practices comply with the principles of lawfulness, fairness, purpose limitation, and storage limitation.

07. Contact & Data Protection Officer

For data access requests, deletion demands, or privacy inquiries, contact our dedicated compliance officer: