This is a pre-launch version of this policy, used while LehgoRide is being tested. It will be revised before LehgoRide opens to the public, and you will be asked to agree to the new version.
This policy says what LehgoRide collects when you use the rider app or the driver app, why, who can see it, and how long we keep it.
1. What we collect
Everyone with an account:
- your phone number, which is how you sign in. Until calls in the app are switched on, it is also how your driver or rider reaches you during a trip; after that, they call you in the app and never receive your number;
- your password, stored only in a scrambled form we cannot read;
- if you sign in with Google, Facebook or Apple: which one, your account's number there, and the email address it gives us (with Apple, this may be an address Apple makes for you). We never see your password there, and you still confirm your phone number;
- your name, and a record of earlier names if you change it;
- your date of birth, to confirm you are 18 or over;
- your email address, if you give one, for receipts and resetting your password;
- your profile photo, if you add one. A profile photo is shown to the people you ride with, and anyone who has its link can open it, so only add one you are happy to share;
- a notification token, if you allow notifications. Nothing is sent to it while you are signed out, and signing out on a phone deletes that phone's token;
- if you ask to change your phone number, the old and new numbers and the reason you give;
- if you press the emergency button's alert, where you were and which trip you were on;
- if you call your driver or rider in the app, a record of the call: who called whom, on which trip, when, how it ended and how long it lasted. Calls are not recorded, so what is said is not kept.
Riders, additionally: your trips and fares, how you paid, your wallet balance and any unpaid balance, the ratings and comments you leave, the messages you and your driver send each other in the app, and your conversations with support.
If you choose to verify your identity, we also collect a photograph of your ID, the type of ID, and a photograph of your face to compare with it. A member of our team checks them. Your driver only sees that you are verified, never your document or photograph. You can remove your ID from your profile at any time.
Drivers, additionally: your city and emergency contact; your driving licence number, class, issue date, expiry date and photograph; your national ID number, expiry date and photograph; a proof of address; a photograph of yourself; your vehicle's details and photograph, and its registration with the number and expiry date printed on it; the mobile money account you are paid to; and, if you pay the commission you owe in the app, the mobile money number you pay it from and a record of each payment, which is shared with the mobile money provider that charges it. We also keep a record of each trip you were offered and whether you accepted it, and of when you went online and offline, so the app can show you how long you were online. Every time one of our team opens a driver's documents, it is recorded. When one of our team checks one of your documents, we record what they read on it (its number and expiry date), whether they accepted it, who checked it and when; and we record each reminder we send you that a document is about to expire. When our team asks you for a document, we record what they asked, who asked, when, and when you sent a new one.
Collected automatically: your IP address, device type and app version when the app talks to our servers, and the times of the things you do in the app.
2. Your location
- Riders: your location is used while you are using the app, to find you a driver and show you the route. The rider app does not track you in the background. When you search for a place, your rough position (to about a kilometre) is sent with the search so that places in your own county are listed first; it is used for that search and not kept.
- Drivers: your location is shared while you are online, so trips can find you and riders can watch you approach. Going offline stops it. During a trip, if you allow it, your location keeps being shared while you use a maps app or your screen is off, so your rider can see you coming; your phone shows a notification while this happens, and it stops when the trip ends. We keep your current position, not a history of it.
- Prices you ask for: when the app prices a trip, before any booking, its pickup and drop-off points, the distance and the time are kept for 90 days without your account, name or phone number, so we can see which routes riders ask about most and check a price change against them.
- Trips: the pickup and drop-off points, the route driven, how far the car went and when it last moved are kept with the trip record, so that fares and complaints can be checked and so that we can measure how long rides really take. How far and when are a distance and a time, not a record of where the car was.
- Places you save, like Home and Work, are kept until you delete them or your account.
3. Why we use it
- To provide the service: matching riders and drivers, pricing, payment, receipts and notifications.
- To confirm that everyone using LehgoRide is 18 or over.
- For safety and trust: checking drivers, confirming the right passenger at pickup, looking into reports, and blocking accounts where there are grounds.
- For money: recording fares, commission, earnings and withdrawals, and settling disputes.
- To improve the service.
We do not sell your personal information, and there is no advertising in LehgoRide.
4. Who can see it
- Your driver sees your name, your photo if you added one, where to collect you and where you are going, and whether you are verified; and your phone number for the trip, until calls in the app are switched on. After that they never receive your number.
- Your rider sees your name, photo, vehicle and plate; and your phone number for the trip, until calls in the app are switched on. After that they never receive your number.
- Messages between a rider and a driver can be read by the two of you, during the trip and afterwards in your trip history and your list of chats. We record whether you have opened a message, from a driver, a rider or our support team, so the app can show you which are new. The person who wrote it is not shown whether you have read it.
- Our team sees only what their role needs, and looking at personal information is recorded. If you press the emergency alert, everyone on our team who handles emergencies is sent a text message and an email with your name, phone number, where you were, the trip and anything you wrote, so somebody can reach you quickly, and they may message you about it in the app's support chat.
- Our team's AI assistant. Part of our team's work is done by Claude, an AI service from Anthropic, working as a member of the team with a role of its own. It sees only what that role allows: the business's own figures; the tasks and team messages it is part of, which can name you or a trip; and, if you apply to drive or join our waiting list, your name, city and vehicle, which of your documents are in, and where your application stands, never your phone number, email, documents or their numbers. It keeps notes between sessions, which our team can read and delete. Everything it changes is recorded under its name, and it does not decide anything about your account.
- Notification services (Expo, and Apple or Google) carry notifications to your phone. A notification can include a trip's pickup and drop-off, a first name, and the first line of a message.
- Payment providers receive what they need to move money.
- Google, Facebook or Apple, if you sign in with one of them, are asked to confirm the sign-in is really yours. Facebook is sent the sign-in it gave you to check it; Google and Apple are not sent anything about you.
- WhatsApp (Meta) carries the codes we send to your phone, to sign up or to reset your password: it is given your phone number and the code. If your number has no WhatsApp, or the message is not delivered within half a minute, the code goes by SMS instead. You can always ask for it by SMS.
- Twilio carries calls made in the app between a rider and a driver. It is given your LehgoRide account number, never your phone number, and the call itself as it happens; it does not keep a recording for us. So that your phone can ring while the app is closed, Apple's or Google's notification service is told that a call is waiting, with the caller's first name.
- Map services (Mapbox, and the OpenStreetMap routing and address services) work out routes, arrival times and addresses. They are sent places on a map: a pickup and a drop-off, and during a trip where the driver is. They are never sent a name or a phone number.
- Nobody else, unless the law requires it.
5. How long we keep it
- Your account information, for as long as you have an account.
- Trip and payment records for longer, because disputes and accounts need them.
- Notifications, for thirty days.
- The pickup and drop-off of trips you were priced, without your account, for ninety days.
- Records of calls made in the app, with the trip they belong to.
- Support conversations and the messages between riders and drivers are kept for a limited period, including after an account is deleted, to review complaints and improve LehgoRide. Once your account is deleted they are no longer linked to your name, phone number, email or photo.
6. Keeping it safe
Passwords are stored scrambled. Sessions expire, and blocking an account ends them straight away. Identity documents are kept in private storage that can only be opened through a link that expires. Information travels between the app and our servers encrypted. No system is perfectly secure, and we do not claim otherwise.
7. Your choices and rights
You can ask for a copy of your information, ask us to correct it, and delete it.
You can delete your account yourself: in the rider app under Account, then Delete Account; in the driver app under Settings, then Delete Account; or at https://lehgoride.app/delete-account. Your account stops working straight away, and nothing is erased for 30 days, so signing in during that time restores it. After 30 days it cannot be undone. Deleting is not possible while you owe an unpaid balance, while your wallet still holds money, or during a trip.
Records that involve another person, such as trips and payments, are kept with your personal details removed.
For a copy of your information, a correction, or anything else, write to hello@lehgoride.app.
8. Children
LehgoRide is for people aged 18 and over. We ask for your date of birth to check this, and an account cannot be created for anyone under 18. If we find that an account belongs to someone under 18, from the date of birth they give or from an ID our team checks, the account is blocked and they are told why.
9. Changes to this policy
We will tell you when this policy changes. If a change widens what we collect, how long we keep it or who sees it, the app will ask you to agree again before you carry on.
10. The law
This policy is governed by the law of the Republic of Liberia, including its data protection law as it applies.