Legal

Privacy Policy

Effective date: 12 July 2026

Yenkonkoa ("we", "us", "our") provides a personal driver and chauffeur platform that connects customers with verified drivers in Ghana. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our mobile application, website, and related services (collectively, the "Services"). By using the Services, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

1. Information We Collect

We collect information to provide, improve, and secure the Services. The types of information we collect include:

1.1 Account Information

• Full name, phone number, email address, and password hash.
• Profile photo (optional for customers; required for drivers).
• Account type (customer or driver) and registration date.

1.2 Identity and Verification Data (Drivers)

• Ghana Card (national ID) number and scanned copy.
• Valid Ghanaian driver's licence number and scanned copy.
• Selfie photograph for identity verification and facial comparison.
• Vehicle registration details (if applicable).

1.3 Location Data

• Precise location (GPS): collected in real time during active trips to enable pickup, navigation, and trip tracking. For drivers, precise location is also collected while online to broadcast availability to nearby customers.
• Coarse location: used for general service area matching and analytics.
• Location data is only collected when you have granted permission through your device settings. You can disable location access in your device settings, but this will prevent you from using core features such as booking or receiving trip requests.

1.4 Payment Information

• Payment provider references, transaction IDs, and payment status.
• We do not store complete payment card numbers or mobile money PINs. Payment processing is handled by licensed, PCI-DSS-compliant third-party payment providers.

1.5 Trip and Usage Data

• Trip details: pickup and destination addresses, route information, trip duration, distance, and timestamps.
• App usage data: feature interactions, session duration, crash logs, and performance metrics.

1.6 Communication Data

• In-app messages between customers and drivers.
• Push notification tokens and delivery status.
• Customer support tickets, issue reports, and attached files.
• SMS and email communications sent through the platform.

1.7 Review Data

• Star ratings, written feedback, and timestamps submitted after completed trips.
• Review moderation logs (e.g., reports, removal reasons).

1.8 Referral Data

• Referral codes generated or used, invitee identities, reward status, and payout history.

1.9 Device and Log Data

• Device type, operating system version, app version, and unique device identifiers (e.g., device ID, advertising ID where permitted).
• IP address, browser type, and timestamps of access.
• App preferences and settings stored locally on your device.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To create, authenticate, and manage your account.
• To match customers with nearby available drivers and facilitate bookings.
• To process and record payments, distribute driver earnings, and administer the Refer & Earn program.
• To verify driver identity, eligibility, and vehicle documentation.
• To provide real-time trip tracking, navigation assistance, and arrival estimates.
• To send transactional notifications (trip updates, confirmations, safety alerts) and marketing communications (promotions, offers) where you have consented.
• To display reviews and ratings and maintain platform trust and safety.
• To investigate and respond to issue reports, safety concerns, and disputes.
• To improve, maintain, and secure the Services, including fraud detection and prevention.
• To comply with legal obligations and enforce our Terms and Conditions.

3. Legal Basis for Processing (GDPR Compliance)

For users in jurisdictions where the General Data Protection Regulation (GDPR) or similar frameworks apply, we process your personal data based on the following legal grounds:

• Performance of a contract: processing necessary to provide the Services you have requested (e.g., matching you with a driver, processing payments).
• Legitimate interests: processing necessary for our legitimate business interests, such as fraud prevention, platform security, analytics, and marketing (where you have not objected).
• Consent: processing based on your explicit consent, such as for marketing communications, precise location sharing, or facial recognition verification. You may withdraw consent at any time through the app settings or by contacting us.
• Legal obligation: processing necessary to comply with applicable laws, regulations, or court orders.

4. Data Sharing and Disclosure

We do not sell your personal data. We share your information only in the following circumstances:

• Between Users: During a trip, customers and drivers can see each other's first name, profile photo, phone number, and real-time location (for the duration of the trip only).
• Review Data: Reviews and ratings may be shared with the other party in the trip and displayed publicly or semi-publicly on the platform.
• Service Providers: We share data with trusted third-party service providers who perform services on our behalf, including payment processing, SMS delivery, push notifications, cloud hosting, analytics, and customer support. These providers are contractually bound to use your data only for the purposes we specify and to protect it in accordance with this Privacy Policy.
• Legal Compliance: We may disclose information if required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety, or that of our users or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, user information may be transferred as part of that transaction, subject to the same privacy protections.

5. Data Retention and Deletion

• We retain your personal data for as long as your account is active or as needed to provide you with the Services.
• After account deletion, we will delete or anonymise your personal data within 90 days, except where retention is necessary for legitimate business purposes (e.g., fraud prevention, dispute resolution, legal compliance) or as required by law.
• Driver verification documents may be retained for a longer period as required by regulatory obligations or for safety and compliance purposes.
• Aggregated, anonymised data may be retained indefinitely for analytics and business improvement.

6. Account Deletion

You may delete your account at any time through the app settings. Upon deletion:

• Your account will be marked as inactive and you will no longer be able to access the Services.
• Your profile information, trip history, and preferences will be deleted or anonymised within 90 days, except as noted above.
• Reviews you have submitted may remain visible but will be anonymised (attributed to "Deleted User") where technically feasible.
• Payment and transaction records required for legal or accounting purposes will be retained in accordance with applicable law.

7. Security

We implement industry-standard technical and organisational security measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Password hashing using bcrypt or equivalent algorithms.
• Access controls and role-based permissions for staff.
• Regular security audits and vulnerability assessments.
• Secure storage of driver verification documents with restricted access.

While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Restriction: Request restriction of processing in certain circumstances.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Data portability: Request transfer of your data to another service provider, where technically feasible.
• Withdraw consent: Withdraw consent for processing that was based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at support@yenkonkoa.com. We will respond within 30 days of receiving your request. We may require verification of your identity before processing your request.

9. Cookies and Similar Technologies

Our website and app may use cookies, local storage, and similar technologies to enhance your experience, remember your preferences, analyse usage patterns, and deliver targeted content. You can manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of the Services.

10. Children's Privacy

The Services are not intended for use by children under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data from a child under 18 without verifiable parental consent, we will delete that information promptly. If you believe a child has provided us with personal data, please contact us immediately.

11. International Data Transfers

We primarily store and process data within Ghana. However, some of our service providers may be located outside Ghana, including in countries that may not have equivalent data protection laws. When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, to protect your data in accordance with this Privacy Policy.

12. Push Notifications and Marketing Communications

With your consent, we send push notifications and marketing communications via email and SMS. You can manage your preferences in the app settings or by following the unsubscribe instructions in our communications. Even if you opt out of marketing, we may still send transactional messages necessary for the operation of the Services.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Services. Material changes will be notified through the app, by email, or by updating the effective date at the top of this page at least 14 days before they take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

14. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at:

Email: support@yenkonkoa.com
Website: https://yenkonkoa.com

If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Commission of Ghana or your local data protection authority.