Privacy policy — NIVO and NIVO Driver

Last updated: 3 November 2026. This version applies from its publication on nivorides.com.

1. Who is responsible and how to contact us

ETS NIVO, Rue PL-13, Plateau, Niamey, Niger, manages the NIVO service connecting passengers with independent drivers using their own vehicles. This policy covers nivorides.com, driver preregistration, the NIVO passenger and NIVO Driver apps and bookings handled by our call center. App and trip processing described below applies when those services are used; the website currently presents the project and accepts driver preregistrations.

For privacy, personal-data rights and account-deletion requests, email privacy@nivorides.com. Requests sent to contact@nivorides.com are also accepted and directed to the responsible person. You may write to the postal address above. Office calls: +227 20 72 25 44. WhatsApp: +227 87 91 12 00.

2. Information and purposes

• Passenger accounts: name, telephone number, optional email and optional profile photograph, to identify users, manage accounts, arrange trips and respond to requests. A telephone number is needed to book. Email is optional in the passenger app and enables email trip summaries when entered in the profile. The operator booking screen has no email field.
• Bookings and trips: pickup, destination, dates, times, driver, vehicle, status, fare, payment details and recorded route, to arrange and monitor trips, calculate revenue and platform charges, and handle complaints and disputes. Launch payments are cash payments; NIVO does not require a payment card for these trips.
• Drivers: identity and contact details, required profile photo, licence, vehicle registration, insurance and applicable transport authorisations, to verify eligibility. Every driver must attend our office to submit documents and have the vehicle inspected before activation. NIVO keeps its own document copies on paper, an office computer and company Google Workspace Drive.
• Support: communications and written booking, incident, lost-item and complaint notes. The call center does not record telephone calls.
• Technical information: the platform privacy notice describes IP addresses, device and operating-system details, identifiers, usage and diagnostic records used to operate, secure and maintain the service. Device permissions are managed in your phone settings.

A profile photo is used for identification. Requiring a driver profile photo does not itself mean a biometric facial-matching service is used.

3. Location and trip tracking

Passenger and driver locations are collected during active trips to construct the trip route and support operations and incident handling. Passenger location is collected while the passenger has an active order. For drivers who are online but not processing a trip, the platform also measures online time and distance travelled; this is shown in the driver’s daily-total screen and, according to Onde, is not displayed in NIVO’s company panel.

Current and historical trip routes are available to authorised NIVO staff through the operator app and MyHub order history. Location accuracy and availability depend on the device, network and permissions. Tracking does not guarantee an immediate response or replace emergency services. Changing location permissions can prevent functions that need them.

4. Who receives information

Authorised call-center staff and management access passenger bookings and support notes only as needed for their duties. Within NIVO, full driver document copies are restricted to the CEO/operations manager and assistant operations manager.

The assigned driver receives the passenger’s name, pickup, destination, telephone number and profile photo if supplied. Passengers receive their assigned driver’s name, profile photo, vehicle details, licence plate and telephone number. Direct calls are ordinary telephone calls without number masking: each party can see the other’s number. Contact details must be used only to arrange or follow up the booked trip.

The platform is supplied by Onde. Its public privacy notice identifies Ondemand Apps OÜ. Onde Support identifies AWS, Hetzner and Leaseweb as hosting providers, with servers in Germany and Finland. Google processes NIVO’s Workspace files, preregistration forms, spreadsheet records and notification emails. Providers process information needed for their services. Their processing may involve access or transfers outside Niger; applicable protections and legal requirements continue to apply. Onde’s public notice also describes possible transfers outside the European Economic Area and contractual safeguards. This policy does not state that every provider stores data exclusively in those two hosting countries.

Information may be disclosed to competent authorities for a legally grounded request or applicable obligation, limited to what is necessary. Authorities do not have general or permanent access under this policy.

5. Retention — profile deletion and trip history are different

Historical platform records: Onde Support confirms that processed-trip records, including the names and telephone numbers recorded at the time, pickup/drop-off information and routes, remain in NIVO’s company reports, operator app and MyHub history indefinitely, with no automatic expiry currently provided. Deleting an account profile does not delete or irreversibly anonymise those historical records. They are retained for operational reporting, revenue and commission calculations and dispute handling. NIVO does not promise deletion of platform trip or GPS history after three years. You may contact NIVO to request review of the necessity and lawfulness of retaining information about you and exercise applicable rights; continued technical storage does not remove those rights.

Account profiles: for both passenger and driver accounts, the platform retains the profile for 30 days after the deletion request. Logging back in during that period cancels the deletion process. If the user does not log back in, the profile is deleted at the end of the period. Onde confirms the driver profile can also be deleted manually earlier by NIVO. Profile deletion removes profile fields, such as contact information, uploaded photos and documents; historical copies of trip information remain as described above. We do not promise that deleting a profile also erases every backup or technical log immediately.

NIVO’s separate office records: unsuccessful or withdrawn driver preregistrations are kept no more than 90 days after last contact, then removed from the list and related notification emails. Support notes are kept three years after the issue closes. Essential driver-verification records are kept during the partnership and three years after it ends. NIVO’s separate routine booking records are kept three years after the trip. These local schedules do not change Onde’s historical-platform retention. At the end of the applicable period, NIVO deletes or irreversibly anonymises its separate records, except limited information required for a specific legal obligation or unresolved claim. Accounting evidence may require a different mandatory retention period. Retained exceptions are restricted to their relevant purpose.

6. Rights and account-deletion requests

Email privacy@nivorides.com to request access, correction, deletion, account closure or exercise other applicable data rights. Identify whether you use NIVO or NIVO Driver and the telephone number linked to the account. You can request deletion without installing or accessing the app. Never send your password or login code. Proportionate identity verification may be necessary.

You can also request account deletion using the app’s profile/account-deletion control. Follow the confirmation steps shown in your version. NIVO gives an initial response to emailed requests within two business days; completing the request may take longer, subject to applicable deadlines. We will explain the scope of the action, any retention exceptions and expected timing. The public request page is at https://nivorides.com/en/delete-account/. You may contact Niger’s Haute Autorité de Protection des Données à caractère Personnel (HAPDP) about your rights or a complaint.

7. Driver preregistration and website

The website form collects full name, telephone number, optional email and agreement to preregistration contact, plus date, language, request reference and notice version. These details help NIVO arrange office document checks before launch. No document upload is requested at this stage. Preregistration does not guarantee acceptance, employment or a launch date.

Google Apps Script processes the form, a private Google Sheet stores submissions and follow-up status, and email notifications reach NIVO. A temporary salted phone-number hash helps limit repeated submissions. You can withdraw agreement to further preregistration contact at the privacy address. The 90-day rule above applies to unsuccessful or withdrawn applications.

Cloudflare hosts the website. Technical connection and security records may be processed to deliver and protect it. The supplied website does not embed advertising or audience-measurement scripts. WhatsApp and social links open third-party services governed by their own privacy notices.

8. Service and promotional messages

Booking, arrival, trip-summary and support messages help provide the requested service. Email summaries require an email in the passenger-app profile; telephone bookings also require a matching app profile for automatic email delivery.

NIVO may send promotional offers by email, SMS or WhatsApp only where you have separately opted in to the relevant channel. Booking contact details alone do not constitute promotional consent. You can refuse or withdraw promotions without losing booking access, through the message’s withdrawal instructions or the privacy address. A limited record of your preferences may be kept to respect them. Any app promotional notifications remain subject to applicable preferences and device settings.

9. Processing grounds, security and minors

Information necessary to manage an account or requested booking is used for the service relationship. Other processing may be necessary for legal obligations, justified operational or dispute-handling purposes where permitted, or separate consent where required. The grounds and retention for each purpose remain subject to applicable Nigerien law; this notice does not waive your rights.

Access is limited to authorised persons, with appropriate account and record safeguards. No system removes all risks of loss or unauthorised access. Account holders must be at least 18. Minors may ride only with an adult; NIVO requests the adult’s booking information and does not request child-specific booking details.

10. Updates

Material changes will be communicated through appropriate channels. The current published version shows its update date. The French version is available at https://nivorides.com/confidentialite/.