Privacy Policy

• Account details: name, email address, Kenyan phone number, date of birth, gender, and your profile photo if you upload one.
• Identity and driver documents: national ID number, driving licence, motor vehicle insurance, and vehicle registration — collected only from users who want the verified driver badge.
• Ride data: the routes, counties, departure times, seat counts and fares you publish or request, and the messages you exchange with other users.
• Payment records: the reference, amount, status and time of each KES 50 connection fee. Card and M-Pesa credentials are handled by Paystack and never reach our servers.
• Technical data: log and error information needed to keep the service running and secure.

• To match drivers and passengers and to show ride listings.
• To verify driver documents and issue or withhold the verified badge.
• To take the connection fee and to unlock contact details once it is paid.
• To send you SMS and email notifications about requests, responses and receipts.
• To investigate reports of unsafe, fraudulent or abusive behaviour, and to meet legal obligations.

Your first name, profile photo, user type and verified badge are visible on your ride listings, including to people who are not signed in. Your surname, phone number, email address and bio are not shown publicly. Phone numbers and direct contact become visible to the other party only after a ride request is accepted and both sides have paid the connection fee. Your ID number, date of birth and uploaded documents are never shown to other users.

• Paystack — to process the connection fee.
• Africa's Talking — to deliver SMS notifications to your phone number.
• Our email delivery provider — to send transactional and account emails.
• Our hosting and database providers — to run the service.
• Law enforcement or regulators, where we are legally required to disclose information.

We do not sell your personal data and we do not share it with advertisers.

Account, ride and message data is kept while your account is active. Payment records are kept for seven years to meet accounting and tax obligations. Driver documents are deleted once they are superseded by a re-upload or when your account is closed. Other data is deleted or anonymised within 90 days of account closure.

Under the Data Protection Act you can ask for a copy of your data, correct it, ask us to delete it, object to how we use it, or withdraw consent to marketing messages. Most details can be changed yourself in your profile and settings. For anything else, email privacy@sharelyft.com. We respond within 30 days. You also have the right to complain to the Office of the Data Protection Commissioner of Kenya.

Data is stored on managed infrastructure with access controls, and documents are held in private storage that only reviewers can open. No system is perfectly secure, so please use a strong, unique password and tell us at support@sharelyft.com if you think your account has been accessed by someone else.

We use only the storage needed to keep you signed in and to remember your preferences. We do not use advertising cookies.