Privacy Policy

1. Who we are

RideHub is the controller of the personal data described in this policy. You can reach us at [email protected] or by post at RideHub, TechnoPark Tanger, Morocco.

2. The data we collect

What we collect depends on how you use RideHub.

• Account details: your name, phone number, email address, profile photo and preferred language. You can sign in with your phone number (we send you a code by SMS), with Google, or with Apple.
• Trip details: the pickup and destination you enter, the fare you propose and the offers you receive, the trip's status and history, cancellations, ratings and reviews you give or receive, tips, and the messages and calls you make through the app during a trip.
• Location: your device's location while you use the app, to find a pickup point, match you with nearby drivers or riders and follow the trip. Drivers' location is also used while they are available for trips. You can turn location off in your device settings, but the app cannot match you without it.
• Driver profile: your vehicle details and photos, and the documents and photos you upload so we can activate your driver account.
• Payments and wallet: for card payments, your card is handled by our payment provider and we keep only a masked card number, the card brand and a reference to it, never the full number. For drivers, we also keep the points you buy and use, the fees taken from your points, fines, earnings, and the payout details you give us to be paid.
• Safety and conduct: reports about a trip, warnings, fines and bans on drivers, and what you tell our support team.
• Device and usage data: your device and operating system, app version, the push-notification token for your device, your IP address, crash and diagnostic logs, and how you use the app and the website.
• Waitlist and enquiries: if you join the waitlist or write to us, your first and last name, email address, city, the service you are interested in, your phone number if you give it, your language, your IP address, and your message.

3. How we use your data

• To create and secure your account, and to sign you in.
• To connect riders and drivers, show offers and prices before a rider accepts, and run the trip.
• To process payments: riders' card payments, drivers' purchases of points, tips, fines and payouts.
• To keep people safe: verifying drivers, handling safety reports, applying our rules (warnings, fines, bans) and preventing fraud and misuse.
• To provide support, answer your questions and resolve disputes.
• To send you service messages (such as trip and account updates) and, with your consent, launch updates about the service you chose on the waitlist.
• To understand how RideHub is used and improve it, including measuring and fixing errors.
• To meet our legal obligations and to establish or defend legal claims.

4. Why we are allowed to use your data

We use personal data in line with Moroccan law on the protection of individuals with regard to the processing of personal data (Law 09-08) and the guidance of the CNDP, the national data protection authority. Our grounds are:

• your consent, for example for location, for waitlist updates and for analytics cookies, which you can withdraw at any time;
• the contract between you and RideHub, which we need to provide the trip, payment and account features;
• our legitimate interest in keeping the platform safe, preventing fraud and improving the service, where this does not override your rights;
• our legal obligations, such as accounting and responding to lawful requests from authorities.

5. What riders and drivers see of each other

When a trip is agreed, the rider and driver see what they need to complete it: name, photo, rating, the driver's vehicle details, the pickup and destination, and each other's live position during the trip. Calls and messages go through the app. We do not sell your personal data, and we do not share it with the other party beyond what the trip needs.

6. Who we share data with

We share data only with those who help us run RideHub, and only what they need:

• Google (including Firebase and Google Cloud), which provides sign-in, our database and file storage, push notifications, crash reporting, maps and place search, and Google Analytics.
• Apple, for Sign in with Apple, push notifications and Apple Maps on iPhone.
• Our payment and payout providers (such as Stripe), which process card payments and driver payouts under their own privacy policies.
• Providers that deliver SMS verification codes and emails to you.
• Authorities, courts and advisers, when the law requires it or to protect the rights, safety and property of RideHub, our users or others.
• A buyer or partner, if RideHub is involved in a merger, acquisition or sale of assets. We would tell you and the same protections would apply.

7. Transfers outside Morocco

Our providers may process data on servers outside Morocco, including in Europe and the United States. Where the law requires it, we make sure such transfers are covered by appropriate safeguards and, where needed, the authorisation of the CNDP.

8. How long we keep data

We keep your data while your account is active and as long as we need it for the purposes above. You can delete your account in the app. Once you do, the account is deactivated and your devices are detached, and you can restore it by signing back in within 30 days. After that period the account can no longer be restored, and we delete or anonymise the personal data we no longer need.

We may keep certain records for longer when the law requires it or when we need them for accounting, fraud prevention, safety or a dispute, for example payment records and the history of fines and bans.

Waitlist details are kept until you ask us to remove them or the waitlist ends.

9. Your rights

Under Law 09-08, you have the right to:

• be informed about how your data is used, and access the data we hold about you;
• have inaccurate or incomplete data corrected;
• ask us to delete your data, and delete your account in the app;
• object, for legitimate reasons, to the use of your data, and object at no cost to its use for marketing;
• withdraw a consent you gave, without affecting what was done before.

To use these rights, write to [email protected]. We may need to confirm who you are first, and we will answer within a reasonable time. If you think we have not handled your data properly, you can also complain to the CNDP.

10. Cookies and analytics on our website

Our website uses Google Analytics to count visits and understand which pages are useful. It may set cookies and collect your IP address, device and browser information, and the pages you view. You can block or delete cookies in your browser settings, or install Google's opt-out browser add-on. The waitlist confirmation page does not use analytics.

11. How we protect your data

We protect personal data with technical and organisational measures, including encrypted connections, access controls on our systems, and a payment provider that holds card details for us. No system is completely secure, so please keep your sign-in methods and devices safe, and tell us right away if you suspect a problem.

12. Children

RideHub is for adults. You must be at least 18 to create an account, and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

13. Changes to this policy

We may update this policy as RideHub grows or the law changes. We will publish the new version here with a new date, and tell you in the app or by email if the change is significant.

14. Contact us

Questions or requests about your privacy: [email protected], RideHub, TechnoPark Tanger, Morocco.