This Privacy Policy explains how Yalla Technologies Limited ("Yalla", "we", "us") collects and uses personal data when you use our websites, the Yalla Ride applications, YallaGet, QuickPay, Yalla wallets, and related services (the "Services"). We process personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA).
1. Data we collect
- Account data — name, phone number, email address, and profile details you provide.
- Trip and delivery data — pickup and drop-off locations, route, time, and status of trips and deliveries; driver location while online.
- Transaction data — fares, wallet activity, payment references, and payout details. Card and bank payments are processed by licensed payment processors (currently Paystack); we do not store your full card details.
- Communications — messages and support conversations with us, including over SMS, email, in-app channels, and WhatsApp — including orders placed with YallaGet over WhatsApp.
- Device and usage data — device identifiers, app version, and logs used to keep the Services secure and working.
2. How we use data
- To provide the Services: matching trips, processing payments, operating wallets, and delivering receipts and tickets.
- To keep the platform safe: fraud prevention, incident investigation, and enforcement of our Terms.
- To support you: responding to requests and resolving disputes.
- To meet legal obligations, including financial record-keeping and lawful requests from competent authorities.
- To improve the Services, using aggregated or de-identified information where practicable.
3. Sharing
- Between trip participants, to the extent needed to complete a trip or delivery (for example, a driver sees the pickup point and first name — not your payment details).
- With service providers who process data for us — payment processing (Paystack), messaging (SMS, email, and WhatsApp delivery providers), and cloud hosting (Amazon Web Services).
- With regulators or law enforcement where required by law.
- We do not sell personal data.
4. Retention and security
We keep personal data only as long as needed for the purposes above, including statutory retention periods for financial records, and protect it with technical and organisational measures such as encryption in transit and access controls. When data is no longer needed, we delete or de-identify it.
5. Your rights
Under the NDPA you may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and withdraw consent where processing is based on consent. To exercise any right, contact support@yalla.ng. You may also lodge a complaint with the Nigeria Data Protection Commission (NDPC).
6. Children
The Services are not directed at persons under 18, and we do not knowingly collect their data.
7. Changes and contact
We may update this policy from time to time; the current version will always be available at this page with its date of last update. Data controller: Yalla Technologies Limited (RC 1730643), registered office: 10 Deji Odunuga Street, Anthony Village, Lagos, Nigeria. Contact: support@yalla.ng or +234 802 811 1656.