Privacy policy

DRI app · version of 7 November 2026

1. Who we are

DRI runs, in Rwanda only, an app that connects car owners with verified independent drivers who come to drive the customer's car. DRI is the controller of your data under Law No. 058/2021 of 13/10/2021 on the protection of personal data and privacy. Contact: [email protected].

2. Data we use

All users

• Account: first and last name, phone number, language, proof that you are 18 or older, consents given.
• Rides: pickup and drop-off points, saved places, history, offered and accepted prices, payment declarations, ratings and reports.
• Chat messages with the other party of the ride, disputes.
• Safety: emergency contact, emergency alerts, trip sharing links.
• Device: technical identifier and notification token.

Customers: car (make, model, colour, plate, manual or automatic). Customers are never asked for an ID document.

Drivers

• National ID card and driving licence (numbers, category, expiry date, "automatic only" mention, photos of the documents).
• Activity: availability, area, ratings, cancellations.
• GPS location, only while you are available or on a ride, and photos of the car's condition at start and end.
• Payments: Mobile Money number, activation fee, commissions, receipts.
• Presence check: you confirm you are present with Face ID or your fingerprint. Your face and fingerprint stay on your phone: DRI never receives them. The phone only sends a signature made by a key unique to that phone.

3. Why

• Create and protect your account (code sent by SMS).
• Verify drivers before activation, then make sure the verified driver is the one using the phone.
• Match customers and drivers, allow price negotiation and record the agreement.
• Show the driver's location during the ride, share the trip, handle an emergency.
• Record declared payments and handle disputes; collect drivers' activation fee and commissions.
• Prevent fraud and unpaid amounts.
• Send service notifications. No advertising without your separate consent.

4. Who sees your data

• The other party of the ride, only what is useful (first name, photo, rating, pickup point). Phone numbers are visible only after the agreement and during the ride. Before the agreement, numbers and links written in the chat are hidden.
• Before the agreement, drivers' locations are shown to customers rounded to about 500 metres.
• Our service providers, each for its own task only: host in Rwanda, MTN Rwanda (MoMo) and Airtel Rwanda (Airtel Money), Smile ID (checking drivers' documents), an SMS provider, Google Firebase (notifications, with no personal content).
• Rwandan authorities, on lawful request.

We never sell your data.

5. Transfers outside Rwanda

Data is stored in Rwanda. Drivers' documents are sent to Smile ID for verification, and a technical token to Google to deliver notifications. These transfers are covered by contracts and declared to the NCSA.

6. How long

• Chat messages: 6 months after the ride.
• Trip points: 12 months.
• Drivers' documents: while the driver works with DRI, deleted when they leave.
• Accounting and payment records: 10 years (legal obligation).
• These periods are extended only while a dispute is open.

7. Security

Encrypted connections (HTTPS), encrypted ID and licence numbers, documents in private encrypted storage, photos stripped of location data, limited and logged agent access, screenshots blocked on sensitive screens. No personal data in notification content. If an incident occurs, we notify the NCSA within 48 hours and the people affected when the risk is high.

8. Your rights

You can access and get a copy of your data, correct it, withdraw consent, object to processing and delete your account: in the app (Account, Delete my account) or at [email protected]. See also Delete my account. You can also contact the NCSA (National Cyber Security Authority).

9. Age

DRI is for people aged 18 or older.

10. Changes

We tell you in the app before any important change to this policy.