Privacy Policy

• Account data: full name, email address, South African mobile number, and a password hash.
• Identity data: ID number, date of birth, gender digit, selfie holding your ID, and driver documents (licence front/back, PrDP, roadworthy certificate and vehicle photos).
• Location data: live GPS coordinates while you are using the app, pickup and drop-off addresses, and route history.
• Trip data: passenger count, quoted fare, payment method, driver and rider ratings, chat messages, and trip status.
• Device data: push notification tokens, browser/app version, and coarse device type for dispatch and safety alerts.
• Emergency contacts: names and mobile numbers you choose for panic-button notifications.

• To verify your identity, check your ID checksum, and enforce gender-safe night travel.
• To match riders with nearby drivers, calculate distances, and send ride requests.
• To process cash fares, driver billing, and card payments through Yoco.
• To send ride alerts, driver arrival tones, and safety notifications to you and your emergency contacts.
• To investigate complaints, appeals, and incidents between riders and drivers.
• To improve dispatch, fraud detection, and app performance.

• We do not sell your personal information.
• During a trip, the rider and driver see each other's first name, photo, trip details, and live location.
• When you press the panic button, we share your trip, driver name, car model, colour and number plate with your emergency contacts via WhatsApp.
• We share data with Yoco only when you choose to pay by card, and only for payment processing.
• We may share data with law enforcement or a regulator if required by a valid South African court order or if there is an immediate safety risk.
• Admins can view verification documents strictly for approval and dispute resolution.

• Active account data is kept for as long as you have a TEXi-Go account.
• Trip and payment records are kept for 5 years to meet tax and legal requirements.
• Verification documents are reviewed and then stored encrypted; they are deleted when no longer needed for approval or dispute resolution.
• Cancelled or expired ride requests are removed from active dispatch after 5 minutes and fully purged after 60 days.
• Audit logs are kept for 14 days, then automatically deleted.
• When you delete your account, we remove or anonymise your personal data within 30 days, except where the law requires us to keep it longer.

• Right to access: you can request a copy of the personal data we hold about you.
• Right to correction: you can update your name, phone, email and emergency contacts in the app.
• Right to deletion: you can delete your account; we will erase your data unless the law says otherwise.
• Right to object: you can opt out of non-essential notifications at any time.
• Right to complain: if you are unhappy with how we handle your data, you can complain to the South African Information Regulator or your local EU supervisory authority.

• All data is encrypted in transit using TLS and at rest in our backend.
• Identity documents are stored in a private bucket with strict access controls and row-level security.
• We use role-based access so that only the admins who need your documents can see them.
• We never store your card details; Yoco handles all card payment data under PCI-DSS standards.
• We regularly review access logs and security settings to protect against misuse.

If you have questions about this policy or want to exercise your data rights, email us at texigo2026@gmail.com.