Plain-English Summary
1. Overview
This Privacy Policy explains how Self Drive Kenya collects, uses, stores, protects, shares, and deletes information when you use our mobile application, website, owner tools, booking services, customer support, identity verification, payment flows, and related services.
Self Drive Kenya connects guests, renters, vehicle owners, stay hosts, and service providers for self-drive rentals, chauffeur services, stay bookings, combined stay-and-drive packages, verification, payments, booking management, communication, and support.
2. Information We Collect
Account Information
- Full name, username, profile photo, email address, phone number, password or authentication details.
- Account role such as guest, renter, owner, host, admin, or support user.
- Account status, verification status, owner approval status, security flags, and profile completeness.
Identity and Verification Information
- National ID, passport, driver’s license, alien ID, or other identification details where applicable.
- Images of identity documents, driver’s license uploads, selfie images, liveness checks, face match results, verification timestamps, and verification outcome.
- Information generated by identity verification providers, including verification reference IDs, risk signals, document authenticity checks, device or IP risk checks, and verification status.
Booking and Trip Information
- Vehicle booking dates, pickup and return dates, pickup location, return location, trip duration, booking type, rental price, extras, payment method, booking reference, booking status, cancellation status, and special requests.
- Stay booking details such as check-in, check-out, number of nights, guests, property selected, house rules, cancellation policy, guest details, and stay payment information.
- Combo booking information, including stay details, car details, delivery fee, discount, extras, guest details, payment status, booking details, and owner or host information.
Payment and Transaction Information
- Payment method selected, payment status, amount paid, pending amount, refund status, transaction reference, timestamps, and billing-related records.
- We may process payments through third-party providers such as M-Pesa, card processors, mobile money providers, payment gateways, banks, or other payment partners.
- We do not intentionally store full card numbers in our app database. Card processing should be handled by secure payment providers.
Location and Device Information
- Approximate location from selected destination, pickup point, delivery location, or profile information.
- Device type, operating system, app version, IP address, crash logs, diagnostics, fraud signals, and usage analytics.
- Where permitted and enabled, we may collect precise location for features such as delivery, pickup coordination, route assistance, safety, or fraud prevention.
Communication and Support Information
- Messages, support requests, disputes, complaints, ratings, reviews, owner responses, cancellation requests, and safety reports.
- Emails, phone calls, chat messages, or other communications you send to us.
3. How We Use Information
We use information to operate, secure, improve, and support the Self Drive Kenya platform.
- Create and manage user accounts.
- Verify user identity, driver eligibility, owner status, and account trust.
- Process vehicle bookings, stay bookings, combo bookings, payments, refunds, cancellations, and booking changes.
- Display listings, prices, availability, ratings, reviews, and booking history.
- Enable owners and hosts to manage bookings, approve or reject requests, and communicate with guests.
- Prevent fraud, fake accounts, stolen identities, unauthorized rentals, payment abuse, chargebacks, and misuse.
- Provide customer support, dispute handling, safety investigations, and platform enforcement.
- Send booking confirmations, reminders, updates, verification alerts, payment notices, support messages, and administrative messages.
- Improve app performance, user experience, pricing logic, search results, safety systems, and analytics.
- Comply with applicable laws, lawful requests, tax, accounting, insurance, claims, and regulatory requirements.
4. Legal Basis and Consent
Depending on your location and the type of data, we may rely on one or more legal bases to process your information, including:
- Contract performance: to provide booking, rental, stay, and payment services.
- Consent: where you agree to identity verification, marketing messages, location access, or optional features.
- Legitimate interests: to prevent fraud, secure the platform, improve services, and protect users and assets.
- Legal obligations: to comply with applicable laws, law enforcement requests, accounting, tax, safety, insurance, and dispute requirements.
5. Identity Verification, KYC, and Driver Checks
Self Drive Kenya may require verification before users can book certain vehicles, become owners, list cars, access higher booking limits, or complete sensitive transactions.
Verification may include ID document checks, selfie/liveness checks, driver’s license review, face match, fraud screening, owner verification, phone verification, and manual review.
We may use third-party verification partners such as Didit or similar providers. These providers may process verification data according to their own privacy policies and security standards. We only share information necessary to perform verification, fraud prevention, compliance checks, and platform safety review.
7. Storage, Hosting, and Security
We may use Supabase, Firebase, cloud storage, authentication providers, payment processors, email providers, analytics tools, and secure third-party platforms to host and process app data.
We use reasonable technical and organizational measures to protect user information, including access controls, authentication, storage permissions, database rules, encryption where supported, audit practices, and restricted admin access.
No system is 100% secure. Users must protect their login details, avoid sharing OTPs or passwords, and report suspicious activity immediately.
8. Data Retention
We keep information only for as long as necessary for the purposes described in this Privacy Policy, unless a longer period is required for legal, tax, fraud prevention, insurance, dispute, safety, accounting, or regulatory reasons.
- Account information may be kept while your account is active.
- Booking and transaction records may be kept for accounting, dispute, safety, and legal purposes.
- Verification records may be kept for fraud prevention, compliance, safety, and eligibility review.
- Support messages and dispute records may be kept until the matter is resolved and for a reasonable period after resolution.
9. Your Rights and Choices
Depending on applicable law, you may have rights to access, correct, update, delete, restrict, object to, or request a copy of your personal information.
You may also withdraw optional consent where processing is based on consent. Withdrawal may limit access to some features, such as verified bookings, owner tools, or higher booking limits.
To request data access, correction, deletion, or account closure, contact us at alvinondieki5@gmail.com.
Specific Rights Include:
- Right to Access: Request a copy of personal information we hold about you.
- Right to Correction: Update inaccurate or incomplete information in your profile.
- Right to Deletion: Request deletion of your account and associated data, subject to legal retention requirements.
- Right to Portability: Receive your data in a structured, commonly used format where technically feasible.
- Right to Object: Object to processing based on legitimate interests or for marketing purposes.
- Right to Restrict Processing: Request temporary restriction of processing in certain circumstances.
- Right to Withdraw Consent: Withdraw consent for optional features like marketing communications or location tracking.
- Right to Lodge Complaint: File a complaint with the relevant data protection authority in Kenya if you believe your rights have been violated.
10. Children and Minors
Self Drive Kenya is not intended for use by children as account holders. Users who create accounts, make bookings, list vehicles, or process payments must be legally capable of entering into agreements.
Children may appear as guests in stay or combo bookings. In such cases, the primary adult guest is responsible for providing accurate information and ensuring lawful consent for any child-related information provided.
11. International Transfers
Your information may be processed in Kenya or in other countries where our technology providers, cloud providers, payment providers, verification partners, or service providers operate. Where required, we use reasonable safeguards to protect personal information during such transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we may notify users through the app, website, email, or other reasonable methods. The “Last Updated” date shows when this page was last revised.
13. Contact Us
For privacy questions, data requests, account deletion, or security concerns, contact:
Legal Note
This page is a strong production-ready starting point for your app. Before launching publicly, have a qualified legal professional review it for your exact business model, insurance arrangements, payment providers, verification provider, company registration details, and Kenyan legal requirements.
15. Marketing and Communications
We may send promotional emails, SMS, push notifications, or in-app messages about new features, special offers, discounts, platform updates, or relevant services.
Users can opt out of marketing communications through:
- Account settings in the app
- Unsubscribe links in emails
- Replying STOP to SMS messages
- Disabling push notifications in device settings
- Contacting support at alvinondieki5@gmail.com
Opting out of marketing does not affect transactional messages such as booking confirmations, payment receipts, verification alerts, or important account notifications.
16. Third-Party Links and Services
Our platform may contain links to third-party websites, services, payment providers, social media platforms, or external resources.
We are not responsible for the privacy practices, content, security, or policies of external sites. Users should review third-party privacy policies before sharing information with external services.
Third-party services we integrate with may include payment processors, verification providers, cloud hosting, analytics tools, and communication platforms. Each operates under its own terms and privacy policies.
17. Data Breach Notification
In the event of a data breach that may compromise user information, we will:
- Notify affected users promptly through email, app notification, or other reasonable means
- Inform relevant authorities as required by applicable Kenyan and international data protection laws
- Take immediate steps to contain the breach and prevent further unauthorized access
- Investigate the cause and scope of the breach
- Implement additional security measures to prevent future incidents
- Provide guidance to affected users on protective actions they can take
Users should immediately change passwords and report suspicious activity if they suspect their account has been compromised.