This Privacy Policy explains how CityWheels (“CityWheels”, “we”, “us”, or “our”) collects, uses, stores, and discloses personal data when you use the City Wheels customer app, City Rider app, our websites, and related delivery services (together, the “Services”).
Last updated: August 13, 2026
1. Who this policy applies to
This policy applies to customers, recipients, riders, prospective riders, fleet managers, and website visitors. Some information may concern another person, for example when a customer gives us a recipient's name, phone number, or delivery address, or when a rider gives us guarantor details. Please provide such information only where you are authorised to do so.
2. Information we collect
Customer, recipient, and account information
- Name, email address, phone number, account identifier, and login or verification records.
- Saved addresses, pickup and drop-off addresses, precise location coordinates, and delivery preferences.
- Recipient name and phone number, parcel description, delivery instructions, and optional item photos.
- Delivery history, statuses, ratings, referral information, support requests, and communications with us.
- Optional business-profile details, such as a business name, business address, website, social-media handles, and business contact information.
Rider and prospective-rider information
- Account and contact information, rider profile photo, vehicle details, licence details, ratings, and delivery performance.
- Identity and onboarding information, including NIN, liveness-verification result, vehicle-verification information, proof-of-address documents, home address, and guarantor name, phone number, and relationship where supplied.
- Precise location, including location updates while a rider is online or performing a delivery. Where a rider grants background-location permission, updates may continue while the app is not open to support active delivery tracking and safety.
- Proof-of-delivery photos, signatures, and delivery-related communications.
- Wallet balance, earnings, withdrawal history, and bank account name, number, bank, and verification details needed for payouts.
Payments, device data, and permissions
- Payment reference, amount, currency, status, refunds, and other transaction records. Payment-card details are handled by our payment provider and are not stored by CityWheels.
- Push-notification and device identifiers, including an Expo push token and Firebase installation identifier, used to deliver service notifications. These identifiers are associated with a signed-in account when a user enables notifications.
- Technical information needed to provide and secure the Services, such as app version, device and operating-system information, IP address, and logs generated when you use the Services.
- Photos or documents you choose to take or upload using the camera or photo library. We request permissions when a feature needs them; you can manage permissions in your device settings.
3. How we use information
- Set up and manage accounts; verify phone numbers or email addresses; and provide customer support.
- Quote, create, dispatch, track, complete, cancel, investigate, and rate deliveries.
- Match customers with riders, show delivery progress, and enable fleet and operational management.
- Send transactional messages and notifications about verification, deliveries, payments, security, earnings, and withdrawals.
- Process payments, refunds, rider earnings, and withdrawals; prevent fraud; and meet legal, accounting, and compliance obligations.
- Verify rider identity and eligibility, protect customers and riders, improve reliability, and resolve disputes.
- Maintain, secure, troubleshoot, and improve the Services.
4. Our legal bases
We process personal data as needed to provide the Services and perform our agreement with you, to meet legal obligations, to pursue legitimate interests such as service security, fraud prevention, and operational improvement, and with consent where required. You may withdraw consent for optional permissions, such as notifications, camera access, or background location, through your device settings; this will not affect prior processing or features that require the permission to work.
5. When we disclose information
We do not sell personal data. We may disclose information to the following recipients for the purposes described above:
- Customers, recipients, riders, fleet managers, and authorised CityWheels personnel involved in a delivery or support case.
- Service providers that process information on our behalf: Paystack for payments and payouts; Expo and Firebase for push notifications; Amazon Web Services for hosting and file storage; Twilio, Dojah, and Resend for SMS, WhatsApp, verification, and email communications.
- Professional advisers, insurers, regulators, law enforcement, or other parties where required by law, necessary to protect rights or safety, or in connection with a business transaction.
Some providers may process data outside Nigeria. Where this occurs, we take steps intended to use appropriate safeguards consistent with applicable law.
6. Retention
We retain personal data for as long as reasonably necessary to provide the Services, operate and secure our business, resolve disputes, enforce agreements, and comply with legal, tax, accounting, and regulatory obligations. Retention periods vary by data type and purpose. We delete, anonymise, or securely isolate data when it is no longer needed, subject to records we must retain by law or for legitimate dispute and fraud-prevention purposes.
7. Your choices and rights
Subject to applicable law, you may request access to, correction of, deletion of, restriction of, or objection to our processing of your personal data; withdraw consent; and request data portability where applicable. You may also opt out of push notifications through your device settings. To make a request, contact us using the details below. We may ask for information to verify your identity before responding. You may lodge a complaint with the Nigeria Data Protection Commission.
8. Security
We use administrative, technical, and organisational safeguards designed to protect personal data, including access controls and secure transmission where supported. No system or transmission is completely secure, so please keep your account credentials and one-time codes confidential.
9. Children
The Services are not directed to children. Do not create an account or provide personal data through the Services if you are not permitted to do so under applicable law. Contact us if you believe a child has provided personal data.
10. Changes to this policy
We may update this policy to reflect changes to our Services or legal requirements. We will post the revised version here and update the date above. Where required, we will provide additional notice or seek consent.
11. Contact us
For privacy questions or to exercise your rights, contact CityWheels at:
Email: privacy@citywheels.ng
Please include “Privacy Request” in the subject line and do not send passwords, one-time codes, or bank details by email.