Privacy Policy

Figo Carpool ("Figo", "we", "us") is a mobility platform operating in Ghana that connects drivers and passengers for scheduled rides and instant ("Go Live") carpooling between trusted bus stops. This policy explains what personal data we collect, why we collect it, how we protect it, and the choices you have.

By creating an account or using the Figo Carpool app or website, you agree to this policy.

Account details — your name, email address, phone number, password (stored only as a secure hash) and profile photo.

Identity verification (KYC) — Ghana Card or other government-issued ID images and selfie verification for drivers and passengers, used solely to confirm your identity. During sign-up, your Ghana Card PIN and live selfie are sent to the Selfie identity service for face matching. Figo stores the verification result and transaction reference, but does not store that live selfie.

Location data — your GPS location when you use ride features. Drivers broadcast their live location during Go Live sessions; a driver can see a passenger's live location only after accepting their ride request. Background location is used only while a ride is active.

Trip information — routes you post or book, pickup and drop-off points (bus stops), fares, ride status and trip history.

Payment data — Mobile Money and card payments are processed by Paystack. We never see or store your card number or MoMo PIN; we store only transaction references, amounts and payout records.

Communications — messages, calls metadata and links you exchange in trip chats, and support conversations.

SOS safety data — if you trigger the SOS emergency button, we record the time, your location and any voice note you attach, and share them with emergency contacts and, where applicable, authorities.

Referral data — referral codes you share or redeem.

Device & usage data — device type, app version, crash logs and pages you visit, used to keep the app working and secure.

• Create and manage your account, and verify your identity (KYC).
• Match, schedule and operate rides — including live tracking, ETAs and pickup navigation.
• Process fares, escrow payments, driver payouts (Mobile Money) and refunds through Paystack.
• Enable chat and contact between driver and passenger for a booked ride. Phone numbers stay hidden from the other party until a ride is accepted.
• Operate safety features — SOS alerts, KYC verification, blocking and incident review.
• Provide support, send service notifications (ride updates, receipts, security alerts) and — only with your consent — marketing messages you can opt out of at any time.
• Detect fraud, abuse and platform fee evasion, and enforce our rules.
• Meet legal, tax and regulatory obligations in Ghana.

• Paystack — payment processing (cards and Mobile Money). Paystack receives the data needed to complete the transaction.
• Selfie identity service — Ghana Card PIN and live selfie face matching during sign-up. It returns a verification result and transaction reference to Figo.
• Google Maps — maps, geocoding, routing and ETA services. Location or address data is processed to display maps and calculate fares.
• Our hosting and infrastructure providers — to store data and run the service securely.
• Emergency contacts and emergency services — only when you trigger SOS.
• Authorities, regulators or courts — where required by law, or to protect someone's safety, rights or property.
• Other users — only the limited information a ride needs: drivers and passengers see each other's name, rating and (after acceptance) phone number. Your Ghana Card, full ID documents and payment details are never shown to other users.

We never sell your personal data.

We keep your account data for as long as your account is active. Trip and payment records are retained for at least 6 years for tax, accounting and dispute purposes, as required by law. KYC documents are kept while your account is verified and for a reasonable period afterwards. SOS records and voice notes are kept only as long as needed for safety follow-up. You can request deletion of your account at any time (see section 8); we will delete or anonymise data we are not legally required to keep.

Data is transmitted over encrypted connections (HTTPS/TLS) and stored with a cloud provider that encrypts data at rest. Access to personal data is restricted to authorised personnel and protected by role-based permissions. Sensitive actions such as viewing another user's phone number are gated behind ride acceptance. No system is perfectly secure, so please also protect your password and device.

• Access — request a copy of the personal data we hold about you.
• Correction — fix inaccurate details from your profile or by contacting support.
• Deletion — request deletion of your account and personal data, subject to legal retention requirements.
• Location controls — grant or revoke location permission in your device settings at any time; ride-matching features need location to work.
• Marketing — opt out of promotional messages at any time; service messages (ride status, receipts, security) will still be sent.

To exercise any right, ask a question about this policy, or delete your account, contact us through the in-app Support section or email ruben.mawuji@figocarpool.app. We aim to respond within 30 days.

We may update this policy as the service evolves. Material changes will be announced in the app or by email. The date below shows when this policy was last updated.