Privacy Policy

Last updated: 10 November 2026

ARYV ("we", "us") operates the ARYV ride-sharing and courier app. This policy explains what we collect, why, who we share it with, and what you can do about it.

Contact: [email protected]

1. Information we collect

1.1 Information you give us

DataWhenWhy
Name, email address, phone numberCreating an accountTo identify your account and contact you about a trip or delivery
PasswordCreating an accountTo sign you in. Stored only as a one-way hash; we cannot read it
Google account name and emailIf you sign in with GoogleTo create and sign in to your account
Date of birth, profile photo, addressOptional profile fieldsSo other users can recognise you, and to confirm you are an adult
Emergency contact names and phone numbersOptionalContacted only if you raise an emergency alert
Identity and vehicle documents: driver's licence, passport or national ID, vehicle registration, insuranceApplying to drive or deliverTo confirm you may drive or carry goods, and to protect other users
Vehicle detailsDriver onboardingShown to passengers so they can find the right car
Trip and package details, including addressesBooking a ride, sending a packageTo provide the service
A package recipient's name and phone numberSending a packageTo text the recipient the delivery code. The recipient does not need an ARYV account
A face photo taken for a tripBooking or accepting a rideShown to the other person on that booking so you can recognise each other. Deleted after 24 hours
Messages you send in the appTrip and group chatTo provide the service, and to look into disputes and safety reports
Ratings, reviews, reports and disputesAfter a trip or deliveryTo maintain trust between users and resolve problems

1.2 Information collected automatically

DataSourceWhy
Precise locationYour device, while you use a location featureTo find nearby rides, pick places on the map, share a trip or delivery in progress, and confirm pickup and drop-off
Push notification tokenFirebase Cloud MessagingTo send you trip, delivery and message notifications
IP address and request detailsOur serversSecurity, rate limiting and preventing abuse
Records of cash payments and commissionCreated when a trip or delivery is paid forSo both sides have a record, and to work out the commission a driver or courier owes

Location. ARYV asks for precise location and uses it while the app is open and you are using a location feature.

There is one case where location is shared while the app is not on screen: a courier carrying a package. From pickup until delivery, the courier's position is sent to us and shown to the package's sender. Android shows a notification for as long as this is happening, and it stops when the delivery ends.

If you raise an emergency alert, your location is shared with your emergency contacts and ARYV staff until the alert is resolved.

Camera and microphone. The camera is used to take profile and trip photos, photograph verification documents, and scan delivery codes. The microphone is used only during an in-app call. We do not record calls.

1.3 What we do not collect

We do not collect your phone's contact list, your browsing outside the app, card or bank details, biometric identifiers, or data about your health, religion, politics or sexuality. The app contains no advertising and no third-party advertising trackers.

2. How we use your information

We do not sell your personal information, and we do not share it for advertising.

Automated decisions. Ride matching and suggested prices are worked out automatically. Decisions that seriously affect you, such as approving or refusing a driver or courier application, suspending an account, or resolving a dispute, are made by a person.

3. Who we share it with

Other users, as far as the trip or delivery needs. A driver sees a passenger's name, photo and rating, and their pickup and drop-off points. A passenger sees the driver's name, photo, rating and vehicle. Phone numbers are shared between the two sides of a booking or an accepted delivery. A courier sees a package's pickup and drop-off contacts only after accepting it. Your identity documents are never shown to another user.

Service providers, who handle data only to provide their service to us:

ProviderPurposeData
RailwayHosting for the app servers and databaseAll service data
CloudflareNetwork delivery, DNS and file storageRequest details; uploaded photos and documents
Google Firebase Cloud MessagingPush notificationsNotification token and notification content
Google Maps PlatformMaps, address search and routesLocations and addresses you search for
Google Sign-InSigning in with Google, if you choose itGoogle account name and email
TwilioText messages: verification codes and delivery codesPhone number and the message
Our email delivery providerAccount emails such as password resetsEmail address and the message

Authorities, where the law requires it, or where it is necessary to prevent serious harm.

A new owner, if ARYV is merged or acquired, on the condition that this policy continues to apply.

4. Where your data is held

The providers above operate data centres outside Botswana, so your data is transferred to and stored in other countries. We use established providers and require them to protect your data to the standard this policy describes.

5. How long we keep it

DataKept for
Account and profile dataWhile your account is open
Trip face photos24 hours
Verification documentsWhile you are approved to drive or deliver; removed when your account is deleted
Trip, booking, delivery, payment and commission recordsAs long as tax, accounting and dispute rules require. After your account is deleted they are kept without your identity
Ride chat messagesDeleted 24 hours after the ride is completed, unless the people in the chat vote to keep it
Messages about a deliveryWhile your account is open

6. Your rights and your choices

You can, at any time:

We rely on these legal grounds: carrying out our contract with you (providing the service), legal obligations (verifying drivers, keeping tax records), our legitimate interests (safety, preventing fraud, improving the app), and your consent where we ask for it.

6.1 What deleting your account does

Deleting your account erases your personal data: your name, email address, phone number, profile photo, date of birth, address, emergency contacts, verification documents and settings.

Completed trips, deliveries and payment records are kept without your identity. They cannot be removed entirely, because they are also the other person's record of the trip, and because we must keep financial records. Deletion is permanent.

7. Security

Passwords are stored as one-way hashes. Traffic between the app and our servers is encrypted. Sign-in tokens are kept in your phone's secure storage and are cancelled when you sign out or change your password. Verification documents are not public: they are shown only to the person who submitted them and to authorised reviewers. Access to our systems is limited to authorised staff, and staff actions are logged.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the relevant authority as the law requires.

8. Children

ARYV is not for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

9. Changes

We will post any change to this policy here and update the date at the top. For significant changes we will tell you in the app or by email before they take effect.

10. Contact

Questions, requests or complaints about this policy:

Email: [email protected]
Post: ARYV, Box 440, Masunga, Botswana