Privacy Policy · User Agreement · What you agree to
Privacy Policy
Version 0.9.12 · 30 Oct 2026
Effective: [date] · Version: 1.0
1. Who we are
Lift is operated by Nexus BI Partners ([registered company name, registration number]), of [registered address], Accra, Ghana ("Lift", "we", "us"). We are the data controller for the personal data described in this policy and are registered with the Data Protection Commission of Ghana under number [DPC registration number].
Data protection questions: [privacy@…] · [phone]. Our data protection officer is [name/role].
2. The principles we follow
Act 843 requires us to process your personal data lawfully, for a specified purpose, compatibly with that purpose, accurately, transparently, securely, with your participation, and to be accountable for all of it. Everything below is organised around those principles. In plain terms:
- We collect only what the service needs.
- We tell you what each item is for before you give it.
- We keep it only as long as that purpose needs.
- We never sell your data.
- You can see, correct and delete it.
3. What we collect, why, and for how long
| Data | Why we need it | Lawful basis | Kept for |
|---|---|---|---|
| Mobile number | Your account identity; one-time sign-in codes; trip notifications | Contract (providing the service) | Life of account + 12 months |
| Name, face photo | So the person you meet at the kerb can confirm it is you | Contract; safety (legitimate interest) | Life of account |
| Email address | Receipts, statements, policy notices, data exports. Never marketing unless you opt in | Contract | Life of account |
| Emergency contact (name, number) | Texted only if you raise an SOS on a trip — once for every SOS you raise — with your first name and the trip's route. You are responsible for telling them you have named them | Vital interests; safety (legitimate interest) | Life of account; changeable at any time |
| Ghana Card number and photos of the card | Verifying that every driver and passenger is who they say they are — the foundation of safety on Lift | Your explicit consent (identity documents are sensitive data); legitimate interest in a verified community | Photos: deleted 90 days after verification. Number: life of account + 12 months |
| Driver's licence, vehicle registration, insurance, roadworthy, vehicle photo, plate | Confirming drivers and vehicles are legally permitted on the road | Contract; legal obligation; safety | Life of driver status; document images deleted 90 days after each review |
| Vehicle colour, make, model, plate | Shown to matched passengers so they board the right car | Contract; safety | Life of driver status |
| Saved places (home, work) — optional | Faster requests | Consent | Until you remove them |
| Location while you request, publish or are on a trip | Matching you with people on the same route; confirming pickup and drop-off; measuring shared distance for billing; live safety | Contract; safety | Full track: 90 days (dispute resolution). After that: distance and timestamps only |
| Trip history (where, when, with whom, distance) | Your records, billing, ratings, safety investigations | Contract | Life of account + 12 months |
| Token purchases, balance, gifts and transfers (including the recipient's phone number) | Operating your prepaid credit; sending tokens to people you choose | Contract; legal obligation (financial records) | 7 years (financial records; period to be confirmed by counsel) |
| Mobile Money number (drivers) | Paying out rewards you redeem | Contract | Life of driver status |
| Ratings and comments you give and receive | Accountability; matching quality; rewards | Contract; legitimate interest | Life of account; comments visible to staff only |
| Reports, warnings, safety events (SOS) | Investigating and preventing harm | Legal obligation; legitimate interest; vital interests | 3 years |
| Device identifier, push token, app version | Securing your account to one device; sending notifications | Contract; security | Life of account |
| Messages you send to your matched driver or passenger in the app (text, quick replies, location pins, photos) | Coordinating the pickup; safety investigations | Contract; legitimate interest (safety) | 90 days, then deleted — unless attached to a report, SOS or dispute (kept with that record, 3 years). Phone numbers typed in messages are masked before delivery |
| Support messages | Helping you | Contract | 2 years |
| Usage analytics (screens, errors) | Improving the app | Legitimate interest; you can opt out | 13 months, aggregated |
We do not collect data from your contacts, photos (other than the ones you choose to upload), microphone or messages.
4. Ghana Card — what happens to it
- You photograph the front and back of your card in the app and enter the number.
- The images are encrypted in transit and at rest and are visible only to Lift verification staff.
- Staff compare the card to your face photo and your name. We do not share the images with other users, advertisers or any third party.
- Once verified, the images are deleted automatically after 90 days. We keep the card number so the same person cannot open a second account.
- If verification fails you may resubmit; if you close your account the number is deleted 12 months later (retained in case of disputes or legal requests).
5. Location — exactly when
Location is used only while the app is in use and: you are making a request, you have a live request, you have published or are driving a journey, or you are on a trip. Drivers also share location in the background, from Start journey to Journey complete and at no other time; passengers never share location in the background. Drivers' positions are sent every ~15 seconds during a journey so passengers can see the car approaching, and every 5 seconds while a monitoring or SOS event is open on the trip. We do not track you at other times. If you or the other party turns on Monitor with Ghana Police for a trip, or raises an SOS, the trip is shared live with Lift's safety desk and — under our agreement with the Ghana Police Service — with authorised police officers for the duration of that trip: your verified name, Ghana Card number, face photo, phone number, vehicle details, route and live position. Either party may turn monitoring on; neither can turn it off for the other. Nothing about an unmonitored trip is shared with the police except on a lawful written request.
6. What other users see about you
Other users see your first name, face photo and completed-trip count. Drivers additionally show their vehicle colour, make, model and number plate. Nobody on Lift sees your rating or score, your surname, phone number, Ghana Card, Mobile Money number or home address. Your rating is visible only to you and to Lift staff.
7. Who we share data with
| Recipient | What | Why |
|---|---|---|
| SMS provider (Hubtel) | Phone number | Sending sign-in codes |
| Payment provider (Hubtel) | Phone number, amount | Processing token purchases and MoMo payouts |
| Push notification service (Expo / Google / Apple) | Device token, notification text | Delivering notifications |
| Maps providers (Google; Apple Maps on iPhones) | Coordinates (never your name) | Drawing maps and routes |
| Cloud hosting and network security (Render, in Germany; Cloudflare, with uploaded files stored in the EU) | All service data, encrypted | Running the service |
| TotalEnergies Ghana (TomCard) | Driver name, TomCard number, load amounts | Loading fuel rewards onto your TomCard |
| Lift's response partner, once an agreement is in place: the Ghana Police Service or a licensed private security company (the app names which) | Verified identities, phone numbers, vehicle, route, live location, trip record | Only for trips placed under monitoring or escalated to SOS by you or the other party, for the duration of the event. Until an agreement is in place, Lift's own safety desk does this and no partner receives data |
| Courts, regulators, law enforcement | What the law requires | Legal obligation |
Each provider is bound by contract to use the data only for the purpose we give it. Where a provider stores data outside Ghana, we ensure protections equivalent to Act 843 and you consent to that transfer by accepting this policy. We never sell personal data and we do not share it with advertisers.
8. How we protect it
Encryption in transit (TLS) and at rest; identity documents in a separate encrypted store with access limited to verification staff and logged; one active device per account; sign-in codes that expire in 5 minutes; staff access on a need-to-know basis with every action recorded; regular backups; security testing before each major release. No system is perfectly secure; if a breach affects you we will notify you and the DPC without undue delay.
9. Your rights
Under Act 843 you can:
- Access — see the personal data we hold about you (in-app: Profile → Download my data).
- Correct — fix inaccurate data (most fields are editable in Profile; identity data via support).
- Delete — close your account and have your data erased, subject to the retention periods above that the law requires us to keep.
- Object / restrict — object to processing based on legitimate interest, including analytics.
- Withdraw consent — for anything based on consent (Ghana Card images, saved places, marketing). Withdrawing consent for identity verification means you can no longer use Lift, because verification is required for everyone's safety.
- Complain — to us first at
[privacy@…], and to the Data Protection Commission,[address / website / phone], if you are not satisfied.
We respond within 30 days.
9A. Your account — creation, inactivity and deletion
Creating an account. An account is created when you verify your mobile number with the one-time code. At that moment we store only your number, the device identifier and the time. Nothing else is collected until you choose to continue to identity verification; an account that never completes verification is deleted automatically after 30 days along with any partial uploads.
Re-registration. A Ghana Card number can be linked to one account at a time. If you open a new account with a card already on a closed account, we re-link your history (ratings, warnings, outstanding fees) rather than start you fresh, so accountability cannot be reset by re-registering.
Changing your number. You can move your account to a new mobile number from Profile, verified by codes sent to both numbers.
Inactive accounts. If you do not use Lift for 24 months we will email/SMS you, and after a further 60 days without a sign-in we close the account and delete it as below. Token balances on accounts closed this way are forfeited after the notice period unless the law requires otherwise.
Deleting your account. You can delete your account yourself at any time from Profile → Privacy → Delete my account, without contacting support (as the Apple and Google app stores also require). Before deletion the app shows you:
- any trip in progress or live request (deletion is blocked until it ends or you cancel it);
- your token balance and any points not yet redeemed, and that they will be forfeited;
- any unpaid fee;
- what we must keep and for how long (table below).
You confirm with a one-time code. Once the 7-day grace period described below has passed, deletion is processed as follows (times run from the end of the grace period):
| Data | What happens | When |
|---|---|---|
| Profile, photos, saved places, device, push token | Deleted | Within 72 hours |
| Ghana Card and driver document images | Deleted (if not already deleted after verification) | Within 72 hours |
| Identity numbers (Ghana Card, licence, plate) | Kept so the same identity cannot evade a suspension, then deleted | 12 months |
| Trip history, ratings | Anonymised — your name and photo removed; the other party's record of the trip keeps a placeholder ("deleted user") | Within 72 hours |
| Token purchases, redemptions, payouts | Kept as financial records (required by law), without your name linked after the retention period | 7 years (to be confirmed by counsel) |
| Reports, warnings, safety events involving you | Kept for investigations and legal defence | 3 years |
| Consent records | Kept as proof of what you accepted | 6 years |
| Backups | Overwritten on the normal backup cycle | Within 35 days |
We confirm by SMS and email when deletion is complete. There is a 7-day grace period during which signing in again cancels the deletion; after that it cannot be reversed.
Deletion by us. If we close your account for breach (Part B, clause 12) the same deletion schedule applies, except that identity numbers and the record of the breach are kept for the full retention period so that a suspended person cannot return under a new account.
10. Children
Lift is for adults. You must be 18 or over to hold an account; the Ghana Card check enforces this. We do not knowingly collect data from children.
11. Automated decisions
The app matches passengers to drivers and orders requests using automated scoring (walking distance, timing, ratings, reliability). These decisions affect who sees your request first in rush hour; they do not exclude anyone from the service. You can ask us to explain a specific matching decision.
12. Changes
We will notify you in the app at least 14 days before a material change takes effect and ask you to accept the new version. Older versions are available on request.