RIDEX ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the RIDEX platform — including our mobile apps and website. By using RIDEX, you agree to the collection and use of information in accordance with this Policy. This Policy applies to all users: Customers, Riders, and Logistics Companies.

We collect the following types of information: Account Information: • Full name, email address, and phone number • Profile photo (optional) • Government-issued ID (for riders and company directors) Location Data: • Real-time GPS location of riders during active deliveries • Pickup and drop-off addresses entered when placing orders Payment & Transaction Data: • Delivery fee payments and wallet top-ups • COD transaction records • Withdrawal requests and bank account details Device & Usage Data: • Device type, operating system, and app version • Push notification tokens (Expo push tokens) • Usage logs and in-app activity Business / Company Data: • Company name, CAC registration details • Business address and contact information • Rider roster and earnings data

We use your information to: • Create and manage your account • Process delivery orders and match riders • Calculate and collect delivery fees • Enable real-time tracking during deliveries • Send push notifications for order updates • Process payments and manage in-app wallets • Verify identities and prevent fraud • Resolve disputes and respond to support requests • Improve platform performance and user experience • Comply with legal and regulatory obligations We do not use your information for unrelated marketing purposes without your consent.

RIDEX collects real-time location data from riders during active deliveries. This data is used to: • Show customers live tracking of their delivery • Calculate accurate ETAs • Verify delivery routes and completion Rider location is only tracked when a delivery is active. Location tracking stops once the delivery is confirmed or cancelled. Customers can see the rider's approximate location during delivery but do not have access to historical location data.

We do not sell your personal data. We may share your information with: Service Providers: • Payment processors (Flutterwave) to handle transactions • Cloud infrastructure and database providers (Supabase) • Push notification services (Expo) to deliver order alerts Within the Platform: • Rider names and vehicle info are shared with customers during active deliveries • Business sender info is visible to assigned riders for COD deliveries • Company admins can view rider profiles and earnings within their company Legal & Compliance: • We may disclose data to law enforcement or regulatory bodies if required by Nigerian law or court order • We may share data to investigate fraud, abuse, or safety threats All third-party providers are bound by data processing agreements and may only use your data to provide services to RIDEX.

We retain your data for as long as necessary to provide our services: • Active account data: retained while your account is active • Delivery and transaction records: 60–90 days after completion • Financial records: may be retained longer for tax and legal compliance • Fraud or dispute records: retained as long as necessary for resolution When you delete your account, personal data is scheduled for deletion within 60–90 days, or anonymised where full deletion is not possible (e.g. financial audit trails).

We take appropriate technical and organisational measures to protect your personal information, including: • Encrypted data transmission (HTTPS/TLS) • Secure database access controls via Supabase Row-Level Security • Server-side payment verification (no raw card data stored on our servers) • Regular security reviews and access audits While we implement strong safeguards, no system is completely immune to breaches. In the event of a data breach affecting your rights and freedoms, we will notify affected users and relevant authorities as required by law.

You have the following rights regarding your personal data: • Access: Request a copy of the personal data we hold about you • Correction: Request correction of inaccurate or incomplete data • Deletion: Request deletion of your account and associated data (see Account Deletion in our Terms) • Portability: Request your data in a portable format where technically feasible • Objection: Object to certain types of data processing To exercise any of these rights, contact RIDEX support through the app or at support@ridex.app. We will respond within 30 days.

RIDEX uses Expo push notifications to send you order updates, delivery status alerts, and important account notifications. • You can manage notification preferences within your device settings • Disabling notifications will not affect your ability to use the app, but you may miss important delivery updates • Push notification tokens are stored securely and used solely to deliver relevant in-app communications

RIDEX is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has created an account, we will delete the account and associated data promptly. If you believe a minor has provided us with personal information, please contact support@ridex.app.

We may update this Privacy Policy from time to time. When we do: • The "Last Updated" date will be revised • For significant changes, we will notify users through the app or email Continued use of RIDEX after changes are published means you accept the updated Policy. If you do not agree, you should stop using the platform and request account deletion.

If you have questions, concerns, or requests related to this Privacy Policy, please contact us: • In-App: Open the RIDEX app → Support → Send a message • Email: support@ridex.app • Operating Region: Ilorin, Nigeria (expanding soon) We aim to respond to all privacy-related requests within 30 days.