Version 2026-11-01 · in force from 1 November 2026
Privacy policy
This policy explains how PwaniTaxi (“PwaniTaxi”, “we”) collects and uses personal data when you book seats, private trips or parcels with us on https://pwanitaxi.cloud/, or when you drive for us. We follow Kenya’s Data Protection Act, 2019 and its regulations.
1. Who we are
PwaniTaxi decides how your data is used and is the data controller.
Our booking system is run for us by Safiri (“Safiri”), which acts as our data processor: it stores and processes data only to provide the service to us, under a written agreement that includes the safeguards the Act requires.
Your sign-in (your phone number and password) works with every business that uses Safiri, so you don’t need a new account for each. Public registration does not verify phone ownership; register only a number that belongs to you. Each business sees only the bookings made with it.
2. In short
- We collect what we need to get you on your trip: your phone number, your name, your bookings and how you paid.
- We never see your M-Pesa PIN, and we don’t sell your data or use it for advertising.
- Your driver sees your name, phone number and pick-up point so they can find you.
- Riders’ locations are not collected. Drivers’ locations are shared with their passengers while the driver is online.
- You can download your data or delete your account yourself, any time: https://pwanitaxi.cloud/account/delete.
- Trip and payment records are kept for 5 years because tax law requires it.
- Tunakusanya tu kinachohitajika kwa safari yako: namba ya simu, jina, safari ulizohifadhi na jinsi ulivyolipa.
- Hatuoni PIN yako ya M-Pesa, na hatuuzi taarifa zako.
- Dereva wako anaona jina lako, namba yako na mahali pa kukuchukua.
- Unaweza kupakua taarifa zako au kufuta akaunti yako wakati wowote: https://pwanitaxi.cloud/account/delete.
- Rekodi za safari na malipo huhifadhiwa kwa miaka 5 kama sheria ya kodi inavyotaka.
3. What we collect
| Data | When | Details |
|---|---|---|
| Phone number | When you register, sign in or book | Used with your password to sign you in and to identify bookings. If you choose M-Pesa, it is used for the payment prompt. |
| Password | When you register or set up your account | Stored as a salted scrypt hash; we cannot read the password back. Password setup and recovery links are issued by support after identity verification. |
| Name | When you register | Shown to your driver and on your receipts. You can change it in your profile. |
| Bookings | Each booking | Pick-up and drop-off (a station, or an address for a private trip), date and time, seats, vehicle type, fare, discounts, status, any note you add, ratings and reviews. Your boarding PIN is shown only to you and stored so the driver can check it. |
| Payments | When you pay | For cash: that you paid and to which driver. We never receive card numbers or your M-Pesa PIN. |
| Parcels | When you send one | The recipient’s name and phone number (they get a collection code by SMS), a description of the parcel, its size and any value you declare. |
| Travel credit and invitations | If you use them | Credit added or used, and whether someone joined using your invitation link (not their trips). |
| Messages | When you use messaging features | No external SMS delivery is currently configured. |
| Drivers | If you drive for us | Your name, phone, photo if provided, vehicle, trips, ratings, earnings, cash collected and payouts, and your location while you are online so passengers can see the shuttle coming. |
| Technical data | When you use the site or app | A sign-in cookie, the type of device and browser (to list where you are signed in), and your IP address, kept with password sign-in attempts to stop abuse. We use no advertising or analytics trackers. |
We do not collect riders’ location, contacts, photos or files from your phone.
4. Why we use it
| Purpose | Legal basis (Data Protection Act, s.30) |
|---|---|
| Taking and managing your bookings, assigning drivers, boarding, receipts and support | Performing our contract with you |
| Taking payments and paying refunds | Performing our contract; legal obligation |
| Keeping accounting and tax records | Legal obligation (Tax Procedures Act) |
| Showing passengers where their shuttle is (drivers’ location) | Performing the contract with passengers; our legitimate interest in safe, on-time service |
| Preventing fraud and misuse (password sign-in limits, one first-trip offer per number) | Legitimate interest |
| Improving routes, timetables and fares from booking statistics | Legitimate interest (we use totals, not individual profiles) |
| Telling you about offers | Your consent — we only send promotional messages if you ask for them, and you can stop them any time |
| Responding to lawful requests from authorities | Legal obligation |
We don’t make decisions about you that have legal or similarly significant effects by automated means alone.
5. Who we share it with
- Your driver — your name, phone number, pick-up and drop-off, seats and payment status for that trip only.
- Parcel recipients — the sender’s name and the parcel reference, by SMS.
- Safiri — our booking-system provider, as our processor, and the companies it uses to host the service and store encrypted backups.
- OpenStreetMap — map images are loaded from OpenStreetMap’s servers, which see your device’s IP address when a map is shown.
- Authorities — the police, NTSA, the Kenya Revenue Authority or a court, when the law requires it.
- A buyer of our business — if the business is sold, under the same protections.
We don’t sell personal data, and we don’t share it for anyone else’s marketing.
6. Data outside Kenya
Our booking system’s servers may be located outside Kenya. Where data is processed outside Kenya we rely on the safeguards in sections 48 to 50 of the Data Protection Act: contracts that require the same level of protection, encryption in transit, and access limited to what is needed to run the service.
7. How long we keep it
| Data | Kept for |
|---|---|
| Your account (phone number and name) | Until you delete it |
| Trip, parcel and payment records | 5 years from the trip (tax law). After that, notes, reviews, private-trip addresses, parcel recipients and payment phone numbers are removed automatically. |
| Outgoing notification log | 90 days |
| Password setup/reset links | 30 minutes (single-use; expired tokens are removed after 30 days) |
| Sign-in sessions | 30 days after your last visit |
| WhatsApp conversation steps | 24 hours |
| Payment provider callbacks (full M-Pesa messages) | 1 year — the amount and receipt code stay with the payment record |
| A driver’s last known position | 30 days after they were last online |
| Privacy requests and how we answered them | 2 years after they were closed |
| A one-way code made from a deleted account’s number (to stop repeat new-customer offers) | 2 years |
| Backups of the whole system | Replaced on a rolling basis within 12 months |
8. Your rights
Under the Data Protection Act you have the right to be told how your data is used, to get a copy of it, to have it corrected, to have it deleted, to object to or restrict its use, to take it elsewhere, and to withdraw consent you gave. Most of this you can do yourself:
- Get a copy of your data — Profile → Your data → Download my data (a file you can open or move to another service).
- Correct your name — Profile → Edit. For anything else, contact us.
- Delete your account — Profile → Your data → Delete my account, or on the web at https://pwanitaxi.cloud/account/delete. Signed-in users confirm with their password and any enabled second factor. Signed-out users submit a support request for identity verification. Upcoming trips are cancelled and refunds you are owed are still paid.
- Sign out everywhere — Profile → Your data → Sign out of all devices.
- Everything else, or if you no longer have your number — use the request form at https://pwanitaxi.cloud/account/delete#request or contact us below. We may ask you to prove who you are. We answer within 14 days, and always within the time the law allows.
Deleting your account removes your name and number from our records. Trip and payment records that the law requires us to keep stay for the period above, without your name or number.
9. How we protect it
- All connections are encrypted (HTTPS). Passwords, session keys and password setup tokens are stored only as one-way hashes; boarding PINs and parcel codes are kept out of our message logs.
- Staff see only what their role needs: drivers see only their own passengers, and each business sees only its own customers.
- Every action on a booking is logged. The system is backed up daily and backups are encrypted.
- If a breach puts your data at risk we will tell the Data Commissioner within 72 hours and tell you without undue delay, as section 43 of the Act requires.
10. Children
Accounts are for people aged 18 and over. Children travel on a booking made by an adult, who gives us only the details needed for the trip. If you think a child has given us personal data, contact us and we will delete it.
11. Cookies, storage and the app
| Name | What it does | How long |
|---|---|---|
pt_session (cookie) | Keeps you signed in. Only our server can read it. | 30 days after your last visit |
| Language, business and invitation choices (local storage) | Remembers English/Kiswahili, which business’s site you use, and an invitation code until you sign up. | Until you clear it |
| Offline copy of the site (service worker) | Lets the site open quickly and on a weak connection. | Until the next update |
There are no advertising or third-party tracking cookies.
12. Changes to this policy
We will update this page when our practices change, and change the version date at the top. If a change affects how we use data you have already given us, we will tell you in the app or by SMS before it applies. The version you agreed to is recorded when you sign in.
13. Contact us and complaints
If you are not happy with how we handle your data, please contact us first. You can also complain to the Office of the Data Protection Commissioner: www.odpc.go.ke.