WorkRyde
Privacy

Privacy policy.

Last updated 30 July 2026.

1. Who controls your data

Workryde is a product of Parzo Limited, a private limited company incorporated in Kenya with its registered office in Nairobi. Parzo Limited is the data controller responsible for the personal data described in this policy. Where this policy refers to “we”, “us” or “Workryde”, it means Parzo Limited.

2. What we collect and why

We collect the following categories of personal data:

  • Identity data: your full name, a chosen avatar or an optional profile photo you upload, and gender, which is used only to pick an avatar. Required to create your account. We do not ask for your date of birth.
  • Contact data: work email address and mobile phone number. Used to verify your employment, send one-time codes, and notify you about rides.
  • Employment data: your employer, derived from your work email domain, and your work location. Used to confirm you are eligible to use the platform and to show your employer on a ride listing.
  • Location data: your saved home and work addresses, and your device location while you have an active ride or have switched on driver availability. Position readings are also kept short term to adjudicate route complaints, described in section 6.
  • A selfie: drivers are prompted to take a selfie in the app during sign-up. It is stored against your account and readable only by you and our staff. Taking it is skippable. We do not collect driving licences, national identity cards, passports, vehicle registration certificates, or photographs of your vehicle.
  • Vehicle data: if you drive, we store the make, model, colour, number plate, body type and seat count, all typed or picked in the app. No documents, no photographs.
  • Financial data: the M-Pesa phone number you register, wallet top-up records, fare transactions, and payout history. We do not store card numbers or M-Pesa PINs.
  • Usage data: ride history, app interactions, crash reports, and aggregated analytics. Used to improve the platform.
  • Communications: messages sent through the in-app ride chat. Ride chat is deleted automatically 24 hours after the ride ends. There is no audio or video recording anywhere in Workryde.

3. Legal basis for processing

We process your personal data under the Kenya Data Protection Act 2019 on the following bases:

  • Contract performance: to provide the carpooling service you signed up for, including matching, routing, billing, and payouts.
  • Legitimate interests: to prevent fraud, adjudicate route and pickup complaints, maintain platform safety, and improve our product, where those interests are not overridden by your rights.
  • Legal obligation: to retain financial records as required by Kenyan tax law.
  • Consent: for optional features such as sharing your location with emergency contacts through SOS, generating a trip-share link, turning on Hail-Down, or receiving promotional messages.

4. How we use your data

  • Verify your work email before you can use the platform.
  • Show you rides whose stages are near you, and show drivers who booked a seat.
  • Display your name, avatar, employer and rating to other users on a ride.
  • Process payments, issue refunds, and pay out drivers.
  • Send ride notifications and one-time codes by SMS and email.
  • Confirm a pickup happened, using position readings from both phones and, during the pickup window only, a short-range Bluetooth proximity check.
  • Compare a driver's recorded position readings against the route they posted when a rider reports a diversion or a missed stop.
  • Share your location with your nominated emergency contacts, by SMS, if you trigger an SOS.
  • Detect and prevent fraud, including faked device location.
  • Comply with requests from law enforcement or regulatory authorities.

5. Who we share your data with

We do not sell your personal data. We share it only as follows:

  • Other users on your ride: your name, avatar, employer and rating are visible to the driver and co-riders. Drivers additionally show their vehicle make, model, colour and number plate.
  • Anyone holding a trip-share link you created: a link you generate exposes the ride status, your route, the driver's name and photo, the vehicle including its number plate, and the driver's live position, to whoever has the link. It requires no account. Links expire after the period you choose, up to 12 hours, and you can revoke one early from the app.
  • Your emergency contacts: if you trigger an SOS, each contact you saved is sent an SMS containing your name and a map link to your location.
  • Payment processor: Safaricom (M-Pesa) for wallet top-ups and payouts. Their privacy practices are governed by their own policy.
  • Cloud infrastructure: Google Firebase (Firestore, Realtime Database, Cloud Functions, Cloud Storage) for storage and backend processing, in a European region, and Google Maps Platform for geocoding, place search and route calculation.
  • Communications providers: TextSMS Kenya for SMS delivery and Brevo for transactional email.
  • Law enforcement: if required by a valid court order or equivalent legal instrument under Kenyan law.

6. Data retention

  • Account data is retained until you delete your account.
  • In-app chat messages are deleted 24 hours after the ride ends.
  • Short-term driver position tracks used to adjudicate route complaints are held for about three hours and then discarded.
  • Position readings kept for Hail-Down matching and dispute history are deleted after 30 days.
  • Trip-share links stop resolving at their expiry and are not re-issuable.
  • Financial transaction records are retained for seven years as required by the Kenya Revenue Authority.
  • A driver selfie is retained for as long as the account is a driver account, and up to two years after it stops being one.

7. Cookies and device data

The Workryde mobile app does not use browser cookies. The Workryde website (workryde.com) uses only essential first-party cookies required for the site to function. We do not use advertising or tracking cookies. Trip-share pages on this site are excluded from search engines.

8. Your rights

Under the Kenya Data Protection Act 2019, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion of your data, subject to legal retention requirements.
  • Object to processing based on legitimate interests.
  • Withdraw consent for optional processing at any time.
  • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

You can delete your account from inside the app, or follow the steps on our account deletion page. Personal data is wiped within 30 days of deletion, except financial records we are required to keep.

9. Data security

Data in transit is encrypted with TLS. Data at rest is encrypted by Google Cloud. Access to production data is restricted to authorised staff and is logged. Fields that affect money or account status are writable only by our backend, never by an app. We conduct periodic security reviews.

10. Children

Workryde is not intended for users under the age of 18. We do not knowingly collect personal data from children. If we discover we have done so, we will delete it promptly.

11. Changes to this policy

We will notify you of material changes to this policy by email or in-app notification at least 14 days before they take effect.

12. Contact us

For any privacy questions or to exercise your rights, contact our data protection team at privacy@workryde.com. We will respond within 21 days.