WorkRydeworkryde
Privacy

Privacy policy.

Last updated 19 June 2026.

1. Who controls your data

Workryde is a product of Parzo Limited, a private limited company incorporated in Kenya with its registered office in Nairobi. Parzo Limited is the data controller responsible for the personal data described in this policy. Where this policy refers to “we”, “us” or “Workryde”, it means Parzo Limited.

2. What we collect and why

We collect the following categories of personal data:

  • Identity data — full name, profile photo, and date of birth (for age verification). Required to create your account.
  • Contact data — work email address and mobile phone number. Used to verify your employment, send OTPs, and notify you about rides.
  • Employment data — your employer name and work location. Used to match you with verified coworkers on your commute route.
  • Location data — your saved home and work addresses, and real-time GPS location during an active ride. Real-time location is shared with your matched co-passengers and is purged 30 days after the ride completes.
  • Driver documents — driving licence photo, national ID or passport, vehicle registration certificate, and vehicle photos. Required for driver verification and retained for the duration of the driver relationship.
  • Financial data — M-Pesa phone number, wallet top-up records, fare transactions, and payout history. We do not store card numbers or full M-Pesa PINs.
  • Usage data — ride history, app interactions, crash reports, and aggregated analytics. Used to improve the platform.
  • Communications — messages sent through the in-app ride chat. Ride chat is retained for 24 hours then deleted automatically.

3. Legal basis for processing

We process your personal data under the Kenya Data Protection Act 2019 on the following bases:

  • Contract performance — to provide the carpooling service you signed up for, including matching, routing, billing, and payouts.
  • Legitimate interests — to prevent fraud, maintain platform safety, and improve our product, where those interests are not overridden by your rights.
  • Legal obligation — to retain financial records as required by Kenyan tax law.
  • Consent — for optional features such as SOS location sharing with emergency contacts or promotional communications.

4. How we use your data

  • Verify your identity and employment before you join a company group.
  • Match you with verified coworkers travelling the same route.
  • Display your name, photo, and rating to matched co-passengers.
  • Process payments, issue refunds, and pay out drivers.
  • Send ride confirmations, OTPs, and service notifications via SMS and email.
  • Share your real-time location with matched co-passengers during an active ride, and with your nominated emergency contacts if you trigger an SOS.
  • Detect and prevent fraud, abuse, and unsafe behaviour on the platform.
  • Comply with requests from law enforcement or regulatory authorities.

5. Who we share your data with

We do not sell your personal data. We share it only as follows:

  • Co-passengers on your ride — your name, photo, and rating are visible to matched riders. Your phone number is not shared.
  • Payment processors — Safaricom (M-Pesa) to process wallet top-ups and payouts. Their privacy practices are governed by their own policy.
  • Cloud infrastructure — Google Firebase (Firestore, Cloud Functions, Cloud Storage) for data storage and backend processing. Data is stored in the Europe-West region.
  • Communications providers — SMS gateways for OTP and notification delivery.
  • Law enforcement — if required by a valid court order or equivalent legal instrument under Kenyan law.

6. Data retention

  • Account data is retained until you delete your account.
  • Ride location history is purged 30 days after ride completion.
  • In-app chat messages are deleted 24 hours after the ride ends.
  • Financial transaction records are retained for seven years as required by the Kenya Revenue Authority.
  • Driver verification documents are retained for the duration of the driver relationship and up to two years after it ends.

7. Cookies and device data

The Workryde mobile app does not use browser cookies. The Workryde website (workryde.com) uses only essential first-party cookies required for the site to function. We do not use advertising or tracking cookies.

8. Your rights

Under the Kenya Data Protection Act 2019, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion of your data, subject to legal retention requirements.
  • Object to processing based on legitimate interests.
  • Withdraw consent for optional processing at any time.
  • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

You can delete your account from inside the app. All personal data is wiped within 30 days of deletion, except financial records required by law.

9. Data security

All data in transit is encrypted with TLS 1.2 or higher. Data at rest is encrypted using AES-256 via Google Cloud Storage. Access to production data is restricted to authorised staff and is logged. We conduct periodic security reviews.

10. Children

Workryde is not intended for users under the age of 18. We do not knowingly collect personal data from children. If we discover we have done so, we will delete it promptly.

11. Changes to this policy

We will notify you of material changes to this policy by email or in-app notification at least 14 days before they take effect.

12. Contact us

For any privacy questions or to exercise your rights, contact our data protection team at privacy@workryde.com. We will respond within 21 days.