Draft, pending review by a Nigerian lawyer. Available in English only.
Mendifier Innovations Ltd · Last updated: 24 October 2026
This Privacy Policy explains how Mendifier Innovations Ltd ("Mendifier", "we", "us") collects, uses and protects personal data when you use the GO app and website ("GO"). We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and related regulations.
1. Personal data we collect
- Account data: phone number, name, email address, profile photo, and, if you use Google sign-in, your Google account name, email and identifier.
- Verification data: one-time codes and delivery status for SMS/WhatsApp verification.
- Location data: precise location while you request a trip and during an active trip or delivery; for Driver Partners, while online in the app.
- Trip data: pickup and drop-off points, routes, times, fares, ratings, delivery item descriptions and photos.
- Payment data: payment method details and transaction records, processed by our payment providers. We do not store full card numbers.
- Driver Partner data: identity documents, driver's licence, vehicle details, bank details and results of onboarding checks.
- Device and usage data: device model, operating system, app version, IP address, crash logs and in-app activity.
- Communications: messages with support and between Customers and Driver Partners through GO.
2. Purposes and lawful basis of processing
- To create and secure your account and provide rides and deliveries (performance of contract).
- To process payments and commission, and keep financial records (contract and legal obligation).
- To keep users safe, verify Driver Partners, prevent fraud and handle incidents (legitimate interests and legal obligation).
- To improve GO, provide support and send service messages (legitimate interests).
- To send marketing, where you have agreed (consent, which you can withdraw at any time).
3. Disclosure to other users
When a trip is matched, we share what is needed to complete it: Customers see the Driver Partner's first name, photo, rating, vehicle and plate number, and live location; Driver Partners see the Customer's first name, rating, pickup and drop-off locations and, for deliveries, recipient details. Phone contact may be provided through the app. If you share your trip with contacts, they see your trip status and location.
4. Data processors
We use trusted providers who process data on our behalf under contract, including:
- Twilio for SMS and WhatsApp verification codes;
- Resend for email;
- Google for sign-in and maps/location services;
- Railway for application hosting and databases;
- Payment providers for processing payments and payouts.
We may also disclose data to law enforcement or regulators where required by law, to protect safety, or in connection with a merger or sale of our business. We do not sell your personal data.
5. Cross-border transfers
Some providers store or process data outside Nigeria. Where this happens we rely on safeguards permitted under the NDPA, such as adequacy, contractual protections or your consent.
6. Data retention
We keep personal data only as long as needed for the purposes above. Account data is kept while your account is active. Trip and payment records are generally kept for up to 6 years for tax, accounting and legal purposes. Verification codes expire within minutes and delivery logs are kept for a limited period. Location data not tied to a trip record is deleted or anonymised. When you delete your account, we delete or anonymise your data unless we must keep it by law or to resolve disputes or safety matters.
7. Security of personal data
We use technical and organisational measures such as encryption in transit, access controls and rate limiting. No system is completely secure; if a breach affects your rights, we will notify you and the Nigeria Data Protection Commission as required by law.
8. Rights of data subjects
You have the right to:
- be informed about and access your personal data;
- correct inaccurate or incomplete data;
- have your data deleted;
- restrict or object to certain processing, including direct marketing;
- data portability;
- withdraw consent at any time, without affecting earlier processing;
- not be subject to decisions based solely on automated processing that significantly affect you;
- lodge a complaint with the Nigeria Data Protection Commission (NDPC).
To exercise these rights, email hello@mendifier.com. We may need to verify your identity and will respond within the time required by law.
9. Location permissions
You can control location access in your device settings. GO needs location to arrange pickups and track trips, so some features will not work without it.
10. Children
GO is not intended for children under 18 without a parent or guardian. We do not knowingly collect children's data without appropriate consent.
11. Changes
We may update this policy and will post the new version here with a new "Last updated" date, and notify you in the app of material changes.
12. Data controller contact and complaints
The data controller is Mendifier Innovations Ltd. You may also complain to the Nigeria Data Protection Commission (NDPC).
For privacy questions or requests, email hello@mendifier.com. See also our Terms of Service.