Your movement should not become everybody's business.

Scope

Who and what this notice covers.

This notice applies to the Yellow Yellow mobile apps, public website and founding-pilot services used by passengers, drivers and vehicle owners in Ghana.

Information collected

Only information connected to a defined service need.

All account holders

• Verified phone number, account identifiers, device session and security records.
• Name and profile details supplied during setup, including an optional passenger or owner profile photo.
• Support, safety, complaint and feedback information you choose to provide.

Passenger and trip information

• Pickup, destination, live trip location, route, fare, payment method and ride status.
• Saved places and recent destinations associated with your trusted account.
• Trip chat, approved calling records, ratings and review information where enabled.
• An optional trusted-contact name, phone number and revocable live-trip link record when you enable sharing.

Driver and vehicle information

• Driver profile, vehicle registration relationship, vehicle type and colour.
• A clear driver recognition photo shown only to the matched passenger during an active ride.
• The configured primary operating area used to limit normal pickup assignments.
• Self-declared expiry dates for driver's licence, motor insurance and roadworthy certificate reminders.
• Driver location while online or completing an authorised trip, plus trip and assignment history.

Owner and commercial information

• Owner profile and lawful relationship to linked vehicles and drivers.
• Phone-bound access periods, payments, receipts, reversals and reconciliation records.
• For the controlled real-payment pilot: reimbursement consent version and time, budget reservation, provider refund status, expected date, exception history and accounting evidence.
• A short-lived website checkout token after SMS verification. The website does not receive or store your MoMo PIN.
• Driver-approved linked-vehicle movement and aggregate completed-trip and quoted-fare totals during an active 24-hour consent window.
• Monitoring requests, decisions, expiry and revocation records used to prove consent.

Purpose

How Yellow Yellow uses information.

• Verify accounts, protect one-active-device sessions and control access to passenger, driver and owner tools.
• Find nearby available drivers, calculate routes and fares, assign rides and show trip progress.
• Help a matched passenger recognise the assigned driver without recurring selfie checks or biometric face matching.
• Support trip communication, safety review, incident handling, fraud prevention and dispute resolution.
• Provide vehicle and document-expiry reminders without replacing state-agency enforcement.
• Process phone-bound access payments, issue receipts and maintain accounting and tax evidence.
• Reserve pilot reimbursement budget before collection, initiate the promised reimbursement after verified payment, prevent duplicate pilot claims and investigate uncertain provider outcomes.
• Measure reliability, demand, growth and service quality using aggregated or minimised information where possible.
• Improve accessibility, pricing fairness and product decisions under documented AI and human-approval rules.

Yellow Yellow does not set a passenger's fare from their inferred income, phone model, neighbourhood, urgency, disability or another private personal characteristic.

Location

Live location has strict boundaries.

Passenger location helps set pickup, display nearby drivers, route the assigned vehicle and support trip safety. Driver location helps match requests, navigate to pickup and destination, and show authorised trip progress.

• Background driver location should run only under disclosed service conditions and technical controls.
• A passenger sees the assigned vehicle's relevant approach and trip progress, not an unrestricted driver history.
• An Owner sees linked-vehicle movement and aggregate trip/quoted-fare totals only after a fresh Driver decision and only for the next 24 hours.
• The Driver may decline or revoke Owner monitoring; it never renews automatically.
• A Passenger or Driver may create a live-trip link for a trusted contact. The app opens the phone's share sheet and never sends the link automatically.
• Trusted-contact links expire when the trip ends, when revoked, when the user changes the sharing preference, or at their maximum safety timeout.
• After a passenger's trip starts, the passenger app stops repeatedly requesting or drawing route paths under the founding cost-control design.

Service providers

Information is shared only for a defined function.

Yellow Yellow may use service providers for cloud hosting, maps and routes, SMS verification, push notifications, payments, app distribution, security, analytics and professional legal or accounting support. Paystack receives the payer phone, transaction amount, currency, merchant reference and information needed to process MoMo collection and reimbursement; it does not require Yellow Yellow to collect your MoMo PIN. Each provider should receive only the information needed for its authorised role.

Information may also be disclosed when required by lawful authority, to protect a person from serious harm, to investigate fraud or a safety incident, or as part of a legally governed business transaction. Yellow Yellow does not sell private trip or identity information for advertising.

Retention

Keep what is necessary, then delete or anonymise it.

Retention depends on the information's operational, safety, dispute, accounting, tax, fraud-prevention or legal purpose. Yellow Yellow is documenting a formal retention schedule before unrestricted launch.

• Recent passenger destinations are designed to expire after a limited period unless deliberately saved.
• Financial and tax evidence may be kept for legally required periods.
• Pilot reimbursement consent, payment, provider-event and ledger records may be retained with the related financial evidence to prove that the promised reimbursement was handled.
• Identity and safety records require stronger access restrictions and purpose review.
• Aggregated or anonymised statistics may be retained when they no longer identify a person.

Security

Layered protection, not a single password.

Yellow Yellow uses phone verification, device-bound revocable sessions, role-based access, private storage, encrypted or protected sensitive fields, database constraints, audit records and controlled administrator functions. No system can promise absolute security, so suspected incidents are contained, assessed, documented and escalated under the breach-response process.

Never send OTP codes, payment secrets, profile photos, identity documents or private trip details through the public-information assistant or public social channels.

Your choices

Access, correction and account concerns.

Subject to applicable Ghanaian law and proportionate identity verification, users may request access to relevant personal information, correction of inaccurate records, deletion where no overriding retention duty applies, or review of an account or automated outcome.

Some location permissions may be managed through the phone's settings, but disabling required location access can prevent nearby-driver discovery, driver matching or live trip functions.

Requests & contact

Use a monitored channel for privacy and support requests.

Email support@yellowyellowmobility.com and put Privacy request in the subject. During invited testing, you may also use the in-app support route supplied with the pilot instructions. The proposed principal office is House No. GU207, Kanville-Tunayille, Tamale, Northern Region, Ghana; it becomes the registered office only if accepted in the incorporation filing.

The Public Information assistant can explain approved privacy principles, but it cannot receive identity documents, authenticate data-rights requests or decide a private account matter.