Politique de confidentialité

This Privacy Policy applies to the mobile applications titled "LawalGo" (including passenger and driver interfaces published on the Google Play Store and Apple App Store), our official website at https://lawalgo.africa, and all associated cloud APIs and dispatch services.

Data Controller: The entity responsible for the collection and processing of your personal information is LawalGo, located at Route des Almadies, Dakar, Senegal. For any data protection inquiries, you may contact our dedicated Data Protection Officer at privacy@lawalgo.com.

Location data is fundamental to the core operations of the LawalGo carpooling platform. Here is how your location data is collected and used:

• Foreground Location (Passengers and Drivers): While the application is open and on your screen, we access precise location (GPS and network-based) to detect your current position, display available rides nearby, autocomplete pickup and drop-off addresses, and calculate exact travel distances.
• Background Location (Drivers During Active Trips): When a driver starts an active trip with confirmed passengers, LawalGo continues to collect location data in the background (even when the app is minimized, the driver switches to a phone call, or the device screen is locked). This continuous background telemetry is necessary to:
  • Provide waiting passengers with accurate, real-time vehicle ETAs on the live map.
  • Record verified route compliance and calculate exact fare milestones.
  • Power emergency safety tracking and live trip sharing with passenger families.
• Termination of Tracking: Location tracking ceases immediately once a ride is completed or cancelled, or when a driver goes offline.
• No Advertising or Resale: Location coordinates are never sold, never rented, and never shared with advertising networks or third-party data aggregators.

In accordance with Google Play Developer Policy regarding Device & Network Abuse and Sensitive Permissions, we transparently disclose all hardware access requested by the LawalGo app:

We collect personal information that you provide directly, data generated through your use of the service, and technical metadata:

• Identity & Account Details: Legal name, telephone number (verified via SMS One-Time Password), email address, profile photo, gender, and travel preferences (e.g. music, chattiness, smoking policy).
• Driver Regulatory Documents: National Identity Card (CNI or ECOWAS biometric passport), driving licence, vehicle registration certificate (carte grise), roadworthiness inspection (visite technique), and third-party automobile insurance policy.
• Trip & Booking Records: Departure points, destinations, date and time, fare amounts, number of seats, pickup milestones, route taken, and ratings/reviews left by other users.
• Communications & Support: In-app chat messages between matched drivers and passengers, customer support messages, and lost & found inquiries.
• Device & Analytics Telemetry: Mobile device brand and model, operating system version, unique device identifier (UUID), IP address, app language, and Firebase Crashlytics diagnostic logs.

We process your information in accordance with Senegalese Law No. 2008-12 under the following lawful grounds:

• Contractual Performance: Creating your account, matching you with compatible drivers or passengers, executing ride bookings, and settling cost-sharing payments.
• Legitimate Interests: Verifying driver credentials, conducting fraud prevention, improving route efficiency, maintaining application security, and resolving passenger support tickets.
• User Consent: Accessing GPS location, sending promotional updates, and capturing camera photos for profile verification. You may withdraw consent at any time.
• Legal & Regulatory Compliance: Retaining financial transaction ledgers for tax and audit purposes as mandated by Senegalese commercial laws and responding to lawful requests from law enforcement authorities.

In accordance with Google Play's Financial Services and Personal Data policies, we uphold strict standards of payment security:

• Mobile Money (Wave, Orange Money, Free Money): When you fund your wallet or pay via Mobile Money, we record the telephone number, transaction ID, and timestamp to reconcile payments. We never access or store your private Mobile Money secret PIN.
• Credit and Debit Cards: All card payments are tokenized and processed through PCI-DSS Level 1 certified payment gateways (Stripe, Paystack, Razorpay). LawalGo does not store your 16-digit card number or CVV/CVC security code on our servers.
• In-App Wallet: Funds in your LawalGo digital wallet are maintained in secure escrow accounts and can be used for ride bookings or withdrawn by verified drivers.

To ensure high-performance geolocation, secure authentication, and cloud reliability, the LawalGo application embeds vetted third-party software development kits (SDKs). These third parties process data strictly on our behalf:

In accordance with Google Play's User Data policy regarding account and data deletion, we provide multiple easy, transparent ways to delete your account:

Option A: Delete Inside the Mobile App

1. Open the LawalGo mobile application.
2. Navigate to the Profile tab in the main bottom navigation.
3. Tap Account Settings or Edit Profile.
4. Scroll to the bottom and select Delete Account.
5. Confirm your identity via the One-Time Password (OTP) sent to your registered phone number.

Option B: Request Deletion via Web Portal

If you have uninstalled the app or lost your mobile device, you can submit an account erasure request online at https://lawalgo.africa/delete-account or by sending an email to delete-account@lawalgo.com from your registered email address.

What Data is Deleted vs. Retained?

• Permanently Deleted: Profile credentials, legal name, email, phone number, profile pictures, driver licence images, vehicle registration documents, chat history, saved locations, and device notification tokens.
• Retained Under Statutory Exemption: Financial transaction ledgers (e.g. Wave and Orange Money reference IDs, ride payment receipts) are retained solely for the statutory duration required by Senegalese commercial and tax laws, strictly separated from live operational databases.
• Deletion Completion Time: Your live account is disabled immediately upon confirmation, and all personal data is permanently purged from active servers within 30 calendar days.

LawalGo does not direct its services to children under the age of 13. In accordance with the Children’s Online Privacy Protection Act (COPPA), the Google Play Families Policy, and Senegalese contract laws, individuals under the age of 18 are not eligible to register independent driver or passenger accounts.

We do not knowingly collect or solicit personal data from children under 13. If we discover that a child under 13 has provided us with personal information, we will immediately take steps to purge such data from our servers and terminate the associated account. If you believe that a minor has provided us with personal information, please notify us immediately at privacy@lawalgo.com.

We implement robust administrative, technical, and physical security measures designed to protect your personal data from unauthorized access, loss, or disclosure:

• Encryption in Transit: All communication between the mobile app, web panel, and cloud servers is enforced over HTTPS utilizing Transport Layer Security (TLS 1.3).
• Encryption at Rest: Database records and uploaded identity documents stored in Google Cloud Firestore and Cloud Storage are encrypted at rest using AES-256 standards.
• Access Controls: Access to sensitive user data is restricted to authorized operations personnel under strict multi-factor authentication (MFA) and least-privilege role boundaries.
• Vulnerability Management: Regular security audits, penetration testing, and automated vulnerability scanning across our backend services.

We retain your personal data only for as long as is necessary to provide you with LawalGo services or to comply with statutory legal obligations:

Under Law No. 2008-12 on the protection of personal data in Senegal, you are entitled to the following rights:

• Right of Access: Request confirmation as to whether we process your personal data and receive a free copy of your stored records.
• Right to Rectification: Request the correction of inaccurate, incomplete, or outdated personal information.
• Right to Erasure: Request the permanent deletion of your data as detailed in Section 8.
• Right to Restrict or Object to Processing: Object to processing of your data for direct marketing, surveys, or non-essential features.
• Right to Data Portability: Receive your profile data in a structured, commonly used, machine-readable format (JSON or CSV).

To exercise any of these rights, email our team at privacy@lawalgo.com. Requests are fulfilled free of charge within 15 business days.

If you have questions, feedback, or wish to report a privacy concern, please contact our Data Protection Officer: