Amqey Privacy Policy

This Privacy Policy describes how Amqey ("we", "us", "our" — see the definition of "Amqey Group Company" below) collects, uses, discloses, transfers, stores, and protects your Personal Information when you use our mobile application, website, and related services (together, the "System"), including Aride (ride-hailing), Afood (food delivery), Asend (errand and parcel delivery), Achat (chat and calling), and Apay (digital wallet and payments).

Please read this Privacy Policy thoroughly. By registering for, or using, any part of the System, you accept the practices described in this Privacy Policy.

1. Definitions

Unless otherwise defined below, capitalised terms used in this Privacy Policy have the same meaning given to them in the Amqey User Terms of Use, the Amqey Terms and Conditions for the Use of Apay, the Amqey Driver Terms, and/or the Amqey Merchant Terms (as applicable):

• "Amqey Group Company" means Amqey Nig Ltd and each of its affiliated and related companies operating the Aride, Afood, Asend, Achat, and Apay services (including AMQEY PAY LIMITED, registered in the United Kingdom, which operates Apay), as such group of companies may change from time to time. Amqey's various services are designed and presented to you as a single, integrated experience; references to "Amqey", "we", "us", or "our" in this Privacy Policy mean whichever Amqey Group Company operates the particular Service you are using or processes your Personal Information for the relevant purpose, regardless of which entity that is. This does not change or limit any of your rights under this Privacy Policy.
• "Governmental Authority" means any governmental, regulatory, or administrative authority, agency, commission, board, bureau, court, or instrumentality of any kind, including the Nigeria Data Protection Commission (NDPC), the Central Bank of Nigeria (CBN), and the UK Financial Conduct Authority (FCA), as applicable.
• "Personal Information" means data, whether true or not, about an individual who can be identified from that data, or from that data together with other information we have or are likely to have access to. This may include a person's name, address, date of birth, phone number, e-mail address, biometric information, bank account or card details, gender, vehicle information, photo, location data, and other information which, taken together, would enable an individual to be identified.
• "Service Provider" means an independent third-party service provider who provides goods or services to Users via the System, including drivers, riders, and merchants.
• "System" means the system provided by Amqey and/or its Group Companies to connect Service Providers with Users, including the Aride, Afood, Asend, Achat, and Apay applications, related software, websites, platforms, payment services, and support systems.

2. Personal Information which we collect

2.1 Information you give us directly

• Identity data: name, gender, date of birth, profile photo.
• Contact data: phone number, e-mail address, delivery/pick-up addresses.
• Account and payment data: your Apay wallet balance and transaction history, and — where you add a payment method — card or bank account details, processed in accordance with applicable payment card industry security standards.
• Verification data: government-issued ID, passport, driver's licence, or similar documents, where required for identity verification, driver/merchant onboarding, or compliance with anti-money-laundering regulations applicable to Apay.
• Content you provide: chat messages, voice notes, photos, and other content you send through Achat; support requests; reviews and feedback.

2.2 Information collected automatically

• Technical data: IP address, device identifiers, device model and operating system, app version, and crash/diagnostic logs.
• Usage data: how you interact with the app, which features you use, and how often.
• Location data: with your permission, we collect precise location data to power Aride, Afood, and Asend — for example, to match you with nearby drivers, calculate routes and fares, and track deliveries in real time. If you are a driver, we collect your location while the driver app is active (foreground and background) so we can dispatch and route trips to you. You can withdraw location permission at any time in your device settings, though this will limit or disable these services.

2.3 Information from other sources

We may receive information about you from Service Providers, payment processors, identity-verification partners, and, where you choose to connect them, third-party sign-in providers (such as Google or Facebook Sign-In).

3. Achat — contacts, chat, and calling data

Achat, Amqey's built-in chat and calling feature, works differently from the rest of the app in one important way, and we want to be specific about it:

• Contact matching. If you grant Amqey permission to access your phone's contacts, we upload the phone numbers in your address book (not names, photos, or any other contact field) to our servers only to check which of them already have an Amqey account, so we can show you who among your contacts is reachable on Achat. This matching happens once you grant permission and periodically thereafter to keep the match list current. You can decline or revoke Contacts access at any time in your device's Settings; Achat will still work using Chat IDs and phone numbers you enter manually.
• Message and call content. Chat messages, voice notes, and photos you send through Achat are stored to deliver them to the recipient and to keep your chat history available across your devices. Voice and video calls are routed through Amqey's calling infrastructure; call audio/video is not recorded or stored by Amqey.
• Call metadata. We keep a record of call events (who called whom, when, for how long, and the outcome — answered, missed, or declined) so your call log works the same way a phone's native call log does.
• Amqey Client Care. Every Achat account includes a built-in conversation with Amqey Client Care, our support channel inside the app. Messages you send there are handled by our support team for the purpose of resolving your enquiry.

4. How we use your Personal Information

We use the Personal Information we collect to:

• register and verify your Account, and administer it;
• connect Users with Service Providers and enable the Services you request (rides, deliveries, errands, chat, payments);
• process orders and payment transactions, including through Apay;
• send you service-related communications (order updates, receipts, security alerts) and, where you have not opted out, marketing communications;
• maintain, secure, test, and improve the System;
• detect, prevent, and investigate fraud, abuse, and violations of our Terms of Use;
• comply with our legal and regulatory obligations, including anti-money-laundering and know-your-customer obligations applicable to Apay; and
• resolve support requests, complaints, and disputes.

5. Sharing of Personal Information

We may share your Personal Information:

• with the Service Provider or User on the other side of a booking or order, to the extent needed to complete it (for example, sharing a rider's pick-up location with the assigned driver);
• with licensed payment processors and financial institutions to process Apay transactions;
• with identity-verification providers, where required for onboarding drivers, merchants, or Apay users;
• with our Affiliates and Group Companies, including AMQEY PAY LIMITED (UK), for the purposes described in this Policy;
• with Governmental Authorities where required by Applicable Law, court order, or regulatory request;
• in connection with a merger, acquisition, financing, or sale of business assets; and
• with your consent, in any other circumstances we notify you of in advance.

We do not sell your Personal Information to third parties.

6. Cross-border transfers of Personal Information

Amqey Nig Ltd is based in Nigeria and AMQEY PAY LIMITED is based in the United Kingdom. Depending on which Service you use, your Personal Information may be transferred to, stored, and processed in Nigeria, the United Kingdom, or another country where Amqey, its Affiliates, or its service providers operate. Where we transfer Personal Information outside Nigeria, we take reasonable steps to ensure it continues to receive a level of protection consistent with the Nigeria Data Protection Act, 2023 (NDPA) and this Privacy Policy.

7. Retention of Personal Information

We retain Personal Information only for as long as necessary to fulfil the purpose it was collected for, or as required by Applicable Law — including financial record-keeping obligations applicable to Apay transactions, which may require longer retention periods under Nigerian and/or UK financial regulations. When Personal Information is no longer needed, we delete it or remove the means by which it can be linked back to you.

8. Access and correction of Personal Information

You may request access to, or correction of, the Personal Information we hold about you by contacting us using the details in the "How to contact us" section below. We will respond within the timeframes required by the NDPA. We may decline requests that are manifestly unfounded, excessive, or that we are legally required or entitled to refuse.

9. Where we store your Personal Information

Your Personal Information is stored on secure servers operated by us and/or our infrastructure and cloud service providers. We require any third party that stores or processes Personal Information on our behalf to provide a level of protection consistent with this Privacy Policy.

10. Security of your Personal Information

We use industry-standard technical and organisational measures — including encryption of data in transit and access controls on our systems — to protect your Personal Information against unauthorised access, alteration, disclosure, or destruction. No system is completely secure, so while we work hard to protect your information, we cannot guarantee absolute security. You are responsible for keeping your Account password and device secure.

11. Age requirements

You must be at least 13 years old to create an Amqey Account. If you are between 13 and 18 years old (or the age of legal majority in your jurisdiction, if different), you may only use Amqey with the involvement and permission of a parent or legal guardian, who accepts this Privacy Policy on your behalf.

Apay is different. Because Apay involves holding and transferring real money, you must be at least 18 years old to activate or use an Apay wallet, in line with financial regulations applicable to electronic money services. We do not knowingly open an Apay wallet for anyone under 18.

We do not knowingly collect Personal Information from children under 13. If you believe a child under 13 has created an Account or otherwise provided us with Personal Information, please contact us so we can delete it.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in Applicable Law. We will notify you of material changes through the app or by e-mail. Your continued use of the System after a change takes effect means you accept the updated Policy.

13. Language

If this Privacy Policy is translated into another language, the English version will prevail in the event of any inconsistency.

14. Acknowledgement and consent

By using the System, you acknowledge that you have read and understood this Privacy Policy and consent to our collection, use, and disclosure of your Personal Information as described here. If you provide us with Personal Information about someone else (for example, a delivery recipient), you confirm you have their permission to do so.

15. Marketing and promotional material

We may send you promotional messages by e-mail, SMS, or push notification. You can opt out at any time using the unsubscribe link in the message, in the app's notification settings, or by contacting us. You will still receive essential service messages (such as order and security notifications) even if you opt out of marketing.

16. Third-party services

The System may link to or integrate with third-party services (such as map providers or payment gateways). We are not responsible for the privacy practices of those third parties — please review their own privacy policies.

17. How to contact us

If you have questions about this Privacy Policy, or want to exercise your rights over your Personal Information, contact us at: