This policy explains WHAT we process and WHY. Our Data Protection page explains HOW we govern that processing — lawful basis registers, transfers, retention schedules and how to lodge a request.
Who this policy covers
TaxiD operates a mobility platform in Kenya covering ride-hailing, airport transfers, corporate mobility, parcel and courier delivery, vehicle rental and leasing, and road, air and marine charter.
This policy applies to riders, drivers and courier partners, corporate administrators and employees travelling on a corporate account, fleet and charter operators, and visitors to our website.
Personal data we collect
- Account data: name, telephone number, email address and password credentials.
- Identity and compliance data for drivers, operators and corporate customers: national ID, driving licence, KRA PIN, company registration and tax compliance documents.
- Trip and booking data: pickup and drop-off points, route, timestamps, vehicle and fare or quotation details.
- Payment data: M-Pesa transaction references, tokenised card instruments, wallet balances and invoices. We never store full card numbers.
- Location data: collected while a trip, delivery or dispatch is active, and only with device permission.
- Device and technical data: device model, operating system, app version, IP address and diagnostic logs.
- Support and safety data: enquiries, incident reports, safety escalations and the resulting case records.
Why we process it
- To provide the service you requested — matching, dispatch, navigation, delivery and charter fulfilment.
- To price, bill, settle and invoice, including corporate billing and driver payouts.
- To keep riders, drivers and partners safe, and to investigate incidents and complaints.
- To detect and prevent fraud, payment abuse and account takeover.
- To meet legal and regulatory obligations, including tax invoicing and transport regulatory reporting.
- To improve reliability, coverage and product quality using aggregated analysis.
Your rights
To exercise any right below, email sales@taxid.app from the address on your account, or raise a request through the Help Centre. We respond within the statutory period and will tell you if we need to verify your identity first.
- Access a copy of the personal data we hold about you.
- Correct data that is inaccurate or incomplete.
- Request deletion where we no longer have a lawful reason to keep it.
- Request a portable copy of data you provided to us.
- Object to, or ask us to restrict, a particular use.
- Withdraw a consent you previously gave, such as location or marketing consent.
Security and changes to this policy
Access to personal data is restricted by role, protected by row-level authorisation in our platform, and recorded in audit logs. Administrative and privileged access requires multi-factor authentication.
When we change this policy we update the last-updated date above and, for material changes affecting your rights, notify you in the app or by email before the change takes effect.
Questions about this document
Office of the Data Protection Officer maintains this page. Reach us and we will respond in writing.