Privacy Policy

We collect the data needed to give you a safe, reliable service:

• Account details: your name, mobile number, and profile photo if you add one.
• Trip & cargo details: pickup and drop-off, request time, vehicle type, and shipment details (sender and recipient).
• Location: your live location while you request and take a trip, so we can match a nearby captain and track the journey (this runs in the background for drivers while they are online).
• Payment & wallet: wallet balance, top-ups via Bankak or MyCashi, and any payment proof you upload — we do not store full card numbers.
• Driver verification (KYC): licence, vehicle registration, and vehicle photos — for drivers only, used for verification.
• Support data: your chat and support messages, including website conversations via anonymous sign-in.
• Technical data: device type, app version, and push-notification tokens.

• Match you with a captain, calculate the fair fixed price, and track the trip or shipment.
• Keep the platform safe: fraud prevention, driver verification, and account protection.
• Run the wallet and payments, and confirm top-ups.
• Send you notifications about your request, captain, and payments.
• Support you and answer questions through the AI assistant and our team.
• Improve the service and analyse usage (in aggregate where possible).

We do not sell your data. We share it only as follows:

• Captain and rider/sender: we share the name, location, and trip details needed to complete the journey.
• Service providers: hosting and database (Supabase), notifications, and website analytics (Vercel) — under data-protection agreements.
• Authorities: where required by valid legal process or to protect people’s safety.
• Fleet parties: if you are a driver under a fleet, your fleet manager can see your fleet-linked trips and earnings.

Your data is stored on secure cloud infrastructure with encryption in transit. Access is scoped by row-level security so each user sees only their own data, and administrative access is limited to an authorised allowlist. We apply reasonable safeguards, but no system is 100% secure.

We keep data while your account is active and as long as needed for the service and for legal and accounting obligations. If you delete your account, we delete or anonymise your personal data except where we are legally required to retain it (such as financial transaction records).

• Access a copy of your data.
• Correct any inaccurate data.
• Delete your account and data (subject to legal obligations).
• Opt out of marketing notifications at any time.
• Withdraw consent on the website (this turns off the related features).

To exercise any of these, email legal@wdeesudan.com.

Wdee is not directed to children under 18. If we discover an account belonging to a child, we close it and delete the data.

We may update this policy from time to time. We will flag any material change in the app or on the website, and the "last updated" date above will change.