Privacy Policy
Effective date: October 5, 2026 · Last updated: November 1, 2026
Summary
This Privacy Policy applies to the Speedrop website (speedrop.ng) and the following mobile applications published by Techsharks Solution Ltd:
- Speedrop (customer app) — for ordering and tracking deliveries.
- Speedrop Rider — for delivery riders.
- Speedrop Merchant — for restaurants, shops and other vendors.
In short: we collect the information needed to take, fulfil and pay for deliveries; we share it only with the people and service providers involved in doing that; we never sell your personal data; and you can delete your account at any time from your Profile in the app or at speedrop.ng/delete-account.html.
Contents
1. Who we are
Speedrop is a delivery platform owned and operated by Techsharks Solution Ltd (RC 9857892), a company registered in Nigeria with its registered address at No 2 Mosobalaje Street, Shagari Estate, Ipaja, Lagos, Nigeria ("Speedrop", "we", "us"). We are the data controller for the personal data described in this policy.
This policy explains how we collect, use, share and protect personal data when you use our website, apps and related services (together, the "Service"), in line with the Nigeria Data Protection Act 2023 (NDPA) and the General Application and Implementation Directive issued under it.
2. Information we collect
All users
- Account information: name, phone number, email address and password (stored only in hashed form).
- Communications: in-app chat messages with riders, merchants and our support team, and support requests you send us. In-app voice calls are connected in real time and are not recorded.
- Device and usage information: device model, operating system, app version, IP address, push-notification token, crash and error logs, and basic records of how you use the Service.
Customers
- Order information: delivery and pickup addresses, items ordered, order notes, order history, ratings and reviews.
- Location: your device's location while you use the app, if you allow it, to suggest your delivery address and show nearby merchants. The customer app does not access your location in the background.
- Payment information: transaction references and status. Card and bank details are entered directly with our payment processors (Flutterwave, and Paystack where offered); Speedrop never receives or stores full card numbers.
Riders
- Identity verification: full name, residential address, National Identification Number (NIN), a photo of a government-issued ID, a selfie or passport photograph, and, where requested, a guarantor letter.
- Vehicle information: vehicle type, brand, model, plate number, vehicle photos and vehicle documents.
- Precise location, including when the app is not in use: collected only while you are online and available for deliveries or on an active delivery, so we can offer you nearby orders, show customers where their delivery is and calculate distance-based earnings. Location collection stops when you go offline.
- Payout information: bank name, account number and account name, and a record of your earnings and payouts.
- Performance information: deliveries completed, ratings received and referral activity.
Merchants
- Business information: business name, category, address and location, opening hours, owner name and contact details.
- Store content: menus, product descriptions, prices and photos you upload.
- Payout information: settlement bank account details and sales and payout records.
3. App permissions
Our apps ask for device permissions only when a feature needs them. You can withdraw any permission at any time in your device settings; the related feature will stop working but the rest of the app will continue to function.
| Permission | Apps | Why we need it |
|---|---|---|
| Location (while in use) | Customer, Rider | Find your delivery address and nearby merchants (customers); show nearby orders and navigate deliveries (riders). |
| Location while online | Rider only | Keep sharing your live position with the customer and our dispatch system while you are online or on a delivery, including when the app is closed or the screen is off. This runs as a foreground service with a persistent "You're online" notification, and stops as soon as you go offline. Riders are shown an explanation before the permission is requested. |
| Camera & photos | All | Take or choose photos — e.g. ID and selfie for rider verification, product photos for merchants, or a profile photo. |
| Microphone | All | In-app voice calls between customers, riders, merchants and support. Used only during a call you start or accept; calls are not recorded. |
| Bluetooth | All | Route in-app call audio to a Bluetooth headset or earpiece. |
| Notifications | All | Order updates, new delivery offers, chat messages and account alerts. |
Images of rider identity documents are checked for readability using on-device text recognition (Google ML Kit). This check runs entirely on your phone; the image is not sent to Google.
4. How we use information
- To create and manage accounts and authenticate users.
- To take orders, match them with merchants and riders, and coordinate pickup and delivery.
- To show customers live delivery tracking and estimated arrival times.
- To process payments and refunds, and to pay riders and merchants.
- To verify the identity and eligibility of riders and merchants and keep the platform safe for everyone.
- To send order updates, verification codes, receipts and other service messages by push notification, email or SMS.
- To provide customer support and resolve disputes.
- To detect and prevent fraud, abuse and security incidents.
- To analyse and improve the Service, including pricing, delivery times and app performance.
- To comply with legal, tax, accounting and regulatory obligations.
We do not use your personal data for third-party advertising, and we do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. Rider applications are reviewed by a member of our team.
5. Legal bases for processing
Under the NDPA we process personal data on the following bases:
- Contract: to provide the Service you have signed up for — taking orders, delivering them, processing payments and paying riders and merchants.
- Consent: for device location, camera, microphone and notifications, which you grant through your device's permission prompts and can withdraw at any time.
- Legal obligation: to keep financial records and respond to lawful requests from authorities.
- Legitimate interests: to keep the platform secure, prevent fraud, verify riders and improve the Service, where these interests are not overridden by your rights.
7. Service providers
We use the following providers to run the Service. Each receives only the data needed for its task:
| Provider | Purpose | Data involved |
|---|---|---|
| Flutterwave | Card, bank transfer and USSD payments | Name, email, phone, amount, payment details you enter |
| Paystack | Alternative processor for card, bank and transfer payments | Name, email, phone, amount, payment details you enter |
| Monnify (Moniepoint) | Payouts to riders and merchants | Name, bank account details, payout amount |
| Google Firebase | Push notifications | Device push token, notification content |
| Agora | In-app voice calls | Real-time call audio (not recorded), call participants |
| Resend | Transactional email | Email address, message content |
| Termii | SMS verification codes and alerts | Phone number, message content |
| Google Maps Platform, OpenStreetMap (Nominatim) | Maps, address search and distance calculation | Addresses and map coordinates |
| Google Gemini | Optional writing assistance for our staff and merchants, such as drafting menu descriptions and support replies | Text only, with names, phone numbers, emails and addresses removed before sending. Identity documents and payment data are never sent. |
| Cloud hosting provider | Servers and databases that run the Service | All Service data, stored securely |
8. International data transfers
Some of our service providers and servers are located outside Nigeria, including in the European Union and the United States. Where personal data is transferred outside Nigeria, we do so in accordance with Part VIII of the NDPA, relying on adequate protection in the destination country, contractual safeguards with the provider, or another lawful basis permitted by the NDPA.
9. Data retention
We keep personal data only for as long as necessary for the purposes described in this policy:
- Account data: while your account is active, and deleted within 30 days of an account deletion request, except as listed below.
- Order, payment and payout records: up to 6 years after the transaction, to meet tax, accounting and anti-fraud obligations.
- Rider identity documents: for as long as the rider account is active. For applications that are not approved, documents are deleted within 90 days of the decision.
- Location history: live location is used in real time; delivery route records are kept with the related order.
- Chat messages and support requests: up to 12 months after the related order or ticket is closed, unless needed for an open dispute.
- Server and security logs: up to 90 days.
Where we must keep data for a legal reason after your account is deleted, we restrict it to that purpose only.
10. Account and data deletion
You can request deletion of your Speedrop account and associated personal data at any time — in the app under Profile → Delete account, on our account deletion page, or by emailing privacy@speedrop.ng from the email address on your account.
We will confirm your request and complete it within 30 days. Your profile, contact details, saved addresses, photos, identity documents and device tokens will be deleted. Records we are legally required to keep (such as completed transaction and payout records) are retained for the periods in Section 9 and then deleted. Any pending orders must be completed or cancelled, and any balance owed to a rider or merchant paid out, before deletion is finalised.
11. Your rights
Under the NDPA you have the right to:
- be informed about how your personal data is used;
- access the personal data we hold about you and receive a copy;
- correct inaccurate or incomplete data;
- have your data deleted;
- restrict or object to certain processing;
- receive your data in a commonly used, machine-readable format (data portability);
- withdraw consent at any time, without affecting processing carried out before withdrawal; and
- not be subject to a decision based solely on automated processing that significantly affects you.
To exercise any of these rights, email privacy@speedrop.ng. We may need to verify your identity first, and we will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (ndpc.gov.ng).
12. Security
We protect personal data with technical and organisational measures appropriate to the risk, including encryption of data in transit (HTTPS/TLS), hashed passwords, role-based access controls that limit staff access to what their job requires, authenticated access to identity documents, and regular review of our systems. Payment card data is handled by our PCI-DSS-compliant payment processors and never touches our servers.
No method of transmission or storage is completely secure. If a personal data breach occurs that is likely to put your rights at risk, we will notify the Nigeria Data Protection Commission and, where required, affected users, in line with the NDPA.
13. Cookies and local storage
Our website and web portals use your browser's local storage and essential cookies to keep you signed in and to save progress on forms (such as a rider application) so it is not lost if you reload the page. We do not use advertising cookies or third-party tracking cookies. You can clear this data at any time in your browser settings.
14. Children
The Service is intended for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
15. Changes to this policy
We may update this policy to reflect changes to the Service or the law. When we do, we will update the "Last updated" date above. If the changes are material, we will also notify you through the app or by email before they take effect.
16. Contact us
For questions about this policy or your personal data, contact us:
- Privacy and data requests: privacy@speedrop.ng
- General support: support@speedrop.ng
- Post: Data Protection, Techsharks Solution Ltd, No 2 Mosobalaje Street, Shagari Estate, Ipaja, Lagos, Nigeria