Who we are. Boda Moja is a ride-hailing service operating in Kilifi County, Kenya. For anything in this policy, contact hello@bodamoja.com.
What we collect. To provide rides we collect: your name and phone number (account); your location while booking or on a trip (matching and safety); trip history and fares (receipts and support); and M-Pesa transaction references for payments (we never see or store your M-Pesa PIN). Drivers additionally provide identity and licence documents for verification.
Why we collect it. Solely to run the service: matching riders with nearby drivers, calculating fares, processing payments, keeping trips safe and traceable, and meeting legal obligations in Kenya. We do not sell personal data, and we do not use it for third-party advertising.
Location data. Location is used while you book or take a trip. Driver location is shared with their current rider during a trip. We do not track your location in the background outside of an active trip.
Sharing. Trip and payment processing involves Safaricom (M-Pesa/Daraja). Rider and driver see each other's first name, photo, and — for drivers — number plate during a trip. We share data with authorities only where Kenyan law requires it.
Storage and security. Data is stored on secured cloud infrastructure with access controls and audit logging. Driver documents are held in private storage and accessed only for verification.
Your rights. Under Kenya's Data Protection Act (2019) you can request a copy of your data, correction of inaccurate data, or deletion of your account and associated data. Email us and we will act on the request.
Changes. If this policy changes materially, we will note it here and in the app before the change takes effect.