When you use GoTrans, we collect only the information required to process and manage your bookings:

• Identity & Contact: Full name, email address, phone number.
• Travel Document: National ID or passport number (required by transport agencies for boarding verification).
• Date of Birth: Used for identity verification and age-restricted policies.
• Payment Details: We do not store card numbers. Payments are processed entirely by secure third-party gateways (Flutterwave, Mobile Money operators). We only record the transaction reference and status.
• Device & Usage Data: IP address, browser type, pages visited, and app interaction logs — collected automatically to improve platform performance and security.

Your data is used exclusively for the following purposes:

We will never use your data for advertising, profiling, or any purpose beyond what is listed above.

We do not sell your personal data. We share information only in these limited circumstances:

• Transport Agencies: Your name, ID number, seat assignment, and contact details are transmitted to the partner agency operating your booked trip. This is required for boarding and passenger manifest compliance.
• Payment Processors: Flutterwave and Mobile Money operators receive the minimum information necessary to process your transaction.
• Infrastructure Providers: Supabase (database & authentication) and Render (hosting) process data on our behalf under strict data processing agreements.
• Legal Requirements: We may disclose data if required to do so by law or in response to valid legal process (court order, regulatory request).

Your data is stored in Supabase-hosted PostgreSQL databases with the following protections:

• All data transmitted between your device and our servers is encrypted using TLS 1.2+.
• Passwords are hashed using bcrypt and are never stored in plain text.
• Database access is restricted to authenticated services with least-privilege roles.
• Booking records are retained for 3 years to support dispute resolution and regulatory compliance, then securely deleted.
• Account data may be deleted upon your request (see Your Rights below).

While we take industry-standard precautions, no system is completely immune to breach. We will notify affected users promptly in the event of any data security incident.

You have the following rights regarding your personal data:

• Access: Request a copy of all personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request erasure of your account and associated personal data (subject to retention obligations for completed bookings).
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to specific uses of your data where applicable.

To exercise any of these rights, contact us at privacy@gotrans.app. We will respond within 30 days.

Our website uses only strictly necessary session cookies to keep you logged in during a browsing session. We do not use:

• Third-party analytics cookies (e.g., Google Analytics)
• Advertising or retargeting cookies
• Social media tracking pixels

The mobile app uses expo-secure-store to store your authentication token locally on your device — this data never leaves your phone except for authentication with our server.

GoTrans services are not directed at children under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it immediately. If you believe a child has used our platform, please contact us at privacy@gotrans.app.

For any privacy-related questions, data requests, or concerns, reach us through:

We are committed to resolving any privacy concerns fairly and promptly. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.