Last updated: November 2026
This Privacy Policy explains how Pago Transportation Network Ltd ("Pago," "we," "us," or "our") collects, uses, shares, and protects personal data when you use the Pago Rides and Pago Express platform ("the Platform"). This policy is intended to reflect Rwanda's Law No. 058/2021 on the Protection of Personal Data and Privacy.
Account information: full name, phone number, email address (optional), and a password (stored only in securely hashed form — we never store or can see your actual password).
Trip information: pickup and drop-off addresses, your pickup GPS coordinates (only if you choose to tap "Use my current location" — this is never captured without that explicit action), ride type, number of passengers, selected payment method, and fare amounts.
Rider photo or description (optional): if you choose to upload a photo or write a description when booking, this is collected solely to help your driver identify you at pickup. You may decline to provide either.
Delivery information (Pago Express): pickup and drop-off addresses, the recipient's name and phone number (which may differ from the account holder's), package type and size, delivery instructions, and a proof-of-delivery photo taken by the delivery rider upon completion.
Driver and Delivery Rider applications: full name, phone, email (optional), driver's license number, and vehicle or motorcycle details.
Communications: messages you send through our contact form, and business details if you submit a business partner application.
Technical data: session identifiers used to keep you logged in securely. We do not use advertising or tracking cookies.
A rider's pickup photo is shared only with the driver assigned to that specific trip, and is never shown to any other driver, rider, or third party. It is automatically and permanently deleted from our servers approximately 48 hours after the trip is marked complete.
A delivery's proof-of-delivery photo is visible to the sender and to Pago for dispute resolution, and is likewise automatically deleted approximately 48 hours after the delivery is marked complete.
Both photo types are stored outside our public website folder and are only ever served through access-controlled scripts that verify the requester is actually the assigned driver, the rider/sender themselves, or an authorized Pago administrator.
We share your phone number with Africa's Talking, our SMS provider, solely to deliver verification codes to your phone. We do not sell your personal data to anyone, and we do not share it with advertisers.
Your name, photo/description, and trip details are shared with the specific driver or delivery rider assigned to your trip, as necessary to provide the service. Drivers and delivery riders are independent contractors and are contractually expected to use this information only for the purpose of completing your trip or delivery.
We take concrete, specific measures to protect your data, including: encrypted password storage, enforced HTTPS across the entire Platform, secure session cookies, protections against cross-site request forgery on sensitive actions, automatic lockout after repeated failed login attempts, and storing uploaded photos outside the publicly accessible part of our website.
No system is perfectly secure, and we cannot guarantee absolute security, but we actively maintain and improve these protections.
Rider pickup photos and delivery proof-of-delivery photos are deleted approximately 48 hours after trip or delivery completion, as described in Section 3. Other account and trip data is retained for as long as your account remains active, or as needed to comply with our legal obligations, resolve disputes, and enforce our agreements.
Under Rwandan data protection law, you have the right to access, correct, or request deletion of your personal data. You may exercise these rights at any time by contacting us using the details below. We will respond to legitimate requests within a reasonable time.
The Platform is not intended for individuals under the age of 18, and we do not knowingly collect personal data from children.
Our SMS provider, Africa's Talking, may process your phone number on servers outside Rwanda as part of delivering verification messages. We only share the minimum information necessary for this purpose.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page reflects the most recent revision.
For privacy questions or to exercise your data rights, contact us through the form on our homepage, or call +250 786 238 878.
Questions about a ride, a partnership, or a complaint? Our team replies within one business day — or call us any time, any day.
+250 786 238 878