We collect only what we need, protect it like it's our own, and never sell it. Here's exactly what we do — in plain language.
Your personal information is never sold to third parties, advertisers, or data brokers. Period.
All sensitive data — payments, IDs, messages — is encrypted in transit and at rest using AES-256.
Request deletion of your account and all associated data at any time. We process it within 30 days.
We comply fully with the Kenya Data Protection Act 2019 and applicable international standards.
MuyuRide Limited ("MuyuRide", "we", "us", or "our") operates Kenya's leading peer-to-peer parcel delivery marketplace at muyuride.co.ke and through our mobile applications. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
This policy applies to all users of MuyuRide — senders, travelers, storage providers, station moderators, and visitors. By using MuyuRide, you agree to the collection and use of information in accordance with this policy.
🇰🇪 Legal Basis
We operate under the Kenya Data Protection Act, 2019 (No. 24 of 2019) and are registered with the Office of the Data Protection Commissioner (ODPC). Our Data Protection Officer can be reached at dpo@muyuride.co.ke.
Matching senders with travelers, processing orders, managing escrow payments, and facilitating deliveries across Kenya.
Verifying traveler identities, processing guarantor information, running KYC checks, and maintaining trust scores to keep the platform safe.
Processing M-Pesa and Stripe payments, holding funds in escrow until delivery confirmation, releasing earnings to travelers, and issuing refunds.
Detecting suspicious activity, investigating disputes, flagging fraudulent accounts, and protecting users from scams.
Responding to support requests, resolving disputes, investigating complaints, and improving our help documentation.
Analyzing usage patterns to improve features, fix bugs, optimize performance, and develop new services.
Complying with Kenyan law, responding to lawful government requests, and maintaining records as required by financial regulations.
Sending delivery notifications, account alerts, security warnings, and (with your consent) product updates and promotions.
All data encrypted at rest using industry-standard AES-256 encryption.
All data transmitted over TLS 1.3 — the strongest available transport encryption.
Payment data isolated in PCI-DSS compliant infrastructure, never stored on our servers.
Two-factor authentication available for all accounts via TOTP authenticator apps.
Data Retention: We retain your account data for as long as your account is active. After account deletion, we retain anonymized transaction records for 7 years as required by Kenyan financial regulations. All personally identifiable information is deleted within 30 days of your deletion request.
Data Location: Your data is stored on servers located in the European Union (AWS eu-west-1). We have a Data Processing Agreement with Supabase that ensures EU GDPR-equivalent protections apply to your data.
Breach Notification: In the event of a data breach affecting your personal information, we will notify you and the ODPC within 72 hours of becoming aware of the breach, as required by the Kenya Data Protection Act.
Under the Kenya Data Protection Act 2019, you have the following rights regarding your personal data:
Request a copy of all personal data we hold about you. We provide this within 21 days.
Email support@muyulink.comCorrect inaccurate or incomplete personal data. Most data can be updated directly in your profile settings.
Update in Profile SettingsRequest deletion of your account and personal data. We process within 30 days (subject to legal retention requirements).
Request via SettingsReceive your data in a structured, machine-readable format (JSON/CSV) to transfer to another service.
Email support@muyulink.comObject to processing of your data for marketing purposes. You can opt out of all marketing communications instantly.
Unsubscribe link in emailsRequest that we limit how we use your data while a dispute or complaint is being investigated.
Email support@muyulink.com📋 How to Exercise Your Rights
Email our Data Protection Officer at support@muyulink.com with your request. Include your registered email address and a description of your request. We will respond within 21 days. If you are unsatisfied with our response, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke.
MuyuRide is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at dpo@muyuride.co.ke. We will delete such information within 7 days of receiving your request.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
Your continued use of MuyuRide after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree to the changes, you may delete your account before the effective date.
Email: support@muyulink.com
Response time: Within 21 days
For: Data access, deletion, portability requests
Email: support@muyulink.com
Phone / WhatsApp: 0726 924 637
Address: Nyakio House, 1st Floor, Room 13, Nairobi, Kenya
For: General questions about this policy
Regulatory Authority
If you are not satisfied with our response to your privacy request, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC). Visit odpc.go.ke or call +254 20 2628 000.