Privacy Policy

This is a draft written to accurately describe what the Rovo app actually does today. It is not a substitute for review by a qualified lawyer before this goes live for real customers — have it checked against Nigeria's Data Protection Act / NDPR (and any other laws that apply where you operate) first.

Last updated: 30 September 2026. This policy explains what Rovo (“we”, “us”) collects when you use the Rovo app as a customer, courier, or business, and what we do with it.

What we collect

Account details: your name, phone number, and email if you give one. Your password is never stored in readable form — only a one-way hash of it.
Delivery details: pickup and drop-off addresses, landmarks, package descriptions, and the 4-digit delivery code used to confirm handover.
Location: a courier's live position while a delivery is in progress, so the customer can follow it on the map. We do not track location outside of an active delivery.
Payment information: handled by our payment processor (Paystack) and never stored on our own servers in full — we keep a record of the transaction (amount, status) but not your card details.
Courier verification documents: driver's licence, vehicle registration, and NIN (national ID) slip, for couriers only, used to confirm identity before approving an account.
Communications: in-app chat between a customer and their courier about a specific delivery, and any message sent to support.
Ratings and reviews left for couriers and customers after a delivery.
Technical information: IP address, browser/device type, and sign-in history, kept for account security (e.g. spotting a stolen password).

What we use it for

Matching a delivery with a nearby courier, and letting the customer track it.
Processing payments and wallet balances.
Sending you a one-time code by SMS to verify your phone number or reset your password.
Approving courier accounts, and investigating fraud or safety reports (including the in-app SOS button).
Push notifications about your own orders or jobs, if you turn them on.
Responding to support requests.

The other party in a delivery only sees what they need to complete it — e.g. a courier sees the customer's pickup/drop-off address and phone number, not their payment details.
Service providers we use to run the app: Paystack (payments), Termii (SMS), Google Maps (address lookup), and a file storage provider (for courier documents and photos) — each only receives what it needs to do its job.
We do not sell personal data to anyone.

Cookies

The Rovo app itself (once you are signed in) uses no cookies at all — it identifies you with a security token, not a cookie. This public website uses a small number of cookies only for anonymous visit analytics, and only after you accept the cookie banner.

Keeping your data safe

Passwords are hashed, not stored in plain text. Sensitive settings (like payment keys) are encrypted at rest. You can end any of your active sign-in sessions from your account settings, and we automatically sign out a session after a period of inactivity that your business admin controls.

Your rights

You can ask us what personal data we hold about you, ask us to correct it, or ask us to delete your account, by emailing support@rovo.ng. We may need to keep some records (e.g. completed order history) for legal or accounting reasons even after account deletion.

Children

Rovo is not intended for anyone under 18.

Changes to this policy

If this policy changes in a meaningful way, we will update the date at the top of this page.

Contact

Questions about this policy: support@rovo.ng.