Legal

Privacy policy

What we collect, why we collect it, how long we keep it, and what you can ask us to do with it.

Draft pending legal review. This policy has not yet been reviewed against the Nigeria Data Protection Act 2023 by a qualified adviser, and the retention periods below are proposed rather than settled. Do not treat it as final until this notice is removed.

Last updated 7 September 2026

1. Who controls your data

Luxy Africa Mobility Limited (RC 9703335), a company registered in Nigeria, is the data controller for personal data collected through Muje. Reach us at hello@muje.ng, which is also the address for any privacy question or request in this policy.

2. What we collect

If you join the rider list or vote for a city

  • your email address, if you give us one;
  • the city you chose, and the area of that city if you tell us.

If you apply to drive

  • your name, phone number and email address;
  • the city you drive in and the plan you are interested in;
  • your vehicle’s make, model, year and — if you give it — plate number;
  • anything else you choose to write in the notes field.

We do not ask for your driver’s licence number, your NIN or any document upload on the website. Those are verified with you directly after a person has reviewed your application, so that government identity data does not pass through the public web form. When we do collect them for verification, we use them only to confirm your eligibility to drive and we keep them no longer than needed for that purpose.

Technical data

Our hosting provider processes your IP address and basic request information in order to serve the site and protect it from abuse. This website does not currently use analytics, advertising or tracking cookies. If we add analytics later, we will update this policy and ask for your consent where the law requires it.

3. Why we use it, and our lawful basis

Under the Nigeria Data Protection Act 2023 (NDPA) we must have a lawful basis for processing your data. Ours are:

  • Your consent — sending you the one launch email you asked for, and counting your city vote. You may withdraw consent at any time.
  • Performance of a contract, or steps toward one — reviewing your driver application, arranging your inspection, and administering your plan.
  • Legitimate interest — keeping the platform safe, preventing fraud and abuse, and keeping our own records.
  • Legal obligation — where Nigerian law, a regulator or a court requires us to keep or disclose information.

We do not sell your personal data, and we do not use it for third-party advertising.

4. Who we share it with

We share personal data only where it is needed, and only with:

  • Service providers who work on our instructions — hosting, email delivery, and identity or document verification partners — under contracts that require them to protect your data;
  • Vehicle inspection partners, for the roadworthiness check, limited to what they need to carry it out;
  • Riders and drivers, once trips begin — a rider sees their driver’s name, photo, vehicle and plate; a driver sees the rider’s first name and pickup point;
  • Authorities, where we are legally required to disclose, or where it is necessary to protect someone’s safety.

5. Where your data is held

Some of our providers store or process data outside Nigeria. Where that happens we take the steps the NDPA requires for cross-border transfers, including contractual safeguards and satisfying ourselves that the destination offers adequate protection.

6. How long we keep it

  • Rider list and city votes — until we launch in your city and send the launch email, or until you unsubscribe, whichever comes first.
  • Unsuccessful driver applications — up to 12 months, so we can tell you why and so you can reapply without starting over.
  • Approved drivers — for as long as you drive with Muje, and then for the period Nigerian tax and company law requires us to keep business records.
  • Verification documents — only as long as needed to confirm eligibility and to meet our legal obligations.

7. Keeping it safe

We use encryption in transit, access controls that limit personal data to staff who need it, and we keep our systems patched. No system is perfectly secure, but if a breach occurs that is likely to harm you, we will notify you and the Nigeria Data Protection Commission as the NDPA requires.

8. Your rights

Under the NDPA you have the right to:

  • ask what personal data we hold about you, and get a copy;
  • have inaccurate data corrected;
  • ask us to delete your data, where we have no lawful reason to keep it;
  • object to, or ask us to restrict, certain processing;
  • withdraw consent you previously gave;
  • receive your data in a portable format, and ask us to send it elsewhere where that is technically feasible;
  • not be subject to a decision made solely by automated means that significantly affects you — every driver application is read by a person.

To exercise any of these, email hello@muje.ng. We respond within 30 days. You will not be charged, and you will not be treated differently for asking.

9. Children

Muje is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, tell us and we will delete it.

10. Complaints

If you are unhappy with how we have handled your data, tell us first so we can put it right. You also have the right to complain to the Nigeria Data Protection Commission (NDPC).

11. Changes to this policy

If we make a material change we will update the date at the top and, where the change affects you meaningfully, tell you by email or in the app. Our terms of service explain the rest of our relationship with you.