Privacy Policy
Compliant with the Data Protection Act, 2019 (Kenya) · Last updated: 8/26/2026
1. Who we are
Maya Boda is a ride-hailing and delivery platform operated by Arahiks Technologies in Kenya. For the purposes of the Data Protection Act, 2019 (Kenya), Arahiks Technologies is the data controller of personal data processed through the Maya Boda client app, operator (rider/driver) app and Maya Market. You can reach our data protection contact at support@mayaboda.app or +254 712 719 849.
2. Personal data we collect
All users: name, phone number, email address, password credentials, device and app usage data.
Clients: pickup and drop-off locations, saved places, trip history, ratings and reviews, M-Pesa payment phone number and transaction references.
Operators (riders and drivers): national ID number, driving licence details, profile photo, vehicle make, registration plate and photo, service area, M-Pesa payout number, live GPS location while online, earnings and withdrawal records.
Vendors: business name, business location, contact details and category.
We do not knowingly collect data from children under 18.
3. Why we process your data (lawful basis)
We process personal data under Section 30 of the Data Protection Act on the following bases:
Performance of a contract — to create accounts, match clients with operators, calculate fares, process M-Pesa payments and pay out operator earnings.
Consent — to access precise location, send push notifications, and send marketing or promotional messages. You may withdraw consent at any time.
Legitimate interests — fraud prevention, safety, dispute resolution and improving the service.
Legal obligation — tax, accounting and lawful requests from authorities.
4. Location data
Operator location is shared with a client only while a trip is requested, accepted or in progress, and stops being broadcast when the operator goes offline or the trip ends. Client pickup and drop-off points are shared only with the matched operator for that trip. Location history is retained for trip records, safety investigations and dispute resolution.
5. Who we share data with
We share only the minimum data necessary with: matched operators and clients (masked contact details where possible), Safaricom M-Pesa (Daraja) for payments and payouts, SMS and email delivery providers for notifications, mapping and geocoding providers for routing and search, and our cloud hosting and database providers. We never sell your personal data.
6. Cross-border transfers
Some of our processors store or process data on servers outside Kenya. Where this happens, we rely on Section 48 of the Data Protection Act and ensure appropriate safeguards, including contractual data protection commitments and providers that offer comparable levels of protection.
7. Data security
Data is encrypted in transit (HTTPS) and protected at rest by our hosting provider. Access to sensitive fields such as national ID numbers and payment phone numbers is restricted by row- and column-level database security so that users can only see their own records, and administrators only what their role requires. Payment credentials are held as server-side secrets and never exposed to the browser.
8. How long we keep data
Account data is kept while your account is active. Trip, payment and payout records are retained for up to seven years to meet Kenyan tax and accounting requirements. Support chat transcripts are kept for up to two years. Marketing consents are kept until you withdraw them. After these periods data is deleted or anonymised.
9. Your rights
Under the Data Protection Act, 2019 you have the right to be informed of how your data is used, to access your data, to request correction of inaccurate data, to request deletion, to object to processing, to request that we restrict processing, and to data portability. To exercise any right, email support@mayaboda.app. We respond within 30 days. If you are unsatisfied, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya, at www.odpc.go.ke.
10. Account deletion
You may request deletion of your account at any time from within the app or by emailing support@mayaboda.app. We will delete your profile and personal identifiers, but may retain trip and payment records in a limited, restricted form where the law requires us to keep financial records.
11. Cookies and local storage
We use browser local storage and cookies to keep you signed in, remember your saved pickup places, remember whether you have seen the in-app tour, and to measure basic usage. We do not use third-party advertising cookies.
12. Changes to this policy
We may update this Privacy Policy. Where changes are significant we will notify you in the app or by email before they take effect. The date below shows when this policy was last revised.
13. Contact us
Arahiks Technologies — Maya Boda, Maai Mahiu, Nakuru County, Kenya.
Email: support@mayaboda.app · Phone: +254 712 719 849