Kuvetra helps passengers find verified boda-boda (motorbike) riders organised in local stages. This policy explains what personal information we collect, why, and the choices you have. Last updated October 2026.
Kuvetra operates this app. For any privacy question or request, contact us at support@kuvetra.co.ke.
Account details: your name, phone number, email, and profile photo. Identity and documents: chairmen provide a National ID number; riders provide a motorbike number plate plus an NTSA driving licence and insurance, which their stage chairman reviews. Location: your device location while you request or carry out a trip, to match you with nearby riders and show pickup and drop-off. Riders who are online share their location about once a minute, also while Kuvetra is in the background, so passengers can be matched to them; a notification shows while this is on, and it stops when they go offline. While a rider is online, their stage chairman can ask to see the rider's current location; the rider is notified each time, and it is never shown while a passenger is on board. Device: a notification token so we can alert you about ride requests and trip updates. Activity: your trips and ratings. Reports: if you report someone you rode with, or someone reports you, the reason and any details written. Emergency contacts: if you save any, they stay on your phone only and Kuvetra does not receive them.
To provide and run the service (matching passengers with nearby verified riders and managing trips); to keep the community safe through stage verification; to send you ride and trip notifications; and to meet legal and safety obligations. We rely on your consent and on what is necessary to provide a service you asked for.
Your profile photo is visible only to you, to people you share a trip with, and, for riders, to their stage chairman. Your stage chairman can view a rider's verification documents in order to approve them, and sees reports about riders in their stage, but never who made a report. Kuvetra reviews every report. We use trusted providers to run the app: Supabase (database and file hosting, in the UK/EU region) and Google (sign-in, maps, place search, and push notifications through Firebase). We never sell your personal data.
Your data is hosted in the UK/EU region. Because that is outside Kenya, this is a cross-border transfer; we keep it protected and only use providers with strong security.
While your account is active. If you deactivate, you can reactivate within 30 days by signing in; after that the account is closed. See Delete your account.
Under Kenya's Data Protection Act, 2019 you can ask to access, correct, or delete your information, and object to certain uses. Use the Profile screen or contact us. You may also complain to the Office of the Data Protection Commissioner (ODPC).
Verification documents are kept in private storage; access is restricted so only you and your stage chairman can view a rider's documents. Connections are encrypted.
Kuvetra is for adults (18+) and is not intended for children.
We may update this policy and will note the date above.