Privacy Policy
Privacy Policy
How Sufuri collects, uses, shares and protects the personal information of tricycle owners, drivers, agents and the public.
Sufuri is operated for the Kano State Ministry of Transportation to register commercial tricycles (Keke NAPEP), verify the identity of their owners and drivers, collect statutory fees and monitor fitted GPS trackers. Running that service requires us to handle sensitive personal data, including your National Identification Number and your vehicle's location. This policy explains exactly what we hold, why we hold it, who else sees it, and the choices you have.
1Who we are
Sufuri ("we", "us") is the tricycle registration and tracking platform operated on behalf of the Kano State Ministry of Transportation. For the purposes of the Nigeria Data Protection Act 2023, the Ministry is the data controller and Sufuri operates as its data processor and service operator.
Our registered contact point for data protection matters is privacy@sufuri.ng. Postal enquiries may be sent to the Ministry of Transportation, Kano State Secretariat, Kano, Nigeria.
2What information we collect
We only collect what the registration, payment and tracking process actually requires. The table below lists every category we hold and why.
| Category | What it includes | Why we need it |
|---|---|---|
| Identity | National Identification Number (NIN), full name, date of birth, gender, photograph and signature retrieved from NIMC, and Bank Verification Number (BVN) where a payout account is involved. | To confirm you are who you say you are before a tricycle is registered in your name. |
| Contact | Phone number, email address, residential address, local government area, state and town. | To reach you about your registration, permit and payments. |
| Next of kin | Name, phone number, relationship and address of the person you nominate. | So someone can be contacted in an emergency involving you or the vehicle. |
| Vehicle | Tricycle number, plate number, chassis and engine numbers, make, model, year, colour, union and local government. | To issue and verify your registration certificate, permit and stickers. |
| Driver | Driver's name, phone, NIN, licence number and expiry, and the vehicle assigned to them. | To link a licensed driver to each registered tricycle. |
| Payment | Amount, reference, status, date, the gateway used and the virtual account assigned to you. For agents, the bank name, account number and account name you provide for payouts. | To collect statutory fees, issue receipts and pay agents. |
| Location | GPS position, speed, direction and timestamps reported by the tracker fitted to your tricycle, plus the device IMEI and SIM number. | To support vehicle recovery, road safety and regulatory oversight. |
| Technical | IP address, browser or app version, and a log of actions taken on your record. | To keep the platform secure and to trace administrative changes. |
3How we collect it
- Directly from you — when you register on this website, in the mobile app, or at a registration centre.
- From our field agents — accredited agents, team leads and supervisors may enter your details on your behalf during an assisted registration.
- From identity authorities — when you submit your NIN, we retrieve the matching record (name, date of birth, gender, address, photograph and signature) from the National Identity Management Commission through an accredited verification partner.
- From your tracker — once a GPS device is fitted, it reports position, speed and status to our tracking server.
- From payment providers — confirmation of transfers made to your assigned virtual account, including the sending account name and bank.
4How we use your information
- Verify your identity against the national identity database before registration.
- Register your tricycle and issue its tricycle number, certificate, permit and stickers.
- Produce driver identity cards.
- Generate payment references, collect fees and confirm settlement.
- Provision and monitor the GPS tracker fitted to your vehicle.
- Credit and pay accredited agents for registrations they complete.
- Answer your enquiries and provide support.
- Produce statistics and reports for the Ministry. These are aggregated and do not identify you individually.
- Detect and prevent fraud, duplicate registrations and misuse of the platform.
- Meet legal, regulatory and audit obligations.
Our lawful basis
We process your data to perform a task carried out in the public interest and under the statutory authority of the Kano State Ministry of Transportation, to fulfil the registration contract between you and the platform, and to meet legal obligations such as identity verification and record keeping. Where none of those apply, we rely on your consent, which you may withdraw at any time.
6GPS tracking
Tricycles registered on the platform are fitted with a GPS tracker. While the device is powered, it reports its position, speed and direction to our tracking server, together with the device identifier and SIM number.
- Location data is tied to the vehicle, not to a named individual, though it can be linked to the registered owner and assigned driver.
- Live and historical location is visible to the vehicle owner, to authorised platform administrators, and to the Ministry.
- Location history is disclosed to law enforcement only on a lawful request, such as a court order or a documented investigation into theft or a serious offence.
- Tracking serves vehicle recovery, road safety and regulatory oversight. It is not used to profile individuals or to make automated decisions about you.
7How we protect your information
- Traffic between your device and the platform is encrypted in transit using HTTPS.
- Access to personal records is restricted by role — agents, bank staff, security officers, printers and administrators each see only what their role requires.
- Identity documents and photographs are stored on protected servers that are not publicly browsable.
- Administrative actions on records are logged so that changes can be traced.
- Databases are backed up regularly so that records can be restored after a failure.
8How long we keep it
We keep your information for as long as your registration is active, and afterwards only for as long as the law or a legitimate administrative need requires.
| Record | Retention period |
|---|---|
| Registration, vehicle and permit records | For the life of the registration, then 7 years |
| Identity verification results (NIN, BVN) | For the life of the registration, then 7 years |
| Payment records and receipts | 7 years, as required for financial records |
| GPS location history | 12 months, unless retained for an active investigation |
| Support correspondence | 2 years |
| Technical and access logs | 12 months |
9Your rights
Under the Nigeria Data Protection Act 2023 you have the following rights over your personal data.
To exercise any of these, email privacy@sufuri.ng with your registered phone number so that we can identify you. We respond within 30 days. There is no charge, unless a request is clearly excessive or repetitive.
10Cookies and the mobile app
This website uses cookies that are necessary to keep you signed in, to remember your preferences, and to protect forms against abuse. We do not use advertising cookies and we do not track you across other websites.
The Sufuri mobile app stores a sign-in token on your device so you do not have to log in each time. Removing the app removes that token. The app requests location permission only for features that need it, such as recording where a tracker was fitted.
11Children
The platform is for licensed commercial tricycle owners, drivers and accredited agents, all of whom must be adults. We do not knowingly collect information about anyone under 18. If you believe a child's data has been submitted, contact us and we will remove it.
12Storage and international transfers
Platform data is held in our primary database and mirrored to managed cloud services used for the mobile app and for backup. Some of those providers operate data centres outside Nigeria, which means your information may be stored or processed abroad.
Where that happens, we use providers that offer recognised safeguards and contractual protections consistent with the Nigeria Data Protection Act 2023.
13Changes to this policy
We update this policy when the platform or the law changes. The effective date and version at the top of this page always reflect the current text. If a change materially affects your rights, we will tell you through the platform or by SMS to your registered number before it takes effect.
14Contact and complaints
Response within 30 days
Ministry of Transportation
Kano State Secretariat
Kano, Nigeria