Waya Privacy Policy

Version 1.0 | Effective Date: August 4, 2026

This Privacy Policy explains how CHENGDA GLOBAL LTD, a private limited liability company incorporated in the Republic of Ghana, with registration number CS101800526 ("Company", "we", "us", or "our"), collects, uses, discloses, and protects your personal information when you use the Waya mobile application (the "App") and related services (together, the "Service").

We process personal information in accordance with the Data Protection Act, 2012 (Act 843) of Ghana and other applicable laws and regulations. We are committed to protecting your privacy and to processing your personal information in a lawful, fair, and transparent manner.

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

---

1. Information We Collect

We collect the following categories of personal information:

1.1 Information You Provide Directly

Account information: your mobile phone number (including country code), name, gender, email address, password (stored in encrypted form), residential address, country, and other profile information you choose to provide.
Identity information: where required for the Service, your national identification or resident ID number.
Payment information: your in-app Wallet balance and transaction history, and any payment details you provide in connection with online payments.
Feedback and communications: information you provide when you submit feedback, support tickets, complaints, or other communications to us.

1.2 Information Collected Automatically

Location information: your device's GPS location and other location data when you use the Service (for example, when you request a Ride, or when you activate the emergency SOS feature). We may collect your location in the background when necessary to provide and complete a Ride.
Trip information: details of your Rides, including pickup and drop-off locations, route information, timing, fare, and payment status.
Device and usage information: device type, operating system, app version, unique device identifiers, IP address, crash reports, and information about how you use the App.
Communication metadata: information about in-app chat and call communications between you and Drivers, which may include timing and contact details.

1.3 Information We Do Not Collect

We do not require access to your contacts, photos (except where you voluntarily upload profile or document images), microphone (except for emergency calls made through your device's calling functions), or other sensitive device permissions that are not necessary for the Service.

2. How We Use Your Information

We use your personal information for the following purposes:

(a) Providing the Service: to create and manage your account, match you with Drivers, process Rides, calculate fares, process payments, and provide customer support;
(b) Safety and security: to operate safety features such as the SOS emergency feature and ride sharing, to detect and prevent fraud, misuse, and prohibited conduct, and to protect the safety of users and the public;
(c) Quality and improvement: to monitor and improve the quality, reliability, and performance of the Service, including through ratings and feedback, and to develop new features;
(d) Communications: to send you service-related notices, including updates to these terms and policies, and (where you have consented) marketing communications about promotions and offers;
(e) Legal compliance: to comply with applicable laws, regulations, legal processes, and enforceable governmental requests, and to establish, exercise, or defend legal claims;
(f) Aggregated and anonymized analysis: to create aggregated, de-identified, or anonymized data for analytics, research, and reporting purposes.

3. Legal Bases for Processing

We process personal information on the following legal bases, as applicable:

Consent: where you have given your consent to a specific processing activity (for example, for marketing communications, which you may withdraw at any time);
Performance of a contract: where processing is necessary to provide the Service to you under our Terms of Service;
Legal obligation: where processing is necessary for compliance with a legal obligation to which we are subject; and
Legitimate interests: where processing is necessary for our legitimate interests (such as security, fraud prevention, and service improvement), provided such interests are not overridden by your rights and interests.

4. How We Share Your Information

We do not sell your personal information. We share personal information only as described below:

(a) With Drivers: we share the information necessary to arrange and complete your Ride, including your name, pickup and drop-off locations, and, during a Ride, your approximate location and, where necessary, your mobile phone number for call communications;
(b) With payment service providers: we share payment-related information with our payment processing partners (including our in-app payment gateway providers) solely to process payments and prevent fraud;
(c) With other service providers: we share information with third-party service providers who support the Service, including providers of mapping and navigation, cloud storage and infrastructure, messaging and SMS, push notifications, email, analytics, and customer support tools, acting on our behalf and subject to appropriate confidentiality and security obligations;
(d) With professional advisers and authorities: we may disclose information to our legal, accounting, or other professional advisers, and to courts, law enforcement, regulators, or other governmental authorities where required by law, court order, or enforceable governmental request, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of the Company, our users, or the public;
(e) In connection with a corporate transaction: if we are involved in a merger, acquisition, reorganization, sale of assets, or similar transaction, your information may be transferred as part of that transaction, subject to this Privacy Policy.

5. International Data Transfers

5.1 The Service operates globally, and your personal information may be processed outside Ghana, including by our service providers located in other countries. Where we transfer personal information across borders, we take reasonable steps to ensure that such transfers are subject to appropriate safeguards and that your information continues to be protected in accordance with this Privacy Policy and applicable law.

5.2 Where required by applicable law, we will obtain your consent or ensure another lawful basis for such transfers.

6. Data Retention

6.1 We retain your personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, including to provide the Service, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements.

6.2 Specifically:

Account information is retained while your account is active and for a reasonable period after account deletion as required by law;
Trip and transaction records are retained in accordance with applicable legal requirements, after which they are anonymized or deleted;
Location data is retained only for as long as necessary to provide and complete the relevant Ride and for legitimate safety, security, and legal purposes.

6.3 Where feasible, we anonymize or de-identify personal information (for example, masking phone numbers associated with chat and call records) after the relevant purpose has been served.

7. Your Rights

Subject to applicable law, you have the following rights regarding your personal information:

(a) Access: the right to request a copy of the personal information we hold about you;
(b) Correction: the right to request that we correct inaccurate or incomplete information;
(c) Deletion: the right to request deletion of your personal information, subject to our legal obligations to retain certain records;
(d) Withdrawal of consent: the right to withdraw any consent you have given to our processing of your information at any time;
(e) Objection and restriction: the right to object to, or request restriction of, certain processing activities, where applicable;
(f) Portability: the right to receive your personal information in a structured, commonly used, and machine-readable format, where technically feasible; and
(g) Complaint: the right to lodge a complaint with the Data Protection Commission of Ghana (or the competent data protection authority in your jurisdiction).

To exercise any of these rights, please contact us using the details in Section 11. We will respond to your request within a reasonable time and in accordance with applicable law. We may need to verify your identity before processing your request.

8. Children's Privacy

The Service is not directed to children under the age of 18, and we do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction, including encryption of data in transit, access controls, and staff training. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

10. Third-Party Services and Links

10.1 The Service may integrate with or link to third-party services, websites, or applications, including mapping and navigation services, payment providers, and social media platforms. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third party whose services you use.

10.2 We are not responsible for the privacy practices of such third parties.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our processing of your personal information, please contact us at:

Email: 371737276@QQ.COM
Address: CHENGDA GLOBAL LTD, House Number 4, Tangerine Street, Near Splendia Homes, Tema, Greater Accra, Ghana

You may also contact the Data Protection Commission of Ghana at its official channels for any complaints regarding our processing of your personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes through the App or by other reasonable means and will update the "Effective Date" at the top of this policy. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

---