Effective Date: 8th April, 2026
Last Updated: 24th June, 2026
At Dropin, we respect your privacy and are committed to protecting the personal information entrusted to us. This Privacy Policy explains how Dropin collects, uses, stores, shares, and protects personal information when you use our website, mobile application, ride-booking platform, and related services.
Dropin is a Ghana-focused ride-booking platform that connects passengers with Pragya/Keke drivers.
This Privacy Policy is intended to apply to Riders, Drivers, website visitors, applicants, and other individuals who interact with Dropin.
Dropin should operate this policy alongside its Terms & Conditions, Cookie Policy, Driver Terms, and other applicable policies.
Important: This is a comprehensive website-ready privacy policy, but Dropin should have a Ghana-qualified privacy/legal professional review and customise it before publication, particularly the company details, retention periods, payment providers, international data transfers, and actual technical practices.
Ghana's primary data-protection framework is the Data Protection Act, 2012 (Act 843), administered by the Data Protection Commission (DPC). The DPC identifies principles including accountability, lawfulness, purpose limitation, information quality, openness, security safeguards, and data-subject participation. (DPC)
Dropin is a ride-booking platform focused on connecting Riders with Pragya/Keke Drivers in Ghana.
For purposes of applicable data-protection law, Dropin may act as a data controller for personal information it determines how and why to process, and may use data processors and service providers to process information on its behalf.
Company Name: Dropin
Country: Ghana
Registered Address: [Insert Address]
Email: [Insert Email]
Phone: [Insert Phone Number]
Website: [Insert Website]
Data Protection Supervisor / Privacy Contact: [Insert Name or Department]
Email: [Insert Privacy Email]
Dropin should appoint an appropriate Data Protection Supervisor and maintain the required data-protection compliance arrangements. The Ghana DPC states that organisations processing personal data are required to register with the Commission and that organisations should appoint and train a Data Protection Supervisor and publish a privacy policy. (DPC)
This Privacy Policy applies when you:
create a Dropin account;
request or complete a Pragya/Keke ride;
register as a Driver;
visit the Dropin website;
use the Dropin mobile application;
contact customer support;
communicate with Dropin;
participate in promotions or referral programmes;
submit reviews or feedback;
interact with Dropin through social media or other digital channels.
It applies whether you access Dropin through a smartphone, tablet, computer, or other supported device.
We collect information that is reasonably necessary to operate Dropin, provide transportation services, maintain security, comply with legal obligations, and improve our services.
The information we collect depends on how you interact with Dropin.
When you register or use Dropin, we may collect:
full name;
phone number;
email address;
account username or identifier;
profile photograph, where applicable;
pickup location;
destination;
saved locations;
Ride history;
booking information;
payment information or payment references;
ratings and reviews;
customer support communications;
referral information;
promotional code information;
information you voluntarily provide to us.
Because Dropin connects Riders with Pragya/Keke Drivers, Drivers may need to provide additional information for registration and verification.
This may include:
full name;
phone number;
email address;
residential or business address;
profile photograph;
identification information;
driver's licence information;
vehicle registration information;
vehicle ownership or authorisation information;
insurance information;
roadworthiness information;
applicable permits and licences;
vehicle photographs;
payment/bank or mobile-money information;
Driver account information;
Ride history;
ratings and reviews;
customer complaints;
communications with Dropin;
information required for regulatory compliance.
Some Driver information may be verified through third-party or government sources where legally permitted and necessary.
Dropin will only request information reasonably necessary for Driver registration, verification, safety, payment, compliance, and operation of the Platform.
Location information is an important part of Dropin's ride-booking service.
Depending on the permissions you provide and the features you use, we may collect:
current GPS location;
pickup location;
destination;
approximate location;
Driver location;
route information;
trip route;
location associated with completed Rides;
location information generated while a Ride is active.
We use location information to:
connect Riders with nearby Drivers;
identify pickup locations;
provide navigation and route information;
facilitate Rides;
estimate arrival times;
calculate or support Fare calculations;
monitor Ride progress;
investigate safety incidents;
resolve disputes;
prevent fraud;
improve our services.
You may be able to disable location permissions through your device settings. However, doing so may prevent certain Dropin features from functioning properly.
When you use Dropin, we may automatically collect certain technical information, including:
IP address;
device type;
operating system;
browser type;
mobile application version;
device identifiers;
language settings;
time zone;
network information;
crash reports;
diagnostic information;
login information;
approximate location;
interaction with the Platform.
This information helps us maintain security, diagnose technical problems, prevent fraud, and improve Platform performance.
Dropin may support payment methods such as:
cash;
Mobile Money;
debit or credit cards;
bank or electronic payments;
other payment methods introduced through the Platform.
Where payment processing is handled by a third-party payment provider, your payment information may be processed directly by that provider.
Dropin may receive information such as:
payment status;
transaction reference;
amount paid;
payment method;
transaction date;
partial payment identifiers.
Where possible, Dropin does not store complete payment-card information on its own systems when a qualified third-party payment processor handles the transaction.
Payment providers may process information under their own privacy policies and terms.
When you contact Dropin, we may collect and retain information contained in your communication.
This may include:
emails;
telephone communications;
support tickets;
messages;
complaints;
feedback;
Ride-related communications;
information you provide when reporting a safety incident.
We use this information to:
respond to your request;
investigate complaints;
resolve disputes;
improve customer service;
investigate safety issues;
prevent fraud and abuse;
maintain appropriate records.
Where legally permitted, Dropin may receive information from third parties such as:
payment providers;
mapping and navigation providers;
identity verification providers;
vehicle or Driver verification services;
technology service providers;
fraud-prevention services;
regulatory authorities;
law-enforcement agencies;
other users where they submit a complaint or report involving you.
We will use such information only for appropriate and lawful purposes.
Dropin may use personal information for the following purposes:
To:
create accounts;
process Ride requests;
match Riders and Drivers;
facilitate transportation;
provide pickup and destination information;
communicate Ride status;
process payments;
maintain Ride records.
To:
verify Drivers;
verify vehicles;
detect suspicious activity;
prevent fraud;
investigate complaints;
investigate accidents and safety incidents;
protect Riders, Drivers, employees, and the public;
enforce Platform policies.
To:
respond to enquiries;
resolve complaints;
investigate disputes;
provide technical assistance;
improve customer service.
To:
analyse Platform performance;
identify technical problems;
improve features;
understand usage patterns;
develop new services;
improve Rider and Driver experiences.
To:
comply with applicable laws;
respond to lawful requests;
comply with regulatory requirements;
cooperate with competent authorities where legally required;
establish, exercise, or defend legal claims.
Dropin will process personal information on an appropriate lawful basis under applicable Ghanaian data-protection law.
Depending on the circumstances, this may include:
Where consent is required, we will request it before processing the relevant information.
You may withdraw consent where applicable. Withdrawal of consent does not affect processing that occurred lawfully before the withdrawal.
Some information is necessary to provide the services you request.
For example, Dropin generally cannot arrange a Ride without information such as your pickup location and destination.
We may process information where necessary to comply with applicable legal or regulatory obligations.
Where permitted by law, we may process information for legitimate business purposes such as security, fraud prevention, service improvement, and Platform administration, provided that applicable privacy rights are respected.
Ghana's DPC states that personal information should be processed lawfully, reasonably, transparently, and for specified purposes, and that processing should not be unnecessary or excessive. (DPC)
Dropin does not sell personal information to third parties for their independent marketing purposes.
We may share personal information where reasonably necessary with:
Certain information must be shared between Riders and Drivers to facilitate a Ride.
For example, a Driver may receive:
Rider name or identifier;
pickup location;
destination;
relevant Ride information.
A Rider may receive:
Driver name or identifier;
Driver profile information;
vehicle details;
relevant Ride information;
Driver location or estimated arrival information.
We aim to limit the information exchanged to what is reasonably necessary for the Ride.
We may use third-party companies to provide services such as:
payment processing;
cloud hosting;
mapping;
SMS;
email delivery;
push notifications;
customer support;
identity verification;
fraud detection;
analytics;
software infrastructure;
cybersecurity;
technical maintenance.
These providers may process personal information on Dropin's behalf and will be expected to maintain appropriate security and confidentiality measures.
The Ghana DPC recognises that personal data may be shared with third parties where appropriate, provided applicable data-protection requirements are satisfied. (DPC)
Dropin may disclose information where necessary to:
comply with Ghanaian law;
respond to lawful government requests;
comply with court orders;
respond to law-enforcement requests;
investigate suspected criminal activity;
protect the safety of individuals;
prevent fraud;
protect Dropin's legal rights;
enforce our Terms and Conditions.
We will seek to limit disclosures to information reasonably necessary for the relevant purpose, subject to applicable law.
If Dropin is involved in a:
merger;
acquisition;
restructuring;
financing;
sale of assets;
corporate reorganisation;
personal information may be transferred as part of the relevant transaction, subject to applicable privacy and legal requirements.
Where required, affected individuals will receive appropriate notice.
Some Dropin service providers may store or process information outside Ghana.
Where personal information is transferred outside Ghana, Dropin will take reasonable steps to ensure that applicable data-protection requirements are satisfied and that appropriate safeguards are in place.
This may include contractual, technical, organisational, or other legally recognised safeguards.
Dropin should identify its actual hosting, payment, mapping, analytics, messaging, and other providers before publishing this section as a final operational policy.
Dropin takes reasonable technical and organisational measures designed to protect personal information against:
unauthorised access;
unlawful processing;
accidental loss;
destruction;
alteration;
disclosure;
misuse.
Security measures may include:
access controls;
password protection;
encryption where appropriate;
secure communications;
authentication controls;
system monitoring;
backups;
staff access restrictions;
security testing;
incident response procedures.
However, no internet-based system can be guaranteed to be completely secure.
Users should protect their account credentials and immediately notify Dropin if they believe their account has been compromised.
The Ghana DPC specifically requires appropriate technical and organisational safeguards to protect personal information against loss, damage, unauthorised destruction, unlawful access, and unlawful processing. (DPC)
If Dropin becomes aware of a personal-data breach, we will take reasonable steps to:
investigate the incident;
contain the breach;
assess potential risks;
take corrective measures;
comply with applicable notification obligations;
notify affected individuals where legally required or otherwise appropriate.
Users should report suspected security incidents to:
Email: [Insert Security/Privacy Email]
Dropin retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.
Retention periods may depend on:
the nature of the information;
the purpose for which it was collected;
whether the account remains active;
legal requirements;
accounting requirements;
dispute resolution;
fraud prevention;
safety investigations;
regulatory obligations;
legitimate business requirements.
When personal information is no longer required, Dropin will take reasonable steps to delete, anonymise, or securely dispose of it.
Because Dropin provides transportation services, Ride records may be retained for legitimate purposes including:
customer support;
accounting;
payment reconciliation;
safety investigations;
fraud prevention;
dispute resolution;
legal compliance;
service improvement.
Location information should not be retained indefinitely where it is no longer reasonably required.
Dropin should establish specific internal retention schedules for Rider, Driver, location, payment, support, and verification information.
Dropin may use cookies, pixels, local storage, analytics technologies, and similar tools.
These technologies may help us:
keep users signed in;
remember preferences;
understand website usage;
improve Platform performance;
maintain security;
analyse traffic;
measure marketing campaigns;
provide relevant functionality.
Some cookies may be essential for the operation of the Platform, while others may require consent depending on applicable law.
For more information, please see our Cookie Policy.
Where permitted by law, Dropin may send information about:
promotions;
discounts;
new features;
referral programmes;
special offers;
service updates.
You may opt out of marketing communications by:
using the unsubscribe option in an email;
changing notification preferences;
contacting Dropin;
following the instructions provided in the relevant communication.
You may continue receiving essential service communications even after opting out of marketing.
Subject to applicable law and any lawful limitations, you may have rights regarding your personal information.
These may include the right to:
know whether your personal information is being processed;
request access to your personal information;
request information about how your data is used;
request correction of inaccurate information;
request deletion where legally applicable;
object to certain processing;
withdraw consent where consent is the basis for processing;
request other remedies available under applicable law.
The Ghana DPC identifies data-subject rights under sections 39–44 of Act 843, including rights of access and objection. (DPC)
You may request information about the personal data Dropin holds about you, subject to applicable legal restrictions.
A request may need to contain enough information for us to verify your identity and locate the relevant information.
We may request reasonable additional information to protect against unauthorised disclosure.
If your personal information is inaccurate, incomplete, or outdated, you may request that we correct or update it.
Some account information may also be updated directly through your Dropin account where the relevant functionality is available.
You may have the right to object to certain forms of processing of your personal information.
The Ghana DPC states that an individual may object to processing where the applicable statutory conditions are met, including where processing causes or is likely to cause unwarranted damage or distress. (DPC)
Where Dropin relies on your consent to process personal information, you may withdraw that consent.
Withdrawal of consent will not affect processing that was lawful before withdrawal.
Please note that withdrawing consent may prevent Dropin from providing certain features or services where the information is necessary to provide them.
To exercise your privacy rights, contact:
Privacy/Data Protection Team
Email: [Insert Privacy Email]
Phone: [Insert Phone Number]
Address: [Insert Business Address]
We may need to verify your identity before fulfilling certain requests.
The Ghana DPC's own privacy notice states that individuals can exercise applicable rights by written notice and that it aims to respond to such notices within 21 days. Dropin should establish its own operational response procedure consistent with the applicable legal requirements. (DPC)
Dropin is primarily intended for individuals who are legally capable of entering into agreements and using transportation services.
We do not knowingly collect personal information from children for purposes unrelated to providing lawful services.
Where a child or minor uses transportation services, a parent, guardian, or responsible adult should make appropriate arrangements and ensure compliance with applicable law and Dropin's policies.
If you believe a child has provided personal information to Dropin improperly, contact us at:
[Insert Privacy Email]
Drivers may have personal information displayed to Riders where reasonably necessary to facilitate a Ride.
This may include:
first name or identifier;
profile photograph, where applicable;
vehicle information;
relevant Driver rating;
approximate location;
Ride-related information.
Riders must not use Driver information for harassment, stalking, unsolicited marketing, or any unlawful purpose.
Likewise, Drivers must not misuse Rider information obtained through Dropin.
Drivers may only use Rider information for legitimate Ride-related purposes.
Drivers must not:
copy Rider contact information for personal use;
contact Riders after a Ride for unrelated purposes;
sell Rider information;
share Rider information with unauthorised people;
use Rider information for marketing;
stalk, harass, threaten, or intimidate Riders.
Violations may result in suspension or termination of the Driver's Dropin account and may be reported to relevant authorities where appropriate.
The Dropin Platform may contain links or integrations to third-party websites, applications, payment services, mapping platforms, social-media services, or other external services.
Dropin does not control the privacy practices of independent third parties.
We encourage you to review the privacy policies of third-party services before providing personal information to them.
Dropin may use analytics tools to understand:
how users interact with the Platform;
which features are used;
application performance;
website traffic;
technical errors;
general usage patterns.
Analytics information may be aggregated or otherwise processed to improve our services.
Dropin should list the actual analytics providers it uses before publishing a final version of this policy.
Dropin may process personal information to identify and prevent:
fraudulent accounts;
fake bookings;
payment fraud;
promotional abuse;
identity fraud;
suspicious activity;
account takeover;
other Platform abuse.
This may involve analysing account, transaction, device, location, Ride, and behavioural information where legally permitted.
You may request deletion of your Dropin account by contacting us or using the account deletion functionality provided through the Platform, where available.
Deleting your account may not result in the immediate deletion of every record.
Certain information may need to be retained where required or permitted by law, including information relating to:
financial transactions;
legal obligations;
fraud prevention;
safety incidents;
disputes;
regulatory requirements.
Where information must be retained, Dropin will limit its use to the purposes for which retention is required.
Dropin aims to maintain accurate and up-to-date personal information.
You are responsible for ensuring that information you provide to us is accurate.
You should update your account information when circumstances change.
The Ghana DPC identifies information quality and maintaining accurate, available, and up-to-date information as a core data-protection principle. (DPC)
Dropin may use automated systems or algorithms for purposes such as:
Driver-Rider matching;
fraud detection;
service optimisation;
pricing calculations;
account security;
operational analytics.
Where applicable law gives you rights concerning significant automated decision-making or profiling, Dropin will provide appropriate information and mechanisms required by law.
Dropin should update this section if it introduces automated decision-making that has significant legal or similarly significant effects on individuals.
Dropin may update this Privacy Policy periodically to reflect:
changes to our services;
changes to technology;
changes to applicable law;
changes to our data-processing practices;
regulatory guidance;
new features.
When we make material changes, we may provide notice through the Platform, website, email, or other appropriate communication channels.
The updated policy will include a new “Last Updated” date.
If you have concerns about how Dropin handles your personal information, we encourage you to contact us first so that we can investigate and attempt to resolve the issue.
Dropin Privacy Team
Email: [Insert Privacy Email]
Phone: [Insert Phone Number]
You may also have the right to lodge a complaint with Ghana's Data Protection Commission, which is the statutory body responsible for enforcing Ghana's data-protection framework. The DPC provides channels for privacy complaints and data-protection concerns. (DPC)
Data Protection Commission, Ghana
Website: Data Protection Commission Ghana
Dropin is committed to complying with applicable Ghanaian data-protection requirements.
The Data Protection Commission states that organisations processing personal data in Ghana are required to register with the Commission and maintain appropriate compliance measures. The DPC also identifies registration, a Data Protection Supervisor, an organisational privacy policy, appropriate security safeguards, and data-subject participation among its compliance expectations. (DPC)
Dropin will maintain appropriate internal policies, procedures, safeguards, and training designed to support responsible handling of personal information.
If you have questions about this Privacy Policy or how Dropin processes your information, contact us:
Dropin
Address: Accra, Ghana
Email: support@dropinride.com
Privacy Email: privacy@dropinride.com
Phone: +233-200-400
Website: dropinride.com
Data Protection Supervisor: Mr Frank
By creating an account or using Dropin, you acknowledge that you have had an opportunity to review this Privacy Policy and understand how Dropin may collect and process your personal information.
Where applicable law requires consent, Dropin will obtain the appropriate consent before carrying out the relevant processing.