Privacy Policy

1. Information You Give Us

When you create and use a Blu account we collect:

• your name and email address;
• your phone number, where you provide one;
• your password, which is stored only as a secure one-way hash — never in readable form;
• two-factor authentication settings, if you enable them.

2. Ride and Location Information

A ride cannot be operated or billed without location data. While a ride is active, the app records the bicycle's position periodically, and each BluBike carries its own GPS tracker.

For every ride we store:

• the bicycle used and the start and end times;
• the route recorded as GPS points during the ride;
• the distance travelled and any time the bicycle was held stationary;
• the fare charged.

This information is used to calculate your fare, locate and recover bicycles, investigate incidents, and keep the fleet safe. Location is recorded only while a ride is in progress.

3. Payment Information

Wallet top-ups are processed by our payment provider, Paystack. Your full card number and CVV are entered on Paystack's own secure checkout and are never seen or stored by Blu.

What we retain is limited to:

• your wallet balance and transaction history;
• a payment reference for each top-up;
• for saved cards, only the card brand, last four digits, expiry month and year, issuing bank, and a Paystack authorisation token used to charge that card again with your consent.

4. How We Use Your Information

We use your information to:

• create and secure your account and verify your email address;
• unlock bicycles and operate your rides;
• calculate fares and maintain your wallet;
• provide customer support and respond to reports;
• detect fraud, misuse, theft and damage;
• meet our legal and regulatory obligations.

5. Who We Share It With

We do not sell your personal data. We share it only where necessary:

• Paystack, to process payments and store card authorisations;
• our email provider, to deliver verification codes and account notices;
• law enforcement or regulators, where we are legally required to do so or where it is necessary to investigate theft, an accident, or damage to Blu property.

6. How Long We Keep It

Account information is kept for as long as your account is open. Ride and transaction records are kept after a ride ends so that we can support billing enquiries, disputes, insurance claims and legal obligations. When you delete your account, personal identifiers are removed except where we are required to retain records by law.

7. Security

Passwords are hashed, verification codes are stored hashed and expire after a short period, and sessions are held in secure storage on your device. No system can be guaranteed completely secure, so please keep your login details confidential and tell us immediately if you suspect unauthorised use of your account.

8. Your Rights

Subject to Nigerian data protection law, you may request access to the personal data we hold about you, ask us to correct inaccurate details, request deletion of your account, or object to certain processing. You can update your name, email and phone number at any time in the app, and delete your account from the profile screen.

9. Children

Blu is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised, and continued use of the Services after an update constitutes acceptance of the revised policy.

11. Contact Us

For any privacy question or request, contact Blu at:

• Email: blutranslogisticsltd@gmail.com
• Phone: 09167701799