Privacy Policy

This Privacy Policy explains what personal data we collect, why, how we use and share it, how long we keep it, and your rights. It applies to all users of the Seer iOS and Android apps, including riders, drivers, and people who apply to become drivers. The web admin dashboard is accessible only to Seer staff and is subject to separate internal policies.

3.1All users

Phone number (E.164 format)

Authentication and account identity

Legal basis: contract performance

Full name

Account identity and trip manifests

Legal basis: contract performance

Gender (M/F)

Service operations and matching

Legal basis: contract performance

Email address (optional)

Non-critical communications

Legal basis: consent

Static pickup/drop-off coordinates

Route assignment and trip operations; snapshotted at booking time

Legal basis: contract performance

Payment receipt images (JPEG/PNG)

Payment verification by admin

Legal basis: contract performance

Wallet balance and transaction data

Subscription and refund management

Legal basis: contract performance

Booking and trip history

Service delivery and dispute resolution

Legal basis: contract performance / legitimate interest

Profile avatar (optional)

User identification in-app

Legal basis: consent

Push notification token

Service alerts and trip updates

Legal basis: consent / legitimate interest

Crash and error data via Sentry

App stability and bug fixing

Legal basis: legitimate interest

3.2Drivers

Live GPS location during an active trip

Enables riders to track driver approach; stored transiently

Legal basis: contract performance

Vehicle details (plate, make, capacity)

Trip operations and rider identification of the vehicle

Legal basis: contract performance

3.3Driver applicants

If you apply to drive for Seer, we additionally collect the verification documents listed in Section 6. These include national identity and criminal record documents. We do not collect these from riders.

3.4What we do not collect

We do not collect credit or debit card numbers or biometric data. We do not collect national identity documents or criminal record documents from riders — these are required only from driver applicants, as set out in Section 6.

4.1The driver's GPS position is captured and transmitted in real time during an active trip only. Riders' locations are not tracked at any time.

4.2Riders assigned to the same active trip can see the driver's real-time position within the app during the trip window only. This visibility ends when the trip concludes or when you are marked dropped off or absent, whichever is earlier.

4.3Real-time location data is stored transiently in Firebase Realtime Database and is deleted when the trip ends, is cancelled, or is terminated. We retain only the time of the last position update, never the coordinates themselves. Static pickup and drop-off coordinates are retained for the duration of your account plus 2 years after deletion.

4.4We do not sell location data or use it for advertising profiling.

4.5When you view the live trip map, map imagery is requested from the OpenStreetMap Foundation. This request necessarily discloses your device's IP address and the map area being viewed to that organisation. See Section 7.

5.1Payment receipt images are uploaded to Firebase Storage and accessible only to authorized Seer administrators for payment verification.

5.2We do not store, transmit, or process credit or debit card data of any kind.

5.3Wallet transaction records are retained for the duration of your active account and for 5 years after account deletion, in line with financial record-keeping best practices.

6.1This section applies only to drivers and driver applicants. If you use Seer solely as a rider, none of it applies to you.

6.2To verify that a driver is licensed, insured, and lawfully able to carry passengers, we require the following document scans:

• Driving licence — front and back
• National identity document — front
• Vehicle registration
• Vehicle insurance certificate
• Criminal record certificate
• Photograph of the vehicle showing the number plate

6.3Legal basis: performance of our agreement with the driver, and our legitimate interest — shared by every rider — in verifying that the person driving is licensed, insured, and suitable to carry passengers. Criminal record information is processed solely to make an admission decision and for no other purpose.

6.4These documents are visible only to authorized Seer reviewers. They are not shared with riders, other drivers, or any third party except where disclosure is required by Sudanese law or a valid legal order.

6.5Where an application is withdrawn, rejected, expired, or otherwise closed, the document scans are automatically deleted 90 days after that outcome. Approved applicants' documents are copied to the driver record and retained while the driver remains active on the Platform.

6.6If you are rejected, you may ask us to delete your documents before the 90-day period elapses by writing to seer.com.sd@gmail.com.

We do not sell your personal data. We share it only as described below:

Within Seer

Administrators and operations staff can view data necessary to operate the service. Access is limited to personnel who need it.

With drivers

The driver assigned to your trip receives, for each rider on the manifest: your phone number, your pickup stop and its coordinates, your party size, and the subscription amount recorded against your booking. The phone number allows the driver to reach you at pickup. Drivers do not receive your gender, your wallet balance, your payment receipts, or your trip history on other routes.

With other riders

Riders sharing an active trip can see the driver's live position. They do not receive your personal details.

Google LLC (Firebase)

Authentication, database, storage, cloud functions, messaging. Location: USA / EU. See: privacy.google.com

Functional Software Inc. (Sentry)

Crash reporting; may capture partial user context in stack traces. Location: USA. See: sentry.io/privacy

OpenStreetMap Foundation

Map imagery for the live trip map. Receives your IP address and the map area viewed when the map is displayed. Location: United Kingdom. See: osmfoundation.org/wiki/Privacy_Policy

Our email provider

Transactional email (account and administrative notices) is delivered through a third-party mail server, which processes your email address and the content of those messages.

Airtel Sudan

Text messages (sign-in codes and driver-application notices) are delivered through Airtel Sudan's SMS service, which processes your phone number and the content of those messages. Location: Sudan.

Google LLC (Google Fonts)

Font rendering on admin dashboard only. Location: USA.

Legal requirements

We may disclose data to courts or regulators when required by Sudanese law or a valid legal order.

Your data is processed on Google LLC infrastructure with servers in the USA and, where applicable, the EU. Sentry processes crash data in the USA and the OpenStreetMap Foundation operates in the United Kingdom. By using the Platform you acknowledge your data may be transferred outside Sudan. Where these providers are subject to the GDPR, they maintain Standard Contractual Clauses under Article 46; this reflects our providers' arrangements and is not a representation that the GDPR governs our processing generally.

Account data (name, phone, gender, email)

Active account + 3 years after deletion

Booking and trip history

Active account + 3 years after deletion

Payment receipts

Active account + 5 years after deletion

Wallet and transaction records

Active account + 5 years after deletion

Driver real-time GPS location

Deleted automatically when the trip ends, is cancelled, or is terminated

Static pickup/drop-off coordinates

Active account + 2 years after deletion

Driver applicant document scans (closed applications)

Deleted automatically 90 days after the application closes

Approved driver documents

Retained while the driver is active, then per the periods above

Crash/error data (Sentry)

90 days (Sentry default policy)

Profile avatar

Deleted within 30 days of account deletion request

Push notification tokens

Deleted upon account deletion or app uninstall

Deletion of live location data and of closed applicants' documents is automated. The remaining periods are applied by us on request or on review; if you want confirmation that data relating to you has been deleted, write to seer.com.sd@gmail.com and we will confirm in writing.

Depending on your jurisdiction, you may have the following rights:

Access

Request a copy of personal data we hold about you.

Rectification

Request correction of inaccurate or incomplete data.

Erasure

Request deletion of your personal data.

Portability

Request your data in a structured, machine-readable format.

Objection

Object to processing based on legitimate interest.

Withdrawal of consent

Where processing is based on consent (optional email, avatar, push notifications), you may withdraw at any time without affecting prior processing.

To exercise any right, email seer.com.sd@gmail.com with the subject "Data Rights Request." We will respond within 30 days.

11.1You may request deletion of your account and associated data at any time by emailing seer.com.sd@gmail.com with the subject "Account Deletion Request" from your registered phone number, or by using the account deletion option in the app where available.

11.2We will confirm receipt within 5 business days and complete deletion within 30 days of verification.

11.3Certain data may be retained where required by law (e.g. financial records) as set out in Section 9.

11.4Deleting your account does not automatically refund any unused wallet credit. See the Terms of Service for how credit is treated on closure.

12.1If a breach of security leads to the accidental or unlawful destruction, loss, alteration, or unauthorised disclosure of your personal data, and that breach is likely to result in a significant risk to you, we will notify you without undue delay and in any event within 72 hours of becoming aware of it.

12.2The notice will describe, in plain language, what happened, which categories of data were affected, what we have done in response, and what you can do to protect yourself.

12.3Where we are required to notify a regulator, we will do so within the period that regulator requires.

13.1Push notifications require your consent at the OS level (iOS/Android). You may withdraw consent at any time through your device notification settings.

13.2Disabling push notifications does not affect your ability to use the Platform but may result in missing time-sensitive updates.

The Seer app uses minimal local device storage for functional purposes only: your preferred display language and theme setting. We do not use tracking cookies or behavioral advertising. The admin dashboard may use session cookies for authentication only.

The Platform is available only to people aged 18 or over, and is not directed at children. We do not knowingly collect data from anyone under 18. If we learn that we have collected data from a person under 18, we will delete it without undue delay. If you believe we hold data about a child, contact seer.com.sd@gmail.com immediately.

We implement industry-standard technical and organizational measures: Firebase Security Rules restricting access by authenticated role, TLS encryption in transit, and access controls limiting admin access to authorized personnel. Driver verification documents are held in access-controlled storage separate from general app data. No system is completely secure; we cannot guarantee absolute security of data transmitted over the internet.

We will notify you of material changes via in-app notification at least 14 days before the new version takes effect. The version number and effective date at the top identify the current version.

Data Controller: Seer Application

Address: [REGISTERED_ADDRESS]

Privacy, support and rights requests: seer.com.sd@gmail.com