Privacy Policy
Boza Yam Holdings (Pty) Ltd (registration number 2026/883593/07, "Boza Yam", "we") runs the Boza Yam app and website, which connect riders with drivers for car rides and shared taxis, and offer travel bookings. This policy explains what personal information we collect, why, who we share it with, and the rights you have under South Africa's Protection of Personal Information Act (POPIA).
1. What we collect
- Account details: your full name, email address, phone number and the role you choose (rider or driver).
- Photos: your profile photo, the photo riders take when signing up on our website, and the safety selfie drivers take each time they go online.
- Location: your pickup and drop-off points. While a driver is online, their live location is shared so riders can see nearby cars and track their trip.
- Trips and payments: rides and taxi bookings, fares, ratings, wallet top-ups and payments, and Boza Yam trip fees. Card details are handled by our payment provider, Yoco; we never see or store your full card number.
- Driver details: vehicle make, model, colour and registration, plus earnings and payouts.
- Support and safety: messages you send to support and any issues you report.
- Device information: a notification token so we can send you trip updates.
2. Why we use it
- To match riders with drivers and show each other's name, photo, rating and vehicle during a trip.
- To work out fares, take payments and pay drivers.
- To keep everyone safe: approving drivers, checking the go-online selfie, live trip sharing and the emergency button.
- To send trip updates and, if you choose, news and offers (you can switch these off in Settings).
- To answer support requests, resolve disputes and meet our legal and tax obligations.
3. Who we share it with
- Riders and drivers on the same trip see each other's first name, photo, rating, and for drivers, the vehicle and live location.
- Service providers who run parts of Boza Yam for us: InstantDB (our database and file storage), Vercel (website hosting), Yoco (payments), Twilio (SMS codes), and Google and OpenStreetMap services (maps, addresses and routes).
- Authorities, only when the law requires it or to protect someone's safety.
We do not sell your personal information.
4. How long we keep it
We keep your account information for as long as you have an account. When you delete your account, we delete your profile, photos, selfies, saved places, live location and wallet. We keep trip, payment and support records, no longer linked to your name, for as long as tax and transport laws require.
5. Your rights
Under POPIA you can ask us to:
- tell you what personal information we hold about you;
- correct information that is wrong;
- delete your information. You can delete your account yourself in the app under Profile → Settings → Delete account;
- stop using your information for marketing.
You can also complain to the Information Regulator of South Africa (inforegulator.org.za) if you're unhappy with how we handle your information.
6. Security
Your information is stored with access controls so that only you, the people on your trip, and authorised Boza Yam staff can see it. No system is perfectly secure, so please tell us straight away if you think your account has been misused.
7. Children
Boza Yam is for people aged 18 and over. Under-18s may only ride with a parent or guardian.
8. Contact us
Questions or requests about your privacy go to our Information Officer, Michael Sello Radebe: stylistblessed@gmail.com. We'll update this policy when our services change and show the new date at the top.
