1Who we are

Sufuri ("we", "us") is the tricycle registration and tracking platform operated on behalf of the Kano State Ministry of Transportation. For the purposes of the Nigeria Data Protection Act 2023, the Ministry is the data controller and Sufuri operates as its data processor and service operator.

Our registered contact point for data protection matters is privacy@sufuri.ng. Postal enquiries may be sent to the Ministry of Transportation, Kano State Secretariat, Kano, Nigeria.

2What information we collect

We only collect what the registration, payment and tracking process actually requires. The table below lists every category we hold and why.

3How we collect it

• Directly from you — when you register on this website, in the mobile app, or at a registration centre.
• From our field agents — accredited agents, team leads and supervisors may enter your details on your behalf during an assisted registration.
• From identity authorities — when you submit your NIN, we retrieve the matching record (name, date of birth, gender, address, photograph and signature) from the National Identity Management Commission through an accredited verification partner.
• From your tracker — once a GPS device is fitted, it reports position, speed and status to our tracking server.
• From payment providers — confirmation of transfers made to your assigned virtual account, including the sending account name and bank.

4How we use your information

• Verify your identity against the national identity database before registration.
• Register your tricycle and issue its tricycle number, certificate, permit and stickers.
• Produce driver identity cards.
• Generate payment references, collect fees and confirm settlement.
• Provision and monitor the GPS tracker fitted to your vehicle, and show your phone's location when you switch on Phone Tracker.
• Run your wallet: fund it by bank transfer, and show your balance and transaction history.
• Process the airtime, mobile data and bill payments you request.
• Show maps, search for places and plan routes.
• Credit and pay accredited agents for registrations they complete.
• Answer your enquiries and provide support.
• Produce statistics and reports for the Ministry. These are aggregated and do not identify you individually.
• Detect and prevent fraud, duplicate registrations and misuse of the platform.
• Meet legal, regulatory and audit obligations.

Our lawful basis

We process your data to perform a task carried out in the public interest and under the statutory authority of the Kano State Ministry of Transportation, to fulfil the registration contract between you and the platform, and to meet legal obligations such as identity verification and record keeping. Where none of those apply, we rely on your consent, which you may withdraw at any time.

5Who we share it with

We share only what each recipient needs, and only for the purposes below. We do not sell personal data to anyone.

6GPS tracking

Tricycles registered on the platform are fitted with a GPS tracker. While the device is powered, it reports its position, speed and direction to our tracking server, together with the device identifier and SIM number.

• Location data is tied to the vehicle, not to a named individual, though it can be linked to the registered owner and assigned driver.
• Live and historical location is visible to the vehicle owner, to authorised platform administrators, and to the Ministry.
• Location history is disclosed to law enforcement only on a lawful request, such as a court order or a documented investigation into theft or a serious offence.
• Tracking serves vehicle recovery, road safety and regulatory oversight. It is not used to profile individuals or to make automated decisions about you.

Phone Tracker in the mobile app

Phone Tracker is off until you switch it on. When you do, the app asks for location permission and then sends your phone's precise position, speed, heading, altitude and accuracy to our tracking server while Phone Tracker is on and the app is open. You can switch it off at any time in the app, or withdraw location permission in your phone's settings, and reporting stops. This location is visible to you and to authorised platform administrators, and is kept and disclosed on the same terms as tracker data above.

7How we protect your information

• Traffic between your device and the platform is encrypted in transit using HTTPS.
• Access to personal records is restricted by role — agents, bank staff, security officers, printers and administrators each see only what their role requires.
• Identity documents and photographs are stored on protected servers that are not publicly browsable.
• Administrative actions on records are logged so that changes can be traced.
• Databases are backed up regularly so that records can be restored after a failure.

8How long we keep it

We keep your information for as long as your registration is active, and afterwards only for as long as the law or a legitimate administrative need requires.

9Your rights

Under the Nigeria Data Protection Act 2023 you have the following rights over your personal data.

To exercise any of these, email privacy@sufuri.ng with your registered phone number so that we can identify you. We respond within 30 days. There is no charge, unless a request is clearly excessive or repetitive.

10Cookies and the mobile app

This website uses cookies that are necessary to keep you signed in, to remember your preferences, and to protect forms against abuse. We do not use advertising cookies and we do not track you across other websites.

The Sufuri mobile app stores a sign-in token on your device so you do not have to log in each time. Removing the app removes that token. The app asks for location permission only when you use a feature that needs it: Phone Tracker, and showing where you are on the map. It reads your location only while the app is open on your screen, and does not track you in the background.

11Children

The platform is for licensed commercial tricycle owners, drivers and accredited agents, all of whom must be adults. We do not knowingly collect information about anyone under 18. If you believe a child's data has been submitted, contact us and we will remove it.

12Storage and international transfers

Platform data is held in our primary database and mirrored to managed cloud services used for the mobile app and for backup. Some of those providers operate data centres outside Nigeria, which means your information may be stored or processed abroad.

Where that happens, we use providers that offer recognised safeguards and contractual protections consistent with the Nigeria Data Protection Act 2023.

13Changes to this policy

We update this policy when the platform or the law changes. The effective date and version at the top of this page always reflect the current text. If a change materially affects your rights, we will tell you through the platform or by SMS to your registered number before it takes effect.

14Contact and complaints