Last updated: 4 November 2026 · Applies to the Tando app on Android and iPhone.
This policy explains what the app collects, why, who it is shared with, and how to get it deleted. It is written to match what the software actually does.
Who we are. Tando is operated by Vastara Ventures Limited, a company registered in Nigeria (RC 9881159), which is responsible for your personal data. Contact: info@masterbtechnicalservicesllc.com.
| Data | When | Why |
|---|---|---|
| Phone number and/or email address | When you create an account | To sign you in and to identify your account |
| Name and profile photo | When you set them | Shown to the person you ride with, so you can recognise each other |
| Precise location — passengers | When you request a trip, and during a trip | To find your pickup point, price the trip, and match you to a nearby driver |
| Precise location — drivers, including in the background and when the app is closed | Continuously, but only while you are switched online as a driver | To send you nearby requests, let your passenger watch you approach, and record the route of a trip in progress |
| Trip records: pickup and drop-off addresses and coordinates, distance, fare, payment method, times, and the route travelled | Each trip | To operate the trip, price it, settle payment, support you afterwards, and resolve disputes |
| Driver documents: driver’s license number and expiry, vehicle make, model, colour and plate, vehicle insurance end date, and the document photos you upload (license, vehicle registration, insurance certificate, vehicle) | When you apply to drive, and when you renew a license or insurance | To verify that you are legally allowed to carry passengers. We look up your license on the FRSC portal and your vehicle’s insurance on NIID, the insurers’ database, and remind you before either expires |
| Identity check: a photo of your ID, two selfies (one following an on-screen instruction), the name on the ID (once verified, it becomes your account name), the type of ID (for a foreign passport, also the country that issued it), the last four digits of its number and a one-way fingerprint of the full number, and the results of checks the app runs on your phone | Only if we ask you to verify your identity, for example before you drive | To confirm you are who you say you are, and that one person does not hold several accounts. The photos are deleted 30 days after we decide; the full ID number is never stored |
| Automatic face match: only if you tick “Match my selfie to my ID automatically” when verifying | When you send an identity check with the box ticked | To verify you faster. Our own server compares your selfies with the photo on your ID once. No face measurements are kept after the check; the photos are deleted on the same 30-day schedule. Without the tick, a person compares them. A failed match is never a refusal on its own: a person decides |
| Drivers’ payout account: the bank, the account name and the last four digits of the account number | When a driver adds a payout account | To pay the driver’s earnings. The full account number is held by Paystack, not by us |
| Payment references and results | Each payment by card, bank transfer, USSD, bank account or wallet | To confirm your payment and refund it where due. Card numbers never reach us — they are entered on Paystack’s own checkout page |
| A saved card or bank account: Paystack’s authorisation code, the card type, last four digits, bank and expiry, or the bank and account name | Only if you agree to save a card or link a bank account | To charge it for what you agreed to (see the terms, section 3), and to show it to you in Payment methods. Removing it there stops us using it |
| Your agreement to a saved card or bank account: what you agreed to, the version of the terms, and when | When you agree | To show what you authorised, if a charge is ever questioned |
| Wallet: your balance and each top-up, trip payment, tip, refund and adjustment | When you use the wallet | To keep your balance correct, refund it, and resolve disputes |
| Delivery details: what the package is, its size and any value you declare, meeting-point directions, and the name and phone number of the other person (the recipient, or the sender if you are receiving). If you book a delivery for someone else, the names and phone numbers of the sender and the recipient you enter | When you send, receive or book a package | Only to complete that delivery: so the driver can reach them and hand over the package to the right person. Kept with the trip record for the same period as other trip records, and never used for marketing. Please only give us someone’s details if they expect the delivery. If you choose a number from your contacts, your phone’s own picker is used and Tando receives only the one contact you choose |
| A photo of the package (when the app asks for one before you book a delivery) | When you book a delivery | So the driver can check at pickup that it is the right package, and to look into a package report. Seen only by you, the driver who accepted the delivery (from acceptance until the trip ends) and our safety staff, through links that expire within minutes. The app removes the photo’s location data before upload. Deleted 30 days after the trip ends (kept longer only while a report about that package is open), and when your account is deleted |
| Proof of delivery | When a driver completes a delivery | To show the package was handed over. The photo stays on the driver’s phone; we store only a digital fingerprint of it, which cannot be turned back into the picture |
| Device notification token | On sign-in | To send trip notifications to your device, and occasional service messages from our team about your account or the service. We never use notifications for marketing |
| Crash reports: the error, the app version, your phone model and operating system version, and your account ID — not your name, phone number, email or location | When the app crashes or hits an error | To find and fix problems |
| Messages you send in the in-app chat | During a trip, between accepting and finishing it | So you and the other person can arrange the pickup or handover without phoning each other. Messages are shown to the other person on the trip only |
| Women-first rides: that you turned on “Prefer a woman driver” (by ticking “I’m a woman”), and when; for drivers, that our team confirmed you are a woman (from your ID documents, never by software from a photo) and whether you turned on women-first requests | Only if you turn it on, or a driver is confirmed | To offer your ride first to nearby women drivers, and to send women-first requests only to drivers who chose them. Only the women drivers a request is offered to see a “Women-first” tag on it. Turning it off deletes your choice at once. Our team can see which rides were women-first, to look into reports |
| Fleet membership: that you joined a fleet, which fleet, and when you consented | Only if a driver joins a fleet using the owner’s code | So a fleet owner can see limited weekly activity for their own vehicles. The owner sees only your first name and the first letter of your surname, your weekly trip count, kilometres driven, hours online, and document expiry dates due within 30 days — never your location, routes, passengers, fares or earnings. You consent when you join and can leave at any time |
| Ratings and any safety report you submit | When you submit them | Safety and quality |
| Notes our support team writes about your account: what you told us and what we did about it | When you contact us, or when we handle an issue on your account | So whoever helps you next knows the history. Only Tando staff can see these notes; they are never shown in the app or shared |
If you use the app as a driver, it collects your location while it is in the background and while it is closed. This is what lets you keep receiving ride requests when your phone is locked or you are using another app, and it is what lets a passenger who has booked you see your car approaching.
This collection happens only while you are switched online as a driver. Switching offline stops it. Passengers’ locations are never collected in the background.
Your exact position is shared with a passenger only after you accept their trip, and only until that trip ends. Riders browsing the map before booking see nearby cars as anonymous markers that rotate periodically and cannot be traced back to an individual driver.
We do not sell your personal data, and we do not share it with advertisers or data brokers.
Under the Nigeria Data Protection Act you may ask us to give you a copy of your data, correct it, or delete it, and you may object to how we use it. You can download a copy of your data yourself at any time: in the app, open the menu and choose Download my data. For anything else, contact info@masterbtechnicalservicesllc.com. You also have the right to complain to the Nigeria Data Protection Commission.
In the app: open the menu and choose Request account deletion. You can also request it from the web, without installing anything, at our account deletion page. See that page for exactly what is removed and what we are required to keep.
The app is not intended for anyone under 18, and we do not knowingly collect data from children.
If we change this policy we will update the date at the top and, for significant changes, tell you in the app.