Privacy Policy

Daily Express LTD (“Daily Express”, “we”, “us”) is the company that runs the Daily Express app. We are registered in the Federal Republic of Nigeria with registration number 9605872, and we are the data controller for the information described in this policy.

This policy covers the app and everything you do in it, whether you are booking and travelling as a passenger or signing up to drive. Where a passenger books travel for other people, we also handle those other people’s details on their behalf, and their rights come through you.

We collect what we need to run the service: enough to identify you, take your payment, get you onto the right bus, and pay the right driver. We do not collect what we do not need.

These are the things people reasonably worry about, so we will say plainly that we do not do them:

• We never see or store your card details or your bank login credentials. You enter those on Kora’s own checkout. When a payment succeeds, the bank account number and account name Kora returns are kept with the payment record, so a refund can go back to the same account.
• We do not use advertising or marketing trackers, and we do not build advertising profiles of you.
• We do not track your location in the background, and the app does not ask for it.
• We do not sell your data, and we do not rent it out.

We use your information only for the purposes below, and we rely on one of three lawful bases for each: performing the contract you enter into with us, meeting a legal obligation we are under, or our legitimate interest in running a safe, working transport service. Where we rely on legitimate interests, you can ask us what they are.

Running your booking

Holding your booking and payment details, confirming your trip, giving you and your driver the right information, and processing a refund if the trip is cancelled.

Verifying and paying drivers

Checking a driver's bank account and identity before they take trips, matching drivers to nearby departures, and transferring what they have earned to their bank account.

Contacting you

Sending booking confirmations, trip notices, refund outcomes, and, if you drive, notices about your trips and what you have been paid.

Keeping the service safe

Applying rate limits, preventing fraud and abuse, and investigating complaints or safety incidents.

Meeting legal duties

Keeping records we are required to keep under Nigerian law, and responding to lawful requests from the authorities.

We share the minimum each service provider needs to do its job. Here is the whole list.

We also disclose information where the law requires it, for example to a court, a regulator or the police, and where a passenger’s safety or a driver’s safety is at risk. We do not sell your information to anyone, for any purpose.

Some decisions in the app are made by a computer rather than by a person reading your application. We would rather you knew:

• Which drivers get offered a trip. When a departure needs a driver, our system scores the eligible drivers nearby and works down the list. The score blends how recently they were last called, how often they accepted when called, and how many of their trips they completed or cancelled. A driver with no track record starts on a neutral score rather than a penalty. Declining a call does not remove you or lower your score; not answering because your phone was off does not count against you either.
• Whether a departure is still open to book. A departure stops accepting bookings at its scheduled departure time.
• Whether a slot has departed. Bookings close automatically at the scheduled departure time.

You can ask us to explain or review any decision that has a significant effect on you, and we will do it on a human basis. Contact us and we will arrange it.

We use two cookies, both strictly necessary to keep you signed in. There are no advertising, analytics or tracking cookies on this site.

token

Keeps you signed in for your session. Expires quickly and is replaced automatically so that a stolen copy is short-lived.

refreshToken

Signs you back in so you are not asked for Google every time. Lasts up to seven days.

Both are set as HTTP-only, so scripts in your browser cannot read them, and they are marked Secure in production. You clear them by signing out or clearing your browser’s cookies.

A booking only works if the driver knows who is on board. So, for a confirmed trip:

• The assigned driver sees each passenger’s full name, email address, phone number, and whether they are bringing luggage.
• You see the trip’s departure point, destination, date, departure time, and who else you booked for.
• Drivers assigned to the same trip can see the trip’s passenger list. Passengers cannot see one another’s details, and drivers cannot see a passenger’s details for trips they are not driving.

We keep your information for as long as your account is active, and then for as long as the law requires us to keep it. Records that have to exist for tax, regulatory or dispute purposes are kept for the period Nigerian law sets out, and are not used for anything else.

When we no longer need to keep something, we delete it or replace it with something anonymous so it can no longer be traced back to you.

Under the Nigeria Data Protection Act, you have the right to:

• know what we hold about you, and get a copy of it;
• have anything inaccurate corrected. You can do most of this yourself from Settings;
• ask us to delete your data, or to stop using it;
• withdraw a consent you gave us, where our use of your data depends on it;
• object to a use of your data based on legitimate interests;
• ask us to correct a record that is wrong, or to complete a record that is missing;
• complain to the Nigeria Data Protection Commission if you think we have handled your data badly.

We do not charge for making a request, and we aim to answer within thirty days. We may ask you to confirm your identity first so we do not hand your data to the wrong person.

You can delete your account at any time from Settings → Delete account. We will ask you to type your email address to confirm, because deletion cannot be undone.

When you delete your account we sign you out, deactivate any driver profile, remove your link to Google, and replace your identifying details with anonymous placeholders so that historic financial records stay intact and auditable without still holding your identity. We cannot delete your account while you have trips booked and paid for that have not yet run.

• Sign-in cookies are HTTP-only and Secure in production, and session tokens expire quickly.
• Passwords are not the issue here. We never hold your Google password.
• Payment credentials never reach our servers; they are handled by Kora’s checkout.
• Access to internal systems, including the admin panel, is authenticated and signature-checked.
• Rate limits protect the booking and driver endpoints from abuse.

No system is perfect. If a breach affects your information we will tell you and the Nigeria Data Protection Commission as the law requires.

Some of our providers process data on servers outside Nigeria. Where they do, the transfer is under the arrangements the Nigeria Data Protection Act requires, so that your information is protected to a standard no lower than it is here.

You must be at least 14 years old to hold an account, and we do not knowingly collect information from anyone younger. If you believe a child has given us information, contact us, and we will close the account and remove their personal details from our live systems, keeping only the records Nigerian law requires us to retain.

If you book travel for a child, you are the one giving us their details, and you are responsible for it.

We may update this policy. When we do, we will change the date at the top of the page and, for any change that materially affects you, tell you in the app before it takes effect.

If you are unhappy with how we have handled your data, tell us first. Write to us and we will investigate and come back to you.

If you are still not satisfied, you can complain to the Nigeria Data Protection Commission.