Privacy Policy
1. Who We Are
Ganusii is an AI-powered carpooling and ride-sharing marketplace operated by Undaunted Lab, a business incorporated in Lagos, Nigeria. We connect Lagos-based working professionals who share daily commute corridors, enabling them to carpool, split fares, and coordinate rides through WhatsApp.
For the purposes of the Nigeria Data Protection Act 2023 (NDPA), Undaunted Lab is the Data Controller for all personal data processed through the Ganusii website (ganusii.com) and any related waitlist forms.
Our contact details:
Undaunted Lab (trading as Ganusii)
Lagos, Nigeria
Email: privacy@ganusii.com
General: hello@ganusii.com
2. What Information We Collect
We only collect information that is necessary for the purpose of operating our waitlist, validating corridor demand, and preparing to match riders with drivers on the Ganusii platform.
2.1 Information you provide directly
| Category | Data Fields | Who Provides It |
|---|---|---|
| Identity | Full name | All users |
| Contact | WhatsApp phone number; email address (drivers at signup; riders only if they give a work email during onboarding) | All users |
| Commute profile | Home area, work destination, morning departure window, evening return window, commute frequency | All users |
| Vehicle information | Seats available, car type, vehicle ownership confirmation | Drivers only |
| Role | Rider or Driver designation | All users |
2.2 Information collected automatically
When you visit ganusii.com, we may automatically collect certain technical data including:
- IP address and approximate geographic location (city level)
- Browser type, version, and operating system
- Pages visited, time on site, referring URL
- Device type (mobile, tablet, desktop)
- UTM parameters and campaign source tags
Our hosting provider (Vercel) records basic request logs, including your IP address, and keeps them for about an hour. Our pages also load Google Tag Manager and Google Fonts, so Google receives your IP address. As of 16 October 2026 no analytics or advertising tags are switched on: the site does not run Google Analytics or the Meta (Facebook) Pixel and sets no analytics or advertising cookies. UTM tags in a link you followed are saved with your signup so we know which campaign reached you. If we switch analytics or advertising on, we will update this policy first and ask for your consent where the law requires it. We do not use this data to identify you individually without your consent.
2.3 Information we do not collect
We do not collect payment card details, bank account numbers, government ID numbers, passport details, or biometric data at any stage of the current pre-launch waitlist process.
3. How We Collect Your Information
- Waitlist registration forms — when you complete the Rider or Driver registration form on ganusii.com.
- WhatsApp communication — when you message or interact with us through our WhatsApp Business number.
- Email — when you contact us directly at hello@ganusii.com or respond to communications from us.
- Cookies and tracking technologies — automatically as you browse our website (see Section 10).
- Referrals — when another Ganusii user refers you to the platform. In this case, we receive only the information you subsequently provide when completing the registration form.
4. Why We Collect Your Information (Legal Basis)
Under the NDPA 2023, we must have a lawful basis to process your personal data. Our legal bases are:
| Processing Activity | Legal Basis (NDPA) |
|---|---|
| Adding you to the waitlist and messaging you on WhatsApp and by email about your carpool (profile set-up, matches on your route, ride confirmations) | Consent — you ticked the consent checkbox on our registration form. We record the time and the wording you agreed to. |
| Matching you with riders or drivers on your commute corridor | Consent; and legitimate interest (to provide our core service) |
| Sending service updates, waitlist status, and launch notifications | Consent; or legitimate interest where you are an existing contact |
| Analytics and website improvement | Legitimate interest; where cookies are involved, consent |
| Complying with legal obligations (e.g., data breach notifications) | Legal obligation |
| Safety screening and fraud prevention | Legitimate interest |
Where we rely on consent as our legal basis, you may withdraw that consent at any time by contacting us at privacy@ganusii.com. Withdrawing consent will not affect the lawfulness of any processing carried out before your withdrawal.
5. How We Use Your Information
We use the personal data we collect for the following purposes:
- Waitlist management — to record your interest, confirm your registration, and track your position on the waitlist.
- Corridor matching — to cluster riders and drivers on the same commute route so that, when demand is validated, we can match you with suitable carpool partners.
- Communication — to contact you by email or WhatsApp with updates on your corridor's launch status, safety information, and onboarding instructions.
- Ride coordination on WhatsApp — to message you one-to-one about your carpool: setting up your profile, telling you when you are matched, confirming each ride ahead (morning rides the evening before, rides home on the day), sending your pickup time, and handling cancellations. Reply STOP at any time to end these messages.
- Platform improvement — to analyse which corridors have the highest demand and make decisions about launch sequencing and product development.
- Safety and verification — to conduct basic identity checks on riders and drivers, and vehicle checks on drivers, before anyone is matched on an active corridor; and, once rides start, to handle safety reports, including HELP messages sent to us on WhatsApp.
- Analytics and marketing — to measure the performance of our advertising campaigns and improve our website experience.
- Legal compliance — to meet our obligations under Nigerian law, including the NDPA.
We will not use your personal data for automated decision-making that produces legal or significant effects without your explicit consent, and we will not use it to build individual profiles for commercial advertising purposes unrelated to Ganusii.
6. Who We Share Your Information With
We do not sell your personal data. We share it only as necessary with the following categories of recipients, all of whom are bound by confidentiality obligations or their own privacy policies:
6.1 Service providers and data processors
| Provider | Purpose | Location |
|---|---|---|
| Airtable | Lead database — stores waitlist registrations and corridor data | United States |
| Meta (WhatsApp Business) | Direct communication with registered users | United States |
| Resend (sending through Amazon SES) | Sending the welcome email to drivers who register | United States |
| Vercel | Website hosting and the signup form's server functions; short-lived request logs | United States / Global CDN |
| Google (Tag Manager and Fonts) | Loads our tag manager script and web fonts; receives your IP address. No analytics tags are active. | United States |
6.2 Other Ganusii users (at matching stage only)
When you are matched into a carpool, we share your first name, WhatsApp number and pickup point only with the other people riding in the same car, so you can reach each other on the day. Riders also see their driver's car make, model and colour. Every ride is confirmed ahead; if a seat in your car goes to someone else on the route, that person receives the same details and we tell everyone in the car who is riding. We tell you this when you sign up on WhatsApp, and again when your carpool is formed. If you would rather not share your number, tell us before you are matched and we will not place you in a carpool until we can offer you another way to coordinate.
6.3 Legal and regulatory disclosures
We may disclose your personal data to law enforcement agencies, courts, or regulatory bodies (including the Nigeria Data Protection Commission) where we are legally required to do so, or where necessary to protect the safety of users or the public.
6.4 Business transfers
If Undaunted Lab or the Ganusii business is acquired, merged, or transferred to another entity, your data may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.
7. International Data Transfers
Some of our third-party service providers (including Airtable, Google, and Meta) are located outside Nigeria, primarily in the United States. The NDPA requires that when personal data is transferred outside Nigeria, adequate protections must be in place.
Where we transfer your data internationally, we ensure that:
- The recipient country provides an adequate level of data protection; or
- We have implemented appropriate safeguards such as Standard Contractual Clauses (SCCs), Data Processing Agreements (DPAs), or we rely on the recipient's adherence to frameworks such as the EU-US Data Privacy Framework.
For more information about the specific safeguards applied to any particular transfer, please contact us at privacy@ganusii.com.
8. How Long We Keep Your Data
| Data Type | Retention Period | Reason |
|---|---|---|
| Waitlist registration data | 24 months from registration, or until you request deletion | To manage corridor launches and contact you when your route is ready |
| Inactive waitlist entries (no corridor launched) | Deleted or anonymised after 24 months | Data minimisation principle |
| Active user data (after corridor launch) | Duration of your use of the service, plus 12 months | Service delivery and dispute resolution |
| Server request logs (including IP address) | About 1 hour (Vercel) | Security and fixing errors |
| Email communications | 36 months | Customer service and legal record keeping |
| Legal/compliance records | 7 years | Nigerian statutory requirements |
After the applicable retention period, personal data is either deleted securely or anonymised so that it can no longer be associated with any individual.
9. Your Rights Under the NDPA
The Nigeria Data Protection Act 2023 (NDPA) grants you the following rights in relation to your personal data. To exercise any of these rights, please email us at privacy@ganusii.com. We will respond within 30 days of receiving a verified request.
Please note that some rights are not absolute and may be subject to exemptions or limitations under Nigerian law. We will always explain clearly if we are unable to fulfil a request.
10. Cookies and Analytics
Cookies are small text files a website stores on your device. As of 16 October 2026 our website sets no cookies: no analytics, advertising or tracking cookies, and none are needed for the signup form to work.
10.1 Google Tag Manager
Our pages load Google Tag Manager, a tool that would let us add analytics later. Right now it contains no tags, so it does not run Google Analytics or the Meta Pixel. Loading it, like loading Google Fonts, sends your IP address and browser details to Google.
10.2 If this changes
If we switch on analytics or advertising tags, we will update this policy before we do and, where the law requires it, ask for your consent before any non-essential cookie is placed. You can also block or delete cookies at any time in your browser settings.
11. Children's Privacy
Ganusii is intended for working professionals aged 18 years and above. We do not knowingly collect personal data from children under the age of 18. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@ganusii.com and we will delete it promptly.
12. Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:
- HTTPS encryption for all data transmitted to and from our website
- Access controls limiting who within Undaunted Lab can access your personal data
- Use of reputable third-party platforms (Airtable, Vercel) with their own security certifications
- Regular review of our data handling practices
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it, and notify you, as required by the NDPA.
13. Links to Third-Party Sites
Our website may contain links to third-party websites, including WhatsApp and social media platforms. This Privacy Policy applies only to ganusii.com. We have no control over and accept no responsibility for the privacy practices of any third-party websites. We encourage you to read the privacy policy of any site you visit.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or the services we offer. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Post a notice on our website homepage for at least 30 days
- Notify registered users by email or WhatsApp where the changes are significant
Your continued use of the Ganusii website after changes have been posted constitutes your acceptance of the updated policy.
15. How to Complain
If you believe your data protection rights have been violated, you have the right to lodge a complaint with Nigeria's data protection authority:
Nigeria Data Protection Commission (NDPC)
Website: ndpc.gov.ng
Email: info@ndpc.gov.ng
Phone: +234 916 061 5551
Address: 1919 Cadastral Zone C06, Mbora District, opposite Efab City Estate, Life Camp, FCT Abuja, Nigeria
We would, however, appreciate the opportunity to address your concerns directly before you contact the regulator. Please contact us first at privacy@ganusii.com.
16. Contact Us
For any questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact our Data Protection contact at:
Undaunted Lab (Ganusii)
Email: privacy@ganusii.com
General enquiries: hello@ganusii.com
WhatsApp: +234 911 888 1185
Lagos, Nigeria