KudiExpress

Privacy Policy

Effective date: July 20, 2026

1. Introduction

This Privacy Policy explains how KUDIWAY GROUP LTD ("KudiExpress," "we," "us," or "our") collects, uses, stores, discloses, and protects information when you use the KudiExpress website, mobile application, and related services.

KudiExpress currently provides digital services for intercity bus booking, hotel discovery and reservation, travel management, customer support, and related partner operations.

Additional services, including rides, deliveries, logistics, marketplace ordering, rewards, and other transportation or travel services, may be introduced in the future. Where those services become available, this Privacy Policy will apply to them unless a separate notice is provided.

By using KudiExpress, you acknowledge the practices described in this Privacy Policy.

2. Who This Policy Applies To

This Privacy Policy applies to:

  • Customers and travelers
  • Hotel guests
  • Hotel owners and hotel managers
  • Transport operators and transport partners
  • Bus drivers and station personnel
  • Merchants and service providers, where available
  • Visitors to our website and mobile application
  • People who contact KudiExpress support

3. Information We Collect

Account and identity information

We may collect information such as:

  • Full name
  • Phone number
  • Email address, where provided
  • Profile photograph
  • User ID and account identifiers
  • Account role and approved workspaces
  • Referral code and referral information
  • Authentication and account-status information

Phone authentication information

KudiExpress may use phone-number authentication and one-time passwords to register users, verify phone numbers, secure accounts, and sign users into the application.

Authentication providers may process your phone number, device information, verification status, and security signals needed to prevent fraud and confirm that authentication requests are legitimate.

Bus booking information

When you search for or book bus travel, we may collect:

  • Origin, destination, and selected route
  • Travel date and departure time
  • Pickup and drop-off points
  • Passenger name and phone number
  • Seat or trip information
  • Luggage details
  • Booking number and electronic ticket information
  • Booking, boarding, and trip status
  • Payment and refund status
  • Driver, bus, station, and transport-operator information

Hotel reservation information

When you search for or reserve hotel accommodation, we may collect:

  • Hotel and room selected
  • Check-in and check-out dates
  • Number of guests
  • Guest name and contact details
  • Reservation number and reservation status
  • Room-payment and booking-fee status
  • Check-in and check-out records
  • Communications between the guest and hotel
  • Cancellation, rejection, or expiration information

Hotel and transport partner information

Hotel partners, transport operators, drivers, and staff may provide:

  • Business or organization name
  • Contact-person information
  • Business address and service locations
  • Hotel, room, vehicle, terminal, route, or station details
  • Photos and videos of hotels, rooms, buses, or facilities
  • Driver and staff records
  • Payment or settlement preferences
  • Business-verification and approval information
  • Operational activity and performance information

Photos, videos, and uploaded content

We may collect photos, videos, documents, and other files that users or partners choose to upload. These may include profile photos, hotel images, room images, business images, support attachments, and other content needed to operate the service.

Location information

With your device permission, KudiExpress may collect precise or approximate location information.

This information may be used to:

  • Display nearby terminals, hotels, and services
  • Determine pickup and drop-off locations
  • Calculate routes and distances
  • Support live trip tracking
  • Help passengers view the progress of a trip
  • Support driver and transport operations
  • Improve safety, reliability, and fraud prevention
  • Provide location-based services where available

You can manage location permissions through your device settings. Some location-dependent features may not work when permission is disabled.

Payment and transaction information

We may collect payment-related information such as transaction references, amounts, payment method, payment status, booking fees, refunds, and settlement records.

Payments may be processed by third-party payment providers. KudiExpress does not intend to store complete payment-card numbers or mobile-money authentication credentials on its own systems.

Usage, device, and technical information

We may automatically collect:

  • Device type, operating system, and app version
  • Browser type and language
  • IP address and general network information
  • Device and installation identifiers
  • Pages, screens, buttons, and features used
  • Search activity and product interaction
  • Session activity and login events
  • Notification tokens and delivery status
  • Crash logs, diagnostics, and performance information
  • Security, fraud-prevention, and abuse-detection signals

Customer support information

When you contact us, we may collect your name, contact details, booking information, messages, attachments, complaint details, and records of how the support request was resolved.

4. How We Use Information

We may use information to:

  • Create, authenticate, and manage accounts
  • Verify phone numbers and prevent unauthorized access
  • Process bus searches, bookings, tickets, and boarding
  • Process hotel searches, reservations, and check-ins
  • Connect customers with hotels and transport operators
  • Coordinate drivers, staff, stations, routes, and trips
  • Process payments, booking fees, refunds, and settlements
  • Send booking confirmations and service notifications
  • Provide trip, reservation, and payment-status updates
  • Respond to customer-service requests
  • Personalize and improve the user experience
  • Analyze app usage, performance, and reliability
  • Detect fraud, abuse, suspicious activity, and security risks
  • Investigate complaints and enforce our terms
  • Maintain financial, operational, and legal records
  • Comply with legal and regulatory requirements
  • Develop and introduce new KudiExpress services

5. Notifications and Communications

We may send service-related communications by push notification, SMS, phone call, email, WhatsApp, or in-app message where appropriate.

These communications may include:

  • One-time passwords and security notices
  • Booking and reservation confirmations
  • Trip assignment or departure updates
  • Payment and refund updates
  • Hotel check-in or booking-status information
  • Customer-support responses
  • Important changes to our services or policies

You may manage push-notification permissions in your device settings. Some essential account, security, or transactional communications may still be sent where necessary.

6. KudiPoints and Platform Credits

KudiExpress may provide KudiPoints, rewards, promotional credits, referral rewards, or other platform credits.

These credits are intended for eligible services within KudiExpress. Unless KudiExpress expressly states otherwise, they:

  • Are not a bank account or savings product
  • Are not intended as a general-purpose payment instrument
  • Cannot be used outside KudiExpress
  • Cannot be withdrawn as cash
  • Cannot be exchanged for currency
  • Cannot be transferred between users
  • May be subject to eligibility, expiry, or promotional rules

Transaction and reward records may be retained to administer balances, prevent abuse, resolve disputes, and maintain business records.

7. How We Share Information

We do not sell your personal information. We may share information when necessary to provide, secure, and operate KudiExpress.

Hotels and accommodation providers

We may provide hotels with guest names, phone numbers, reservation dates, room details, guest counts, payment status, and other information necessary to manage a reservation.

Transport operators, stations, and drivers

We may provide transport partners, drivers, and station personnel with passenger information, booking details, pickup information, ticket status, luggage details, and other information required to operate a trip.

Service providers

We may use providers that support:

  • Cloud hosting and database storage
  • Authentication and phone verification
  • Payment processing
  • Push notifications and messaging
  • Maps and location services
  • File and image storage
  • Analytics and performance measurement
  • Crash reporting and diagnostics
  • Customer support and communications

These providers may process information only as necessary to provide their services and according to their own privacy obligations.

Legal, safety, and regulatory disclosures

We may disclose information when reasonably necessary to comply with law, respond to lawful requests, protect users, investigate fraud, enforce agreements, defend legal claims, or protect the rights and safety of KudiExpress and others.

Business transfers

Information may be transferred as part of a merger, restructuring, financing, acquisition, sale of assets, or similar business transaction, subject to appropriate legal protections.

8. Third-Party Services

KudiExpress may rely on third-party services such as cloud platforms, authentication providers, payment processors, maps, analytics, crash-reporting tools, notification providers, and hosting services.

These third parties may collect or process information according to their own privacy policies. We encourage you to review the policies of any third-party service you use through KudiExpress.

KudiExpress is not responsible for the privacy practices of independent hotels, transport operators, or external websites outside our control.

9. Data Storage and International Processing

KudiExpress and its service providers may store or process information in Ghana or in other countries where cloud, authentication, payment, analytics, or technology providers operate.

Where information is processed outside Ghana, we take reasonable steps to use providers and safeguards designed to protect the information in accordance with applicable requirements.

10. Data Security

We use reasonable administrative, organizational, and technical measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include authentication controls, access restrictions, encrypted communications, monitoring, backups, and security reviews.

No online system is completely secure. Users should protect their devices, one-time passwords, and account access and should contact us if they suspect unauthorized activity.

11. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

  • Providing active services and maintaining accounts
  • Completing bookings and reservations
  • Maintaining transaction and operational records
  • Handling refunds, complaints, and disputes
  • Preventing fraud and protecting platform security
  • Complying with tax, accounting, regulatory, and legal duties
  • Establishing, exercising, or defending legal claims

Retention periods may vary based on the type of information, account status, legal obligations, and operational needs.

When information is no longer required, we may delete, de-identify, aggregate, or securely archive it as permitted by law.

12. Your Rights and Choices

Subject to applicable law and verification of your identity, you may have the right to:

  • Be informed about how your personal data is used
  • Request access to personal data held about you
  • Request correction of inaccurate or incomplete information
  • Object to certain processing
  • Withdraw consent where processing depends on consent
  • Request deletion or restriction where applicable
  • Complain about the handling of your personal data
  • Manage device permissions for location, photos, and notifications

Ghana's Data Protection Commission identifies rights including the rights to be informed, access personal data, object, withdraw consent, and complain about unlawful processing.

We may retain certain information after a deletion request when required for legal compliance, payment records, fraud prevention, dispute resolution, or the protection of legal rights.

13. Account Deletion

Users may request account deletion through the account settings, the account-deletion page, or by contacting KudiExpress support.

Before completing a request, we may need to verify the identity of the requester and confirm that outstanding bookings, payments, disputes, or security matters have been resolved.

Deleting an account may remove or deactivate profile information, but transaction, booking, fraud-prevention, regulatory, and legal records may be retained where reasonably required or permitted by law.

14. Children and Younger Users

KudiExpress is not directed to children under 13, and we do not knowingly create accounts for or collect personal information directly from children under 13.

A person who is below the legal age required to enter a booking or payment agreement should use KudiExpress only with the involvement and permission of a parent or legal guardian.

A parent or guardian who believes that a child has provided personal information without appropriate permission should contact us so that we can review the matter.

15. Ghana Data Protection

KudiExpress aims to handle personal data in accordance with applicable Ghanaian data-protection requirements, including the Data Protection Act, 2012 (Act 843).

Individuals may also have the right to raise a concern with Ghana's Data Protection Commission regarding the handling of their personal data.

16. Changes to This Privacy Policy

We may update this Privacy Policy as KudiExpress changes, new services are introduced, or legal and operational requirements evolve.

We will post the updated version in the application or on our website and revise the effective date. Where required, we may also provide an additional notice.

17. Contact Us

Questions, privacy requests, correction requests, deletion requests, or complaints may be sent to:

KUDIWAY GROUP LTD

KudiExpress Privacy Support

Email: info@kudiexpressapp.com

Please provide enough information for us to identify your account and understand your request. We may ask for additional verification before disclosing, correcting, or deleting personal information.