AREYE PRIVACY POLICY

Effective Date: 1 July 2026

Version: 2.0

1. Introduction

Welcome to Areye.

Areye is a technology platform operated by Dropship Trading (Pty) Ltd, a company incorporated in the Republic of Botswana ("Areye", "we", "our" or "us"). We provide digital mobility, logistics, payment and enterprise services across Botswana and other countries within the Southern African region.

Our services include, among others:

• Ride-hailing services
• Parcel delivery services
• Business and enterprise transport solutions
• Driver partner services
• Digital wallets
• Payment services
• Corporate travel management
• Business Portal services
• Mobile applications
• Websites
• APIs
• Customer support services

This Privacy Policy explains how we collect, use, disclose, store and protect your Personal Information whenever you use any Areye service.

We recognise that privacy is a fundamental right and are committed to processing Personal Information lawfully, fairly, transparently and securely.

By using Areye, you acknowledge that you have read and understood this Privacy Policy.

2. Scope of this Privacy Policy

This Privacy Policy applies to all Areye products and services, including:

• Areye Passenger App
• Areye Driver App
• Unified Areye Mobile Application
• Areye Business Portal
• Areye Admin Portal
• Areye Website
• Areye APIs
• Customer Support Channels
• Promotional Websites
• Marketing Campaigns
• Future products and services offered under the Areye brand.

This Policy applies regardless of whether you are:

• a passenger;
• a driver partner;
• a courier;
• a business customer;
• an enterprise administrator;
• an employee authorised to use a Business Account;
• a visitor to our website; or
• a prospective customer.

3. Our Privacy Principles

Areye is committed to the following principles:

• Transparency
• Accountability
• Lawful processing
• Data minimisation
• Purpose limitation
• Security
• Accuracy
• User control
• Privacy by design
• Continuous improvement

We only collect information that is reasonably necessary to provide, improve and secure our services.

4. Information We Collect

Depending on the services you use, we may collect the following categories of information.

4.1 Account Information

When creating an account we may collect:

• Full name
• Mobile number
• Email address
• Password (encrypted)
• Date of birth
• Profile photograph
• Preferred language
• Country
• City
• Referral information

Drivers may also be required to submit:

• National identity document
• Passport (where applicable)
• Driver's licence
• Vehicle registration
• Vehicle licence
• Insurance documentation
• Banking information
• Tax information where required
• Driver profile photograph
• Criminal clearance documentation where required by law or policy

Business customers may additionally provide:

• Company name
• Company registration details
• VAT or Tax Identification Number
• Business address
• Billing contacts
• Finance contacts
• Employee information
• Department information
• Cost centres
• Spending limits

5. Location Information

Location data is fundamental to Areye's services.

Depending on your permissions and how you use the Platform, we may collect:

• Precise GPS location
• Approximate location
• Pickup locations
• Drop-off locations
• Route travelled
• Driver navigation information
• Trip distance
• Trip duration
• Background location (where permitted and enabled)
• Location history associated with completed trips

We use location information to:

• match riders with nearby drivers;
• calculate fares;
• improve estimated arrival times;
• provide navigation;
• detect fraud;
• investigate safety incidents;
• improve dispatch efficiency;
• provide customer support; and
• comply with legal obligations.

Where required by your device operating system, we will request your permission before accessing location services.

6. Device Information

To improve security and performance, we may automatically collect information including:

• Device model
• Device manufacturer
• Operating system
• App version
• Device identifiers
• Language settings
• Network information
• IP address
• Crash reports
• Diagnostic information
• Performance metrics

This information assists us in troubleshooting technical issues and maintaining platform security.

7. Permissions Requested by the App

Depending on your device and the services you use, Areye may request permission to access:

Location

To provide ride-hailing, parcel delivery, navigation and safety features.

Camera

To:

• upload profile photographs;
• scan identity documents;
• upload proof of delivery;
• upload vehicle documents; and
• submit support evidence.

Photos and Files

To allow users to upload:

• identity documents;
• receipts;
• profile photographs;
• proof of payment;
• proof of delivery;
• support documentation.

Notifications

To notify users regarding:

• ride requests;
• driver arrivals;
• trip updates;
• parcel status;
• promotions;
• payment confirmations;
• security alerts; and
• account activity.

Microphone

Where available, the microphone may be used for features such as voice communication, customer support or future voice-enabled services. We will request permission before accessing your microphone.

You may revoke device permissions through your device settings at any time. However, some services may no longer function correctly.

8. Payment Information

Areye supports multiple payment methods.

Depending on your country and selected payment option, payments may be processed through third-party providers.

We may collect:

• Payment method selected
• Transaction reference numbers
• Wallet balances
• Wallet transactions
• Top-up history
• Withdrawal history
• Subscription status
• Invoice information
• Business account billing records

Areye does not store your complete debit or credit card details.

Card information is securely processed and tokenised by certified payment service providers that comply with applicable payment security standards, including PCI-DSS.

9. How We Use Your Personal Information

We process Personal Information only where we have a lawful basis to do so.

We may use your information to:

• create and manage user accounts;
• verify identity;
• provide transportation services;
• facilitate parcel deliveries;
• process payments;
• maintain digital wallets;
• prevent fraud;
• detect suspicious activity;
• improve driver-passenger matching;
• calculate fares;
• optimise routes;
• improve estimated arrival times;
• communicate with users;
• provide customer support;
• administer Business Accounts;
• process refunds;
• investigate complaints;
• investigate accidents;
• improve platform performance;
• conduct analytics;
• comply with legal obligations;
• enforce our Terms of Service;
• protect users and the public; and
• develop new products and services.

We may also use aggregated and anonymised information to understand trends and improve our Platform without identifying individual users.

10. Artificial Intelligence and Automated Processing

Areye may use artificial intelligence and machine learning technologies to improve our services.

These technologies may assist with:

• fraud detection;
• route optimisation;
• estimated arrival times;
• customer support;
• identity verification;
• document verification;
• safety monitoring;
• service recommendations;
• demand forecasting; and
• platform analytics.

Where automated systems materially affect a user's rights or access to services, appropriate human review may be conducted where required by applicable law.

11. Sharing of Personal Information

We do not sell your Personal Information.

We may share information only where necessary with:

• drivers;
• passengers;
• business customers;
• payment providers;
• cloud service providers;
• customer support providers;
• fraud prevention services;
• analytics providers;
• identity verification providers;
• insurers;
• legal advisers;
• auditors;
• regulators;
• law enforcement agencies where legally required; and
• affiliated companies within the Areye group.

All service providers are required to maintain appropriate confidentiality and security measures and may only process Personal Information on our instructions.

12. International Data Transfers

Because Areye operates across multiple countries, your Personal Information may be processed or stored outside your country of residence.

Where Personal Information is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are implemented to protect your information in accordance with applicable data protection laws.

Such safeguards may include contractual protections, encryption, technical security measures and other recognised international transfer mechanisms.

13. Data Retention

Areye retains Personal Information only for as long as necessary to fulfil the purposes described in this Privacy Policy, comply with applicable laws, resolve disputes, enforce our agreements, protect our legitimate interests, and maintain the integrity of our services.

Retention periods may vary depending on the type of information involved.

Examples include:

• Account information – retained while your account remains active and for an appropriate period thereafter where required by law or for fraud prevention.
• Trip and parcel records – retained for accounting, dispute resolution, regulatory compliance, safety investigations and operational analytics.
• Wallet and payment records – retained in accordance with financial, taxation and anti-fraud requirements.
• Driver verification documents – retained for the period required by applicable transport, employment, taxation or regulatory obligations.
• Customer support records – retained to improve our services and resolve future enquiries.
• Security logs and audit trails – retained to detect fraud, investigate incidents and protect the Platform.

Where retention is no longer necessary, Personal Information will be securely deleted, anonymised or irreversibly de-identified unless we are legally required to retain it.

14. Security of Your Information

Protecting your Personal Information is one of Areye's highest priorities.

We implement appropriate technical, organisational and administrative safeguards including, where appropriate:

• Encryption of data in transit using industry-standard TLS.
• Encryption of sensitive information at rest where appropriate.
• Secure authentication mechanisms.
• Multi-layer access controls.
• Role-based permissions.
• Audit logging.
• Continuous monitoring.
• Secure software development practices.
• Regular vulnerability assessments.
• Fraud detection systems.
• Backup and disaster recovery procedures.
• Secure cloud infrastructure.
• Database security controls.
• Network firewalls and intrusion detection technologies.

Although we take reasonable steps to safeguard Personal Information, no method of transmission over the Internet or electronic storage system can be guaranteed to be completely secure. Users are responsible for protecting their passwords, devices and account credentials.

15. Fraud Prevention and Safety

To protect users, drivers, businesses and the public, Areye may process Personal Information for fraud detection, abuse prevention and safety purposes.

This may include:

• detecting suspicious transactions;
• identifying unusual ride patterns;
• detecting multiple or fraudulent accounts;
• preventing payment fraud;
• investigating account abuse;
• monitoring repeated cancellations;
• detecting location spoofing;
• investigating identity fraud;
• investigating customer or driver complaints;
• responding to emergencies;
• assisting law enforcement where legally required.

Where appropriate, Areye may suspend, restrict or terminate accounts that are reasonably believed to have engaged in fraudulent or unlawful conduct.

16. Cookies and Similar Technologies

Our websites may use cookies, pixels, software development kits (SDKs), local storage and similar technologies.

These technologies help us to:

• remember your preferences;
• authenticate users;
• improve website functionality;
• analyse website usage;
• measure marketing performance;
• improve security;
• detect fraud.

You may manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our websites.

Our mobile applications may also use SDKs supplied by trusted third parties to improve application performance, crash reporting, analytics and fraud prevention.

17. Marketing Communications

With your consent where required by law, Areye may send:

• promotions;
• service updates;
• newsletters;
• product announcements;
• surveys;
• special offers;
• referral programmes;
• loyalty rewards.

You may opt out of receiving marketing communications at any time by:

• changing your notification preferences;
• using the unsubscribe link in emails;
• adjusting your account settings; or
• contacting Areye Support.

Even if you opt out of marketing communications, we may continue sending important service-related messages, including:

• security alerts;
• payment confirmations;
• booking confirmations;
• account notices;
• legal notifications.

18. Business Accounts

Where you use Areye through an employer, enterprise customer or Business Account, additional information may be processed to administer business travel and logistics services.

This may include:

• employer information;
• department;
• cost centre;
• employee identifier;
• travel approvals;
• spending limits;
• billing information;
• invoice history;
• business wallet allocations;
• reporting information.

Business administrators may be able to access limited information relating to trips, invoices and business usage where such access is necessary for legitimate business purposes and is consistent with applicable law.

Personal trips paid privately will not be disclosed to business administrators unless required by law or expressly authorised by you.

19. Driver Partners

If you operate on the Platform as a driver or courier partner, Areye may process additional information including:

• identity verification documents;
• driver's licence details;
• vehicle information;
• insurance details;
• roadworthiness documentation;
• bank account information;
• tax information;
• earnings;
• commissions;
• incentives;
• ratings;
• completed trips;
• customer feedback;
• safety incidents.

This information is used to:

• verify eligibility;
• maintain regulatory compliance;
• calculate earnings;
• administer payouts;
• improve safety;
• investigate complaints;
• monitor service quality.

20. Children's Privacy

Areye's services are intended for persons who are legally capable of entering into binding agreements under the laws applicable to them.

Individuals under the age of 18 should not create an Areye account without the involvement or consent of a parent or legal guardian where such consent is required by law.

If Areye becomes aware that Personal Information has been collected from a child in violation of applicable law, we will take reasonable steps to delete such information.

21. Your Privacy Rights

Subject to applicable law, you may have the right to:

• request access to your Personal Information;
• request correction of inaccurate information;
• request deletion of Personal Information;
• request restriction of processing;
• object to certain processing activities;
• withdraw consent where processing is based on consent;
• request portability of your Personal Information where applicable;
• request information regarding how your information has been processed;
• lodge a complaint with the relevant supervisory authority.

To exercise your rights, please contact us using the contact information provided below.

We may request additional information to verify your identity before responding to your request.

22. Account Deletion

You may request deletion of your Areye account at any time through the application or by contacting Areye Support.

Following a deletion request:

• your account will be deactivated;
• access to Areye services will cease;
• Personal Information will be deleted or anonymised where appropriate;
• certain information may be retained where required for legal, financial, taxation, fraud prevention or regulatory purposes.

Examples of information that may need to be retained include:

• completed transaction records;
• accounting records;
• tax records;
• fraud investigations;
• dispute records;
• court orders;
• regulatory obligations.

Deleting your account does not automatically remove information that Areye is legally required to retain.

23. International Operations

Areye is headquartered in Botswana and may operate in multiple countries throughout Southern Africa and other jurisdictions.

As our services expand, Personal Information may be processed by affiliates, partners and service providers located in different countries.

Where cross-border transfers occur, Areye will implement reasonable safeguards designed to ensure that Personal Information remains protected in accordance with applicable legal requirements.

24. Compliance with Applicable Laws

Areye is committed to complying with applicable privacy and data protection legislation, including, where applicable:

• Botswana's Data Protection Act;
• South Africa's Protection of Personal Information Act (POPIA);
• applicable electronic communications legislation;
• financial services legislation;
• consumer protection laws;
• transportation regulations; and
• other applicable privacy laws in countries where Areye operates.

Nothing in this Privacy Policy limits any rights you may have under applicable law.

25. Changes to this Privacy Policy

Areye may update this Privacy Policy from time to time to reflect:

• changes in our services;
• technological developments;
• changes in applicable laws;
• security improvements;
• operational changes.

Where required by law, we will notify users of material changes before they take effect.

The updated Privacy Policy will always be published on our website and made available through our applications.

Continued use of the Platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised Privacy Policy to the extent permitted by law.

26. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Information, you may contact us:

Areye

Website: https://www.areye.app

Email: support@areye.app

For privacy-related enquiries, access requests, correction requests or account deletion requests, please contact our Privacy Team using the above contact details.

We are committed to responding to legitimate privacy requests within the timeframes required by applicable law.

End of Privacy Policy