Privacy policy
What we collect, why, and what you can ask us for.
Last updated: September 2026
Draft — have this reviewed before publishing. The text below describes accurately what the platform collects and how it is processed, but it has not been reviewed by a lawyer. Have it checked against Cameroonian data-protection law and your contractual commitments to MTN Mobile Money before publishing it as-is.
On this page
1. Who we are
WakaVoy is a ticketing platform that lets Cameroonian intercity transport companies sell their seats online, and lets passengers book them.
Two roles are distinct, and the difference matters:
- For company data (the business file, staff accounts), we decide what is collected and why.
- For passenger data, the company you booked with decides what is required at booking. We process it on their behalf, and they can access it to run their service.
2. What we collect
If you are a passenger
| Data | Why |
|---|---|
| Passenger name | To issue the ticket and allow checking at boarding |
| Phone number | To send your ticket and travel information by SMS |
| Booking reference (PNR) and seat | To identify your ticket |
| Amount paid and payment reference | To confirm the transaction and handle any refund |
| Additional fields required by the company | Varies by operator: identity document, next of kin, and so on |
The additional fields are not set by us. Each company chooses what it asks for, and you see the exact list when you book.
We never receive your Mobile Money PIN. You enter it on your own phone, with your operator. We only receive the outcome of the transaction.
If you are a transport company
- the identity of the company and its director;
- the supporting documents listed on our support page: commercial registration (RCCM), taxpayer card, transport licence, and the director's national ID card (front and back);
- the Mobile Money number used for settlement, and its account-holder name;
- your staff accounts: name, email address, role.
Technical data
Our servers record the IP address and timestamp of requests, to limit abuse and keep an audit trail of sensitive operations. If the mobile app hits an error, a technical report is sent to our diagnostics tool; it contains the error context, not the contents of your booking.
This marketing site sets no cookies and uses no analytics. The operator portal does use one session cookie, which is required to keep you signed in.
3. What we do with it
- issue your tickets and allow them to be checked at boarding;
- take payment and settle takings to the company;
- process refunds according to the rules the operator has set;
- send you the SMS and emails related to your journey;
- verify companies' identity before activating them;
- detect fraud and meet our legal obligations.
We do not use your data for advertising, and we do not sell it.
4. Who it is shared with
| Recipient | What they receive |
|---|---|
| The transport company you booked with | Your booking details, to operate the journey |
| MTN Mobile Money | What is needed for payment and settlement |
| Our card payment provider | Only if you choose to pay by card |
| Our Cameroon-hosted SMS relay | The number and the message text |
| Competent authorities | On lawful request only |
SMS delivery goes through a server located in Cameroon: Cameroonian operators require messages to originate from within the country.
Our application servers are hosted in the European Union, so passenger and company data is processed outside Cameroon.
5. How long we keep it
Booking and payment data is kept for as long as needed to operate the journey, handle a refund, and settle accounts with the company.
Some records have a period imposed by law. Suspicious-transaction reports and their supporting evidence are kept for ten years, under Cameroonian anti-money-laundering regulations (law No. 2010/012).
Retention periods for the other categories of data need to be settled with your legal counsel and written in here before publication.
6. How it is protected
- all traffic to the platform is encrypted in transit (HTTPS);
- identity documents and company files are encrypted at rest and reachable only by the people responsible for verifying them;
- each company's data is isolated at the database level: one company cannot read another's bookings;
- portal access is per-person, with two-factor authentication available;
- sensitive operations are logged.
7. Your rights
You can ask to see the data we hold about you, to have it corrected if it is inaccurate, or to have it deleted where we are not required to keep it.
If your request concerns a booking, contact the company you booked with first — they decide what is collected. We will help if they do not respond.
8. Contact us
For any question about your data: contact@wakavoy.com.
To report a security vulnerability or a data breach: security@wakavoy.com.