Politique de confidentialité

Mis à jour le 18 October 2026

Cette page n’est disponible qu’en anglais pour le moment.

Ingendo shows public-transport fares across Rwanda, on the Ingendo mobile app and on this website. It is operated by Harness Solutions (“we”, “us”). This policy explains what personal data we handle, why, and the rights you have under Rwanda’s Law N° 058/2021 on the protection of personal data and privacy.

The short version

• Travellers don’t need an account to look up fares. An optional account, opened with your phone number and a PIN, keeps your saved trips and favourites on every phone you use. The app has no ads, analytics or tracking.
• Your location never leaves your phone. If you allow it, the app uses it on your device to sort the bus parks and stops nearest to you.
• Agency staff and administrators have accounts on the dashboard. We keep what’s needed to run those accounts and a record of changes made to fares.
• We don’t sell personal data or use it for advertising.

1. Travellers (mobile app and public website)

You can look up fares without signing up or telling us who you are. Accounts are optional (see below).

• Location. The app asks for your location only when you use a feature that needs it, such as “Nearby” or “Use my location”. The position is used on your phone to find the closest stations and is not sent to us or anyone else. You can refuse or withdraw the permission at any time in your phone’s settings; the rest of the app keeps working.
• Ticket bookings. When you buy a ticket we keep the trip, the number of seats, the name on the ticket, your phone number and the MoMo transaction ID you send us. You pay the bus agency directly by MoMo: we never see your MoMo PIN or balance. The agency sees these details to confirm your payment and check your ticket at boarding.
• Route lookup counts. When you look up a journey, the app and website tell us which route it was (the two stations) and roughly when. Nothing else is sent with it: no account, device identifier, location or IP address. We keep only hourly totals per route and show them to transport agencies as demand insights, so they can plan buses and times.
• Data stored on your phone. The app saves a copy of the fare catalogue (so it works offline), your recent stations, your display currency and your theme. This stays on your device and is removed when you clear the app’s data or uninstall it. You can also clear it from the app’s Settings.
• Connecting to our servers. To download fares and exchange rates, the app and website connect to our servers. Like any internet service, our hosting provider briefly logs technical details of these requests (such as IP address, time and device type) for security and to keep the service running. These requests contain no account, name or location.

Optional traveller account

If you choose to sign in in the app, we process:

• Your mobile number, which identifies your account. If sign-in by SMS is on, we also use it to text you one-time codes.
• Your name, only if you choose to give one.
• What you save: saved trips (two stations), favourite stations, your home station, and your display currency and language.
• Reviews you write: your rating of an agency and any comment. They are public, shown with your first name only (never your number). Comments are checked by our team before they appear, and anyone signed in can report a review. You can change or delete your review at any time; deleting your account deletes your reviews.
• Your PIN and sessions: your sign-in PIN, and any SMS codes, are stored only as one-way hashes (never readable); codes expire after 10 minutes, and sessions last up to 30 days or until you sign out.

We use this only to run your account and keep what you saved in sync across your phones. Your location is never part of your account. You can delete your account at any time in the app (Settings › Account › Delete account) or by contacting us; see Delete your account.

2. Agency staff and platform administrators

If you use the Ingendo dashboard, we process:

• Account details: your name, mobile number, email address (if given), and your password, which is stored only as a secure one-way hash and never in readable form.
• Your role: which agencies you belong to, your role there, and the stations you’re assigned to.
• A record of changes: when you create or change fares, stations, team members or agency details, we log what changed, who changed it and when. This keeps published prices accountable and lets agencies see their own history.
• Sign-in sessions: secure tokens that keep you signed in. They expire after 30 days or when you sign out.
• Emails we send you: invitations to join an agency and password-reset links, which go to the address you or your agency provided.

3. Transport agencies

When an agency registers, it gives us business details: its name, contact phone and email, RURA licence number, TIN and supporting documents (such as its RURA licence or RDB certificate). We use these only to verify that the agency is genuine. The documents are seen only by the agency’s own administrators and Ingendo’s platform administrators, and are never published. Once approved, the agency’s name, contact phone and email, stations, routes and fares are shown publicly so travellers can find and contact it.

4. Cookies and similar storage on the website

The public pages set no cookies. When you sign in to the dashboard, we set strictly necessary cookies that keep you signed in securely (they can’t be read by the page’s scripts). Your browser also remembers your theme and the agency you last worked in. We use no advertising or third-party tracking cookies.

5. Why we use your data

• To provide the service you asked for: running your dashboard account and showing your agency’s fares.
• Legitimate interests: keeping Ingendo secure, preventing misuse, and keeping a reliable history of fare changes.
• Legal obligations, where a law requires us to keep or disclose information.

6. Who else handles the data

We use trusted service providers to run Ingendo. They process data only on our instructions and only to provide their service:

• Hosting and database (Render and Neon), with servers in Frankfurt, Germany.
• Email delivery (Resend), to send invitations and password-reset emails.
• SMS delivery (InTouch SMS, Rwanda), to send sign-in codes to the number you enter.
• File storage, for agency verification documents.

Exchange rates come from public rate providers. Our servers fetch them, and no personal data is sent. We may disclose information if required by Rwandan law or a competent authority.

7. Where the data is stored

Our servers are outside Rwanda, in the European Union, which has strong data-protection standards. We store and transfer personal data outside Rwanda only as permitted by Law N° 058/2021 and with appropriate safeguards.

8. How long we keep it

• Dashboard accounts: for as long as the account is active, and deleted on request.
• Traveller accounts and everything saved with them: until you delete the account, which removes them straight away. Used sign-in codes are deleted after 7 days; they are kept that long only to prevent abuse.
• Sign-in sessions: up to 30 days. Invitations: 7 days. Password-reset links: 1 hour.
• The record of fare changes: for as long as it’s needed to keep published prices accountable, after which it’s deleted or anonymised.
• Agency verification documents: for as long as the agency is registered.
• Data on your phone: until you clear it or uninstall the app.
• Route lookup counts: anonymous hourly totals, kept while they’re useful for agencies’ insights.

9. Security

Data is encrypted in transit (HTTPS). Passwords and sign-in tokens are stored only as hashes. Access to agency documents and administration is limited to the people who need it, and important changes are logged.

10. Your rights

Under Law N° 058/2021 you can ask us to:

• tell you what personal data we hold about you, and give you a copy;
• correct data that is wrong or incomplete;
• delete your data, or restrict how we use it;
• stop processing that relies on our legitimate interests;
• move your data to another service, where that applies.

Contact us using the details below. We reply within 30 days. If you’re not satisfied, you can complain to Rwanda’s supervisory authority, the National Cyber Security Authority (NCSA).

11. Children

Anyone can look up fares without an account. Traveller accounts are meant for people aged 16 and over; dashboard accounts are for adults acting for a transport agency.

12. Changes to this policy

If we change how we handle data, we’ll update this page and its date. For significant changes, we’ll also tell dashboard users by email or in the dashboard.

13. Contact

For privacy questions or requests:

See also our contact page.