Privacy Policy

Tiketza is a bus ticketing platform operating in Cameroon, a product of VENAAPPS. It has two sides: an app and website for travellers, and a panel used by the bus agencies that sell through us.

For your traveller account — your login, your bookings, your membership — Tiketza decides how the data is used and is responsible for it. For the passenger details on a ticket, the bus agency you travel with also holds that data and uses it for its own manifest and its own records. That means some of what follows is shared responsibility, and it is flagged where it applies.

Questions, requests, or complaints: support@tiketza.com.

When you create an account: your name, phone number, email address and password. Your region, if you set one. Your password is stored as a hash and is never readable, by us or anyone else.

When you book: the passenger name, phone number and identity document number for each seat, the trip, the seat, the fare and how it was paid. Cameroonian transport rules require the passenger list, so these fields are not optional.

If you scan an identity document: a photograph of the document, and the name, number and document type read from it. See section 5 — the photograph leaves our servers.

If you hold a Tiketza membership: your member code, your prepaid balance, your loyalty points, your trip count, the identity document registered to the card, and every top-up and spend on it.

If you turn on location sharing: your position, accuracy, speed and heading while you are travelling on a trip you have booked. This is off unless you switch it on. See section 6.

If you message support: the messages and any files you attach.

Automatically: your IP address, for rate limiting and abuse prevention. A session cookie that keeps you signed in. We do not run advertising trackers or third-party analytics on this site.

• To perform our contract with you — we cannot sell you a seat without a passenger name, a phone number to send the ticket to, and a record of the payment.
• Because the law requires it — the passenger manifest and the identity document on it, and the financial records behind every sale.
• Because you asked us to — location sharing, marketing messages, and saving a travel document for reuse are each off until you turn them on, and can be turned off again.
• Because we have a legitimate interest — keeping accounts secure, preventing fraud and abuse, and rate-limiting our own endpoints.

Names, phone numbers and identity document numbers are encrypted in the database, not stored as plain text. That applies to your account, to every passenger on a ticket, to saved travel documents, and to agency staff records. Decryption happens only inside the database, for a request that has already been authorised.

Membership cards carry an encrypted, signed payload rather than a readable balance, so a card that is lost cannot be read or altered with an ordinary phone.

Everything travels over HTTPS. Sessions are signed tokens in an HTTP-only cookie, which means scripts running in your browser cannot read them.

We do not sell your data and we do not share it for anyone else's advertising. It reaches these parties only to do a job we asked them to do:

• The bus agency you travel with — the passenger name, phone and document on your ticket, so they can produce a manifest and board you. They hold this in their own right.
• Supabase — our database and file storage, hosted in Paris, France.
• Stripe — bank card payments and membership top-ups. Card numbers go to Stripe, never to us.
• CinetPay — Mobile Money payments (MTN MoMo, Orange Money).
• Meta (WhatsApp) — your phone number and the ticket, so the ticket and its PDF can reach you on WhatsApp.
• OpenRouter — see the note below.
• Google Maps — used to place agency branches on a map. Branch coordinates, not your position.

We will also disclose data where a court, a regulator or the police lawfully requires it.

Tiketza can show an agency where one of its buses is. There is no tracker on the bus — the position comes from passengers who choose to share it.

• It is off until you turn it on, in Security centre in the app.
• Positions are only accepted while you hold a live booking on that trip, and only for that trip.
• The agency sees the bus on a map. It is not a feed of you as an individual, and it stops when the trip does.
• Turning it off deletes the positions already shared, not just future ones. Withdrawing consent removes the trail.

• Your account — until you close it.
• Bookings, tickets and payments — kept as financial and transport records even after you close your account, because the agency is required to keep them.
• Location positions — deleted the moment you turn location sharing off.
• Saved travel documents and favourites — deleted when you close your account, or whenever you remove them yourself.
• Support conversations — kept while they are useful for handling further questions.

You can ask us to show you what we hold about you, correct it, delete it, or stop using it in a particular way. Write to support@tiketza.com and we will answer within 30 days. You can also complain to your data protection authority.

You can close your account yourself in the app, under Account, or request deletion here if you can no longer sign in.

A Tiketza account is for people aged 18 or over. Children travel on a ticket booked by an adult, and the details on that ticket are provided by that adult.

When this policy changes in a way that affects you, we will say so in the app before the change takes effect. The date at the top always reflects the current version.