Privacy Policy
Last updated: July 2026 • Version 1.2
ZimDrive (“we”, “our”, “us”) operates the ZimDrive rider mobile app and the ZimDrive Driver companion app. This policy explains what personal and technical information we collect, why we collect it, who we share it with, and the rights you have over your data.
Data Controller: ZimDrive (Pvt) Ltd, 90 Piers Road, Borrowdale, Harare, Zimbabwe. Official Data Protection inquiries: privacy@zimdrive.org.
1. Information We Collect
Account Information
When you register as a passenger, we collect your name, email address, phone number, and password. Passwords are stored strictly as salted cryptographic hashes (bcrypt) and are never readable by our staff or systems.
When registering as a driver partner, you additionally submit your date of birth, operating city, mobile-money payout number, and verification credentials—including your driver's licence, vehicle registration, roadworthiness inspection certificate, vehicle photographs, and a verification selfie.
Location Data
Riders: We collect precise GPS location when you set a pickup point or destination to match you with nearby drivers, display the interactive route map, and calculate upfront fares.
Drivers: We collect precise GPS coordinates continuously while you are online and on active duty, including when the driver app is running in the background or your device screen is off. This continuous signal allows us to assign nearby ride requests and enables your passenger to view your live arrival. A persistent system notification is displayed whenever driver location tracking is active, and collection halts immediately when you switch to offline mode.
Trip & Payment Details
We store pickup and destination addresses, route geometry, distance, duration, fare quote, vehicle class, and trip timestamps.
For payments, we record your in-app wallet balance, transaction logs, and the mobile number used for mobile-money top-ups. We never receive or store your payment card numbers, CVVs, or mobile-money PINs. All digital top-ups and online card transactions are processed entirely by Paynow.
2. Why We Process Your Information
- To create, verify, and administer your account.
- To match passengers with nearby verified drivers with upfront fare estimates.
- To display live real-time GPS vehicle tracking during active trips.
- To facilitate fare settlements, wallet balances, and driver payouts.
- To provide dedicated customer support and resolve complaints or lost-item claims.
- To prevent fraud, account takeover, identity abuse, and unsafe driving conduct.
- To comply with Zimbabwean accounting, tax, and transport regulatory laws.
3. Third Parties & Data Sharing
| Recipient | Data Shared | Purpose |
|---|---|---|
| Trip Counterpart | First name, phone number, vehicle model & license plate | Coordination and trip fulfillment |
| Google Maps | Location coordinates & place search queries | Mapping, route calculation, and navigation |
| Paynow | Mobile number, transaction amount, reference ID | Payment gateway & wallet processing |
| Cloud Infrastructure | Encrypted database backups & crash logs | Secure hosting (AWS eu-west-1 & Sentry EU) |
We never sell your personal information, and we do not use your trip data for third-party behavioral advertising.
4. Data Retention & Account Deletion
Account and profile data are retained while your account remains active. Passengers may schedule account deletion at any time via the in-app settings (Profile > Delete Account) or by submitting a request to privacy@zimdrive.org.
Passenger accounts enter a 30-day recovery window during which signing in will restore the account. After 30 days, personal identification details (name, email, phone, credentials) are permanently anonymized.
5. Security & International Transfers
All data in transit is protected using modern Transport Layer Security (TLS 1.3 / HTTPS). Database storage is encrypted at rest. Infrastructure is hosted in enterprise Amazon Web Services facilities located in Ireland (eu-west-1). By using ZimDrive, you acknowledge and consent to this secure international data transfer.
6. Contact the Privacy Team
If you have questions about this policy, wish to exercise your data subject rights, or want to verify data held about you: