Vuma Privacy Policy

Last updated: 17 August 2026

This policy explains what information Vuma ("we," "our," "the app") collects from riders and drivers, why we collect it, who can see it, and the choices you have. Vuma operates in South Africa and Zimbabwe, and is operated by Pearson Marasha, trading as Vuma, of Harare, Zimbabwe.

1. Information we collect

From every user (rider or driver)

• Account information: full name, phone number and/or email address, password (stored securely, never in plain text), country.
• Location data: your device's GPS location, used to set pickup points, calculate routes and fares, and — for drivers — to show your position to a matched rider and nearby drivers during an SOS alert. Location is only collected while the app is open and, for drivers, while online.
• Trip information: pickup/drop-off addresses, fare offers, ride status, and in-app chat messages exchanged with your matched rider/driver during a trip.
• Ratings: a star rating, and — for driver ratings specifically — optional tags (e.g. politeness, punctuality, vehicle cleanliness) and an optional free-text comment. The free-text comment and tags go only to our admin team, not to the driver directly.
• Payment references: for driver subscriptions, we store transaction reference codes, payment amounts, and — if you choose to submit one — an uploaded proof-of-payment file (e.g. a screenshot or PDF). We do not store full card numbers or mobile money PINs.

From drivers specifically

• Government-issued ID, driver's license, vehicle registration document, and a profile photo, for identity and safety verification.
• Vehicle details: make, model, color, plate number, seat capacity.
• If you request Vuma Deluxe certification: notes from our admin team's physical vehicle inspection, and the inspection/certification dates.

Automatically collected

• Device and usage information (app version, general diagnostics) to keep the service reliable.

2. How we use this information

• To match riders with nearby drivers and facilitate fare negotiation.
• To verify driver identity, vehicle, and documentation before allowing them to accept rides.
• To calculate distances, routes, and fare estimates.
• To operate safety features, including the SOS alert system: if you trigger an SOS, we share your location and the other party's name, vehicle, and plate number with the nearest available verified drivers so they can assist, and this information may also be reviewed by our safety team.
• To process driver subscription payments and referral/wallet credits.
• To communicate with you about your account, a trip, or support requests.
• To comply with legal obligations and investigate misuse of the platform.

3. Who we share information with

• Your matched rider or driver: name, phone number, vehicle details, and chat messages are shared only while a trip is active, and access ends once the trip is completed or cancelled.
• Emergency contacts and responders: if you use "Share my ride," trip details and a live tracking link are sent to whoever you share them with. If you trigger SOS, relevant details are shared with nearby drivers and may be shared with law enforcement, emergency services, or — where a private security provider is configured for your area — that provider's rapid-response line, if you or a responding driver chooses to contact them.
• Service providers: our database and authentication provider (Supabase), mapping/geocoding providers (OpenStreetMap, LocationIQ), and payment gateways (PayFast, Paynow), solely to operate the service.
• Legal and safety reasons: if required by law, or to protect the rights, property, or safety of Vuma, our users, or the public.

We do not sell your personal information to third parties.

4. Data retention

We retain account and trip information for as long as your account is active and as needed to comply with legal, tax, or dispute-resolution obligations. Driver verification documents are retained for the duration of the driver's active status on the platform plus any legally required retention period. You can request deletion of your account at any time.

5. Your choices and rights

• You can edit your name and phone number at any time in Settings.
• You can control location permissions through your device settings; note that some features (ride matching, live tracking) will not work without location access.
• You can request a copy of your data or request that we delete your account. We may retain limited records where required by law (e.g., completed trip and payment records for financial/tax compliance).

6. Children's privacy

Vuma is not directed at children and is not intended for use by anyone under 18. We do not knowingly collect information from children.

7. Security

We use industry-standard measures (encrypted connections, access controls, and row-level database security) to protect your information. No system is completely secure, and we encourage you to use a strong, unique password.

8. Changes to this policy

We may update this policy from time to time. Material changes will be notified in-app or via email before they take effect.

9. Contact us

Questions about this policy or your data can be sent to pmarashazw@gmail.com.