Last updated: 4 November 2026
1. Who we are
ZAA is run by Tuviora Ventures LTD, Remera, Kigali, Rwanda. We decide how your personal data is used in the ZAA apps for customers, stores and riders, on zaa.rw and in our WhatsApp support. We handle it under Rwanda's Law No. 058/2021 on the protection of personal data and privacy.
2. What we collect
- Account: your name, mobile number and, if you add it, your email address.
- Addresses and location: the delivery addresses you save, and your phone's location while you use the app, to find your address and track deliveries. You can turn location off in your phone settings.
- Orders: what you order, from which store, your notes, ratings and reviews.
- Payments: the mobile-money number you pay with, and payment references. Card payments are processed by our card payment provider. We never see or store your PIN or full card number.
- Messages: your chats with stores and riders, and your messages to our WhatsApp support, including photos and voice notes.
- Device data: phone model, operating system, app version, notification token, IP address and error logs.
- If you're a rider: your photo, identity document type, number and images, vehicle details, the zone you work in, your location while you're online, your deliveries, earnings, the cash you collect, and your payout details.
- If you run a store: the owner's name and contact details, the store's address and location, its TIN and TIN certificate, your sales, and your payout details (MoMo number or bank account).
3. Why we use it
- To take, deliver and track your orders. We need this to provide the service you signed up for.
- To take payments and keep financial records, as the law requires.
- To answer your support requests and send you order updates.
- To check the identity and documents of riders and stores, give riders orders, and work out earnings, commission and payouts.
- To prevent fraud and keep ZAA secure, which is our legitimate interest.
- For anything else, such as promotional messages, we ask for your consent. You can withdraw it at any time.
4. Who we share it with
- Stores: your order and the name it's for.
- Your rider: your name, phone number, address and location for the delivery.
- Customers: the name, photo, phone number and live location of the rider delivering their order, and the store's name, address and phone number.
- Payment providers and banks: MTN, Airtel, our card provider and banks, to process payments and payouts.
- Google: for maps and app notifications.
- Meta: it runs WhatsApp, so it handles your messages when you contact our support there.
- Our hosting and network providers: they store and carry our data.
- Authorities: when the law requires it.
We don't sell your personal data.
5. Where and how long we keep it
Our servers are hosted in Rwanda. Some of the providers above, such as Google and Meta, may process data in other countries under their own safeguards. We keep your data while your account is open. We keep order and payment records for as long as tax and accounting laws require.
6. Your rights
You can ask to see your data, correct it, have it deleted, object to how we use it, or withdraw your consent. To close your account, go to Profile in the app; you can do this once no order is in progress. For anything else, email us. If you're not satisfied with our answer, you can complain to Rwanda's National Cyber Security Authority (NCSA).
7. Children and changes
ZAA is not meant for children under 16, and we don't knowingly collect their data. We'll tell you in the app before this policy changes.
8. Contact
[email protected] · +250 799 650 150 · Tuviora Ventures LTD, Remera, Kigali, Rwanda