Rider Privacy Notice

This notice explains what the Gumza Dispatch rider app collects about you, the rider, why we collect it, who can see it, and how long we keep it. It covers the rider app and the rider web app at gumza.ke/ride.

It is separate from the customer privacy policy, which describes what we collect from people placing orders. If you also order through Gumza, both apply to you in those different roles.

1. Location — the short version

We collect your location only while you are carrying a delivery, and we keep collecting it while the app is in the background and your screen is off. Tracking starts when a delivery is assigned to you and stops when your last active delivery is completed, failed or cancelled. If you have no active delivery, the app does not collect your location at all.

While tracking is on, Android shows a permanent notification. That notification is how you can always tell, without opening the app, whether location is being collected. If you see it and you are not carrying a delivery, that is a bug — please report it.

2. What we collect

• Location while delivering — latitude and longitude, together with accuracy, heading, speed and the time of each reading. Readings are taken as you move and are sent in batches, so a poor signal does not lose them.
• Your account details — the name and phone number your dispatcher registered, and your password in a hashed form we cannot reverse.
• Delivery records — which orders you were assigned, when you marked each one picked up, in transit, delivered or failed, and any failure reason you selected.
• Proof-of-delivery photos — the photo you take when completing a delivery, stored with that order.
• Device details, if push notifications are enabled — a notification token, your device model, operating system version and the app version, so we can alert you to a new assignment.
• Service logs — timestamps and request identifiers, so we can diagnose faults.

We do not collect your contacts, messages, photos other than the delivery photo you take, microphone audio, or anything about what you do in other apps.

3. Why we collect your location

• To show the dispatcher where you are, so deliveries go to the nearest rider.
• To show the customer where their order is while it is on its way to them.
• To confirm a delivery reached the right place if a customer disputes it.

We do not use your location to measure your speed for discipline, to score your performance, or to track you outside an active delivery.

4. Who can see it

• Gumza operations staff — your live position and delivery history, on the dispatch console.
• The merchant whose order you are carrying — your live position while you carry that order.
• The customer — your live position on their tracking page, while their delivery is active. Anyone they forward that tracking link to can see the same thing for as long as the delivery is in progress.
• OpenStreetMap — the customer's tracking page draws the map using an OpenStreetMap embed, which means your coordinates are sent to openstreetmap.org each time that page loads a map.
• DigitalOcean — our hosting provider, where the data is stored.

We do not sell your location or share it with advertisers, data brokers, or insurers.

5. How long we keep it

• Location readings — 90 days, after which they are deleted.
• Delivery records and proof-of-delivery photos — kept with the order, for as long as we keep that order.
• Your account — until your account is closed, after which we delete or anonymise it.

6. Your rights

Under the Kenya Data Protection Act, 2019 you can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Ask through the contact below and we will respond.

You can withdraw location permission at any time in your phone's settings. Be aware that the app cannot assign or verify deliveries without it, so withdrawing it means you will not be able to take deliveries until it is granted again.

7. Security

Data is sent over encrypted connections and stored on servers that are not publicly reachable. Access by Gumza staff is limited to the people who need it to run dispatch.

8. Changes

If we change what we collect or who sees it, we will update this page and change the effective date above. Material changes will be communicated to riders directly.

9. Contact

Questions, data requests, or account deletion: email levikangogo19537@gmail.com.