Privacy Policy
Version 1.2 · GZ-08-0002 · Last updated 7 September 2026
Every data category below is taken from the data model in the repository, not from a template.
1. Who is responsible for your information
GETZUGA (PTY) LTD, registration number 2008/013999/07, a private company registered in South Africa. Our registered office is 7 Kammanassie Street, Brackendown Ext 5, Alberton, Gauteng, 1448, South Africa.
You can contact us about anything on this page at privacy@getzuga.com.
2. What this covers
Our mobile applications and the services behind them: booking and taking trips, the driver side of those trips, the in-app wallet, in-app messaging, and the marketplace.
The website has its own notice, and this page does not replace it. www.getzuga.com does far less than the applications do — it sets no cookies, runs no analytics, and loads nothing from any other company — and its notice says so specifically. Nothing on this page describes the website, and nothing in the website notice describes the applications.
3. What we collect, and why
| Category | What it is | Why we hold it |
|---|---|---|
| Account | Name, phone number, email address, and your PIN (stored so that it cannot be read back) | To create and secure your account |
| Sign-in with Google, Apple or Microsoft | The identifier that provider returns when you choose to use one. Which of the three is offered depends on configuration | So you do not need a separate password with us |
| Trips | Pickup and drop-off, times, distance, fare, cancellations | To provide the trip, price it, and settle disputes |
| Location trace | Latitude, longitude and speed recorded during a trip | Navigation, safety, and reconstructing what happened if a trip is disputed. See section 4 |
| Wallet and payments | Balance, transactions, top-ups, withdrawals | To move money correctly and keep an accurate ledger |
| Messages | Messages between rider, driver and support | To let you communicate during a trip, and for safety |
| Saved places | Addresses you choose to save | Convenience. You control these |
| Driver documents | Licence, permits and related identity documents, for drivers only | Because we are required to check that a driver may lawfully carry passengers |
| Safety alerts | SOS alerts you raise, and what happened next | Safety, and evidence if something goes wrong |
| Marketplace listings | What you list, and its location while listed | To show your listing to buyers |
| Operational records | Records of administrative actions taken on an account | So that actions affecting you are accountable and reviewable |
We do not sell your personal information, and we do not use it for advertising.
4. Location, specifically
Location is the most sensitive thing we hold, so it is set out separately rather than folded into a list.
- We record a location trace during a trip. It exists so a trip can be navigated, so a fare can be checked against distance actually travelled, and so a dispute or safety incident can be reconstructed.
- A location trace with the name removed is still identifying. It shows where a person sleeps and works. We treat it as personal information even after an account is anonymised, and we do not publish or sell it.
- How long we keep a trace, stated plainly: we do not delete trip location traces automatically today. We have decided that we should, and we have not switched automatic deletion on, because deleting on age alone would eventually destroy the evidence for an open safety matter or an unresolved dispute. We are building that check first. We would rather tell you this than publish a retention period that nothing enforces. When automatic deletion is running, this page will say so and will state the period.
5. How long we keep things
We keep information for as long as we need it for the purpose it was collected, and longer where a law requires it — for example, financial records, and evidence of a safety incident or an unresolved dispute.
Some records deliberately outlive an account. See section 6.
We are not publishing a table of retention periods, and that is deliberate. A period is only meaningful if something enforces it. Today, deletion happens when you ask us and when the rules in section 6 allow it, rather than on a timer. Where that changes, this page changes with it.
6. Deleting your account — what actually happens
This section is deliberately blunt, because the usual wording would be misleading.
When you delete your account we remove the information that identifies you — your name, phone number, email address and PIN. We keep some records with your identity removed:
- Trips, because the other person on that trip has their own record of being paid for it, and deleting yours would erase theirs.
- The wallet ledger, because financial records have to reconcile and cannot be rewritten.
- Safety alerts, because evidence of an emergency is not the raiser's alone to erase — the other party and any investigating authority have an interest in it.
So "delete" means you are no longer identifiable in our systems, not that every row is destroyed. We think that is the right balance and we would rather say so plainly than describe it as deletion without qualification.
Deletion can be delayed. If there is an open safety matter, an unresolved dispute, a trip in progress, or money owed on your account, we will tell you that your request is on hold and when it will be reviewed. We will not tell you the details of a matter under investigation. You can still complain to a data-protection authority — see section 9.
How to delete. In the app, under Settings, or by emailing privacy@getzuga.com. If you cannot sign in, email us and we will handle it without requiring you to.
If you hold a positive wallet balance, withdraw it before you delete. A balance is not automatically paid out on deletion.
7. Getting a copy of your information
You can ask us for a copy of the personal information we hold about you and we will provide it.
Today this is handled by a person rather than a self-service download — you ask us at privacy@getzuga.com, and we produce it. We are building the self-service version; until then, ask and we will do it for you.
Your copy excludes other people's information. Where a record involves someone else — a shared conversation, or the other party to a trip — their information is withheld rather than sent to you under a privacy right.
8. Who else sees your information
Service providers who run parts of the service for us, under contract, and who may only use it to provide that service. Ask us at privacy@getzuga.com for the current list and we will send it.
Other users, minimally and only when needed. A driver offered your trip is told nothing about you at all — where it starts, where it goes and what it pays, and nothing about the person. Your first name appears only after a driver has accepted, together with a photo and a rating, and never a full name.
That is deliberate: enough to greet someone and confirm you have the right person, and not enough to find them elsewhere. A driver's own details are disclosed more fully to you, because a driver is a vetted, licensed party operating a commercial service while a rider is a member of the public.
Authorities, where we are legally required to, or to prevent serious harm. We check that a request is lawful and properly issued before we act on it, we give only what is asked for, and we tell you unless we are prohibited from doing so. Ask us at privacy@getzuga.com for our full approach.
9. Your rights
Depending on where you are, you have rights to ask for a copy of your information, to have it corrected, to have it deleted, and to object to some uses.
Contact us at privacy@getzuga.com and we will action it.
If you are not satisfied with how we have handled your request, you have the right to complain to a data-protection authority.
| Where you are | Authority | How to reach them |
|---|---|---|
| South Africa | Information Regulator (South Africa) | POPIAComplaints@inforegulator.org.za · inforegulator.org.za/complaints |
| Malawi | Malawi Data Protection Authority | dpa.mw/lodge-a-complaint · info@dpa.mw |
If your country is not in that table, contact us and we will tell you which authority applies and how to reach it. We would rather do that than name the wrong one.
You can complain to an authority without asking us first.
10. Age
The service is intended for adults. We do not currently verify anyone's age when they register, and we would rather tell you that than state a minimum we do not check.
Registration asks for a name, a phone number, a PIN and a country. It does not ask for a date of birth, and nothing in the service refuses an account on the basis of age.
For drivers there is more, and it depends on the country. A driver submits a government identity document. Where the identity number itself encodes a date of birth — as a South African identity number does — we hold that date. Where it does not, such as a Malawian national identity number or any passport, we hold no date of birth for that driver either. Driving also requires a licence, and carrying passengers requires a permit; both carry age requirements set by the authority that issues them rather than by us.
We do not knowingly collect information from children. If you believe a child has given us information, tell us at privacy@getzuga.com and we will remove it.
11. Where your information is processed
Our applications, our file storage and our database all run in Microsoft Azure's South Africa North region. Our email and office systems run in Microsoft 365 in the region Microsoft assigns to a South African tenant.
Some of the providers we rely on operate globally, so a map request, a sign-in check or a message we send you may be processed outside South Africa or Malawi. Ask us at privacy@getzuga.com for the current list of those providers and what each one handles.
12. Changes
We will update this page when the service changes, and the date at the top will change with it.
We do not currently send a notification when this page changes, so the date at the top is how you tell. If we make a change that materially reduces your rights, we will say so prominently on this page rather than let it pass as a routine edit.