Privacy Policy
1. The short version
To connect you with a driver we need to know who you are, where you are, and where your delivery is going. That is the bulk of it. We do not sell your personal information, we do not sell it under any other name, and we do not share it with advertisers.
This policy explains the rest in detail: what we hold, why, who else sees it, how long we keep it, and what you can tell us to do with it.
It applies to the FAST customer app, the FAST driver app, and the systems behind them. It is written to meet Zimbabwe's Cyber and Data Protection Act [Chapter 12:07].
2. What we collect
When you create an account
| Information | Why we need it |
|---|---|
| Mobile number | It identifies your account, and it is where we send your verification code |
| Verification code | To prove the number is yours |
| Name | So the person you are meeting knows who they are looking for |
| Email address, if you give one | Receipts and account notices |
| Profile photo, if you add one | So you are recognisable at the pickup point |
When you request or carry out a delivery
- Pickup and destination points, as coordinates and as addresses.
- Saved addresses, if you choose to save them, under whatever label you give them.
- What is being moved — your description of the goods, the weight, any photographs you attach.
- Prices — the recommended price, the price you asked for, the offers you received, the price agreed.
- Route and timings — the road route taken, distance, duration, when each stage happened.
- Messages exchanged between you and the other party in the in-app chat.
- Ratings and comments you give and receive.
Location
From the customer app: your location when you open the map to set a pickup point, and while a delivery you have requested is in progress. Not when the app is closed.
From the driver app: your location while you are online and available for work, and throughout a job. This is continuous while you are online, because it is how you get matched to nearby requests and how the customer sees where their delivery is. It stops when you go offline.
You control this through your device's location permission. Withdrawing it means the customer app cannot place your pickup point on the map, and the driver app cannot offer you work.
From drivers, additionally
- National ID, driver's licence, vehicle registration and insurance documents, which you upload for verification.
- Vehicle details — type, make, model, colour, registration plate.
- Records of jobs done, earnings, and subscription payments.
Automatically
- Device and app information — app version, device model, operating system — which we use to diagnose faults.
- Technical logs — the requests your app makes to our servers, with times and IP address. These are security and troubleshooting records.
What we do not collect
We do not ask for your card number, your bank details or your national ID number to use the customer app. Delivery payments are cash between you and the driver, so there is nothing for us to hold. Driver subscription payments are made through Paynow, and your payment details go to Paynow, not to us — we receive only whether a payment succeeded and its reference.
3. Why we use it
- To provide the service — matching you with nearby drivers, routing, price estimates, tracking, messaging, records of what happened.
- To keep people safe — verifying that a driver holds the documents they claim, investigating reports of unsafe or dishonest behaviour, and holding the record of a delivery so a dispute can be settled on evidence rather than recollection.
- To keep you informed — delivery status, offers received, arrival times, account and subscription notices.
- To take subscription payments from drivers.
- To improve the service — where deliveries cluster, which routes are congested, where the app fails. This work uses aggregated figures; the maps our operations team sees round coordinates to roughly a kilometre, so they show demand in an area rather than visits to an address.
- To meet our legal obligations, and to respond to lawful requests from authorities.
We do not use your information for automated decisions with legal consequences for you. Suspending an account is a decision a person takes.
4. Who else sees it
The other party to your delivery. A customer requesting a delivery sees the driver's name, photo, rating, vehicle and registration plate, and their live location during the job. A driver sees the customer's first name, the pickup and destination, the description of the goods, and their rating. Both see the chat. Neither sees the other's phone number unless you share it yourselves.
Our own staff, where they need it to run the platform — verifying driver documents, answering support tickets, investigating a report. Access is limited to what the task requires.
Service providers who run parts of the platform on our behalf, under contract and only for that purpose:
| Provider | What they handle |
|---|---|
| Our hosting provider | The servers this platform runs on |
| Paynow (Webdev, Zimbabwe) | Driver subscription payments |
| Our SMS provider | Verification codes |
| Our email provider | Account emails |
Mapping and routing are handled by our own servers, using OpenStreetMap data. Your pickup and destination points are not sent to Google, Mapbox or any other mapping company. Map imagery is fetched from OpenStreetMap's tile servers, which see the area of the map being viewed but not your account.
Authorities, where the law requires it, or where it is necessary to investigate a crime or protect someone from serious harm.
A buyer, if the business is ever sold — in which case they take on this policy, and we will tell you before anything changes.
Nobody else. We do not sell personal information and we do not share it for advertising.
5. Where it is held
Our servers are in a data centre operated by our hosting provider. Some of our service providers process data outside Zimbabwe. Where they do, we use providers who are contractually bound to protect it to the standard this policy sets out.
6. How long we keep it
| What | How long |
|---|---|
| Your account, while it is open | Until you close it |
| Delivery records — route, price, times, parties | 5 years, as business and tax records |
| Chat messages attached to a delivery | With the delivery record |
| Detailed location traces from a driver's shift | 90 days, then deleted automatically |
| Notification history you have read | 60 days, then deleted automatically |
| Verification codes | Deleted as soon as they expire |
| Driver documents | While the driver account is active, and 5 years after it closes, as proof that the check was done |
| Technical and security logs | 90 days |
When you close your account we delete or anonymise your personal information except what we must keep for the periods above. Anonymised, aggregated figures — counts of deliveries in an area, average durations — remain, because they no longer identify you.
7. How we protect it
- Everything between the apps and our servers travels over HTTPS.
- Passwords are stored hashed, never in a form we or anyone else can read back.
- Uploaded documents are held in private storage; a link to one is issued only to a staff member reviewing it, and it expires.
- Access to production systems is limited, authenticated, and logged.
- Detailed location traces are deleted on the schedule above, so an old breach cannot expose years of movement.
No system is perfectly secure, and we will not claim otherwise. If a breach occurs that is likely to harm you, we will tell you and notify the Data Protection Authority as the Cyber and Data Protection Act requires.
8. Your rights
You can ask us to:
- Show you the personal information we hold about you.
- Correct anything that is wrong. Your name, email, photo and saved addresses you can edit yourself in the app.
- Delete your account and your personal information, subject to the records we must keep under section 6.
- Give you a copy of your information in a portable form.
- Stop using your information for a particular purpose, or object to how we are using it.
- Withdraw a permission you gave — location, notifications — through your device settings. Some of the service will stop working, as described above.
Ask through Support in the app, or by writing to us at the address in section 11. We will respond within 30 days. We will ask you to verify the account is yours, because handing your information to someone else would be the worse failure.
If you are unhappy with how we have handled your information, you may complain to the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), which is Zimbabwe's Data Protection Authority.
9. Children
The service is not for anyone under 18, and we do not knowingly collect information about children. If you believe a child has created an account, tell us and we will remove it.
10. Changes to this policy
We may update this policy. The effective date at the top shows when the current version took effect, and we will tell you in the app before a change that materially affects you. The current version is always at this address.
11. Contact
FastZim
Harare, Zimbabwe
Email: enquiries@fastzim.co.zw
You can also reach us through Support in the app, which attaches your account and any relevant delivery to the message.
Also see our Terms of Service.