Privacy policy
Last updated: 5 November 2026
This policy explains what the ChauffHer app collects, why, who receives it and how long we keep it.
Publisher: ChauffHer, Zimbabwe. Contact: [email protected].
What we collect, why, and how long we keep it
Account details
What: First and last name, phone number, email address and date of birth. If you sign in with Google, your name and email come from Google.
Why: Creating and running your account, and confirming who you are.
How long: Until you delete your account.
Gender (passengers)
What: The gender you give when you set up your passenger account.
Why: Matching you with drivers under the app’s rules for women and men drivers.
How long: Until you delete your account.
Profile photo
What: A photo you upload, stored in the app’s avatar storage.
Why: Showing your photo to the person you are matched with on a ride.
How long: Until you replace it or delete your account.
Driver verification
What: The driver’s ID photo, selfie, driving licence (number, expiry date and photo), vehicle details and photo, and plate number. Stored in a private storage area.
Why: Checking that a driver is eligible and safe to drive. ChauffHer staff review these documents. There is no automated third-party identity check. Passengers do not see these documents.
How long: Until you delete your account.
Selfie checks
What: Drivers may be asked to take a new selfie from time to time. The app records when the next check is due and whether a check has been flagged.
Why: Confirming that the verified driver is the person driving.
How long: Until you delete your account.
Ride locations
What: Pickup and drop-off addresses and coordinates for each ride, and your saved places (Home, Work and Other) with their coordinates.
Why: Matching, routing, fares and your ride history.
How long: Kept with the ride record, which is kept after your account is deleted, without your name.
Approximate location (fare history)
What: Pickup and drop-off areas on a grid of about 2 km, kept with each ride's fare history. Not exact points.
Why: Suggesting fares for similar routes.
How long: Kept with the ride record, which is kept after your account is deleted, without your name.
Driver live location
What: While a ride is accepted or in progress, the driver’s phone sends its GPS position about every 8 seconds. The last position stays on the ride record.
Why: Showing the driver on the passenger’s map, arrival times and safety.
How long: The last position is kept with the ride record, as above.
Share-trip link
What: When you share a trip, the app creates a private link. It shows the driver’s first name, the pickup and drop-off addresses, the driver’s live position and the ride status.
Why: Letting someone you choose follow your trip.
How long: The link works only while the ride is accepted or in progress. It stops working when the ride is no longer active.
Address search
What: The text you type into the address search.
Why: Finding addresses.
How long: Held by the search provider under its own policy.
Ride requests, offers and history
What: Ride requests, your offered price, driver counter-offers, the agreed price, the 12% platform fee, ride status and cancellations.
Why: Running rides, pricing, receipts and your history.
How long: Until you delete your account. Ride records are kept after an account is deleted, without your name.
Ratings and comments
What: Star ratings from 1 to 5, and an optional comment, after each trip. Ratings are combined into an average for each person. Comments are not shown to other users.
Why: Keeping the service accountable.
How long: Until you delete your account.
Trusted contacts
What: The name and phone number of people you choose. Kept in your account and in your browser’s local storage on that device.
Why: Alerting someone you trust through SOS or sharing a trip.
How long: Until you remove them or delete your account.
SOS records
What: When you use SOS: the time, the ride, your location if the app has it, and how many trusted contacts you chose to alert. ChauffHer does not send SMS or WhatsApp messages for you. You send them from your own phone.
Why: Keeping a record of an SOS for safety and support.
How long: Until you delete your account.
Driver wallet and top-ups
What: The top-up amount, status and payment reference, and the EcoCash number on the driver’s profile. Wallet entries record top-ups and the platform commission.
Why: Running the driver wallet and recording commission.
How long: Kept as long as the law requires.
Passenger payment methods
What: The payment provider, a provider token, and the last four digits (shown as a masked label). Full card numbers are not accepted.
Why: Paying for rides.
How long: Until you remove the method or delete your account.
Support cases
What: The issue you describe, its outcome, any refund amount, internal staff notes that you cannot see, and the resolution message you receive.
Why: Answering and resolving problems with rides.
How long: Until you delete your account.
Preferences and settings
What: Email, SMS and push preferences, the two-step setting, and night-time safety settings. The app stores these. It does not currently send SMS or push messages.
Why: Your choices in the app.
How long: Until you delete your account.
Sign-in and device data
What: Your sign-in session is kept in your browser’s local storage. Hosting providers log IP addresses and request details for security and running the service. The app contains no analytics, crash-reporting or advertising SDK.
Why: Keeping you signed in, security and running the service.
How long: Kept by the hosting providers under their own policies.
Who receives your data
We share data only with the providers below, and with other people where a ride needs it.
Supabase
What: Hosts our database, sign-in and file storage, so it holds the records above. Sign-up and password-reset emails are also sent through our authentication provider, Supabase.
Role: Service provider.
Cloudflare
What: Hosts the web app and handles requests, so it sees IP addresses and request details.
Role: Service provider.
Paynow
What: Processes driver EcoCash top-ups. Receives the driver’s phone number, the amount and a payment reference.
Role: Payment provider.
TomTom
What: Address search and maps. Receives search text, and map requests include your IP address.
Role: Service provider.
Routing service (public OSRM server)
What: Receives pickup and drop-off coordinates to draw a route. These coordinates go to a third-party routing service.
Role: Service provider.
Google
What: Sign-in, when you choose it. The app also loads the Poppins font from Google Fonts, which sends your IP address to Google.
Role: Identity provider and font host.
WhatsApp
What: Opened by you to send an SOS or trip details. Those messages go through WhatsApp under its own terms.
Role: Used by you. ChauffHer does not send them.
Your ride partner
What: A passenger’s name, photo, gender, rating, verification status, completed rides, member-since date, pickup and drop-off, and the trip. A driver’s name, photo, vehicle, plate and live position during the trip.
Role: The person on your ride.
ChauffHer staff
What: Review driver verification documents, support cases and top-ups.
Role: Internal.
How long we keep it
The app does not delete data automatically today. Records are kept until you delete your account or we remove them, unless a period above says otherwise.
Records that the law requires us to keep are kept for as long as the law requires.
Your choices
- You can change your profile, photo and payment methods in the app, under Account.
- You can ask us to delete your account. See the delete account page.
- To ask what we hold about you, or to correct it, email [email protected].
Security
Data is encrypted in transit. It is stored with Supabase, which encrypts data at rest.
Changes to this policy
When this policy changes, we will update the date at the top of this page.