Last updated: 16 October 2026
1. Who we are
This Privacy Policy explains how Our-Mobile Universe Transport Limited ("Vroom", "we", "us"), of Ibex Hill 37641, Lusaka, Zambia, collects, uses and protects personal data when you use the Vroom app, the website apanivroom.com and related services. We process personal data in line with the Data Protection Act No. 3 of 2021 of Zambia.
2. Information we collect
All users
- Account details: name, mobile phone number, email address (optional), profile photo (optional) and your role (passenger, driver or merchant).
- Location: your device location while you are using the app, and the pick-up, drop-off and stop addresses you enter or select.
- Trip and order details: routes, distance, time, fares, ratings, deliveries, orders and cancellations.
- Communications: in-app chat messages, support emails and notifications.
- Payment information: payment method, amounts and transaction references. Card details are handled by our payment provider; we do not store full card numbers.
- Device and usage data: device type, operating system, app version, crash reports and push-notification tokens.
Drivers (additional)
- National Registration Card (NRC) of the driver and of the vehicle owner, driving licence, police clearance certificate, Road Service Licence, vehicle registration (white book), number plate, vehicle details and photos, and residential address.
- Live location while online in the app, used to match and track trips.
- Earnings, wallet and bonus records.
Merchants (additional)
- Business name, category, logo, pick-up location, products, prices and order history.
3. How we use your information
- To create and manage your account and verify your phone number.
- To match passengers, senders and merchants with nearby drivers, calculate fares and routes, and show live trip progress and arrival times.
- To process payments, driver earnings and bonuses.
- To keep people safe: vetting drivers, investigating incidents, preventing fraud and enforcing our Terms of Service.
- To provide support and send service messages and notifications.
- To improve the app, fix errors and understand how the Services are used.
- To meet legal and regulatory duties, including the requirements of the Road Transport and Safety Agency (RTSA).
We process data because it is necessary to provide the service you ask for, to comply with the law, for our legitimate interests in running a safe and reliable service, or with your consent (for example, optional marketing). You may withdraw consent at any time.
4. What others can see
- During a trip, the passenger sees the driver's first name, photo, rating, vehicle details, number plate and live location; the driver sees the passenger's first name, rating, pick-up and drop-off points and live location at pick-up.
- Drivers' residential addresses and identity documents are never shown to passengers.
- Phone numbers are shared between passenger and driver only as needed to complete a trip.
5. Who we share data with
We do not sell personal data. We share it only with:
- Service providers who run parts of our service for us, such as cloud hosting and databases (Google Firebase / Google Cloud and Amazon Web Services), maps and location (Google Maps), phone verification and SMS (Twilio), payments (Stripe and mobile-money providers), push notifications (Expo) and crash reporting (Sentry). They may only use the data to provide services to us.
- Authorities such as RTSA, Zambia Police or a court, where the law requires it or to protect someone's safety.
- A buyer or investor in the event of a merger, sale or reorganisation of the business, subject to this Policy.
6. International transfers
Some of our service providers store or process data on servers outside Zambia, including in the United States and Europe. Where we transfer personal data outside Zambia we take the steps required by the Data Protection Act to make sure it remains protected.
7. How long we keep data
We keep personal data only as long as needed for the purposes above. Account data is kept while your account is open. Trip, payment and driver-document records are kept for the periods required by tax, transport and other laws, and then deleted or anonymised.
8. Security
We use encryption in transit, access controls and other technical and organisational measures to protect your data. No system is completely secure, so please keep your phone and verification codes private and tell us straight away if you think your account has been misused.
9. Your rights
Under the Data Protection Act you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct inaccurate data or delete data we no longer need;
- object to or restrict certain processing, and withdraw consent;
- ask to delete your account.
To use any of these rights, email us using the addresses below. If you are not satisfied with our response you may complain to the Office of the Data Protection Commissioner of Zambia.
10. Children
The Services are not intended for anyone under 18, and we do not knowingly open accounts for children. A minor may travel only when the booking is made and supervised by a responsible adult account holder.
11. Changes to this Policy
We may update this Policy from time to time. We will post the new version on this page and, for material changes, notify you in the app.
12. Contact us
Passengers: passengersupport@apanivroom.com
Drivers: driversupport@apanivroom.com
Post: Our-Mobile Universe Transport Limited, Ibex Hill 37641, Lusaka, Zambia
