Your information on Tumira

Tumira connects Harare shops with verified motorbike riders who deliver their parcels. This page explains, in plain words, what we collect, why, who sees it, how long we keep it, and what you can ask us to do with it.

Last updated: 12 October 2026

Who we are

Tumira is operated by AIVA Solutions (Pvt) Ltd, Harare, Zimbabwe ("Tumira", "we"). We are responsible for the personal information described here, under Zimbabwe's Cyber and Data Protection Act [Chapter 12:07].

What we collect and why

Everyone who signs in

Your phone number, to sign you in with a code sent on WhatsApp, and so the people on your delivery can reach you.
Your name, and optionally your email (for receipts and statements) and a profile photo.
If you choose Sign in with Google: your name, email and Google profile picture from your Google account.
A device notification token, so we can send you notifications about your deliveries. It's removed when you sign out.
Messages you send us on WhatsApp for support, and problem reports you make in the app.

Shops

Shop name, address, location pin, phone, opening hours and pickup notes, so riders can find you.
Your EcoCash number (if customers pay you by EcoCash) and payout details, so money reaches you.
For verification: photos of your shopfront and the owner's ID, and optionally a business certificate.
Your customers' details that you enter for a delivery: name, WhatsApp number, address and the drop location. You're responsible for having your customer's agreement to share these with us for their delivery.

Riders

National ID number and photo, driver's licence number and photo, bike details, number plate and photo, a selfie holding your ID, and weekly selfies.
A guarantor's name and phone, and an emergency contact (who gets your location if you press SOS).
Your location while you are online or on a job (see Location).
Your jobs, earnings, credit top-ups, the cash you collect for shops, and your ratings.

Customers receiving a parcel

You don't need the app. The shop gives us your name, WhatsApp number and address. We send you WhatsApp messages about your delivery: the rider's details, your delivery code and a tracking link. If you choose to share your location from the tracking page or on WhatsApp, we use it to guide the rider to you.

Why we use it

To run deliveries (matching riders, navigation, codes, payments), to keep shops, riders and customers safe (checking riders, stopping fraud and shared accounts, handling problems and SOS), to meet our legal and tax obligations, and to improve the service. We don't sell your information and we don't show you advertising.

Location

Riders: while you are online, Tumira collects your location even when the app is closed or the screen is off, so we can offer you nearby jobs; while you are on a job, so the shop and customer can follow their parcel. It stops when you go offline. The app asks your permission first and explains why.
Shops: the location you pin for your shop, and, if you tap "Use my location", your phone's location at that moment to place a pin.
Customers: only if you choose to share it, to guide the rider.

Only a rider's latest position is kept live. Positions saved on orders are deleted after 90 days.

Photos and face checks

Riders take photos at pickup and at the door as proof of delivery. To keep accounts real and unshared, Tumira checks rider documents and selfies automatically: it reads the text on IDs, licences and plates, checks photo quality, and compares faces across a rider's own photos and against other accounts (to catch duplicate or shared accounts). For this it keeps a face code: a list of numbers made from a photo, not an extra photo, used only for these checks and never shared. A person at Tumira reviews anything the automatic check is unsure about; the check alone never suspends a rider.

Where it's stored

Tumira's servers and backups are in Oracle Cloud's Johannesburg region, South Africa. Some of the services above process information in other countries. We use providers that protect personal information to a standard at least equal to Zimbabwe's law.

How long we keep it

Your account details: while you have an account. When you delete it, your name, phone number, email and profile photo are removed straight away.
Pickup and drop photos: 90 days after the delivery ends (longer only while a problem report about it is open).
Rider ID, licence and selfie photos: while you ride with Tumira, then 1 year after your account is deleted or your application is turned down, then deleted.
Weekly selfie face codes: 90 days. Other face codes are wiped when your account is deleted.
Positions saved on orders: 90 days.
WhatsApp and email message logs: 90 days; support conversations 1 year; sign-in code checks 1 day.
Delivery and payment records: 7 years, as tax and anti-fraud law requires, without your name or number once your account is deleted.
Backups: up to 30 days, encrypted.

Your rights

Under Zimbabwe's Cyber and Data Protection Act you can ask us to:

tell you what information we hold about you and give you a copy;
correct information that is wrong;
delete your information (some records we must keep by law, as above);
stop using your information for a purpose you object to.

You can change most details in the app under Profile, and delete your account there under Delete my account (or without the app). For anything else, contact us on WhatsApp or by email. We reply within 30 days. If you're not happy with our answer, you can complain to the Data Protection Authority (POTRAZ).

Keeping it safe

Everything travels encrypted (HTTPS). Each person can only see the information they need for their deliveries; ID documents are visible only to the rider and to Tumira's operations team, who sign in with a second factor. Backups are encrypted. No system is perfectly secure: if something goes wrong that puts your information at risk, we'll tell you and the authorities as the law requires.

Children

Tumira is for businesses and adult riders. You must be 18 or older to create an account. We don't knowingly collect information from children.

Changes and contact

If we change this policy we'll update the date at the top, and for important changes we'll let you know in the app or on WhatsApp first.

AIVA Solutions (Pvt) Ltd, Harare, Zimbabwe · [email protected] · WhatsApp +263 71 488 8633