Privacy Policy
Last updated: January 2025
Enda ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding your data. By using the Enda app, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Personal Identification
- Full name, phone number, email address
- Date of birth (for age verification)
- National ID or passport number (for KYC verification)
- Selfie and identity document photos
Location Data
- Real-time GPS location during active trips
- Pickup and destination addresses
- Last known location (when app is in use)
Device Information
- Device type, operating system, and app version
- Device identifiers (for push notifications)
- IP address and network information
Financial Information
- Wallet transaction history
- Payment method details (processed securely via our payment partners — we do not store raw card numbers)
- Promo codes used
Usage Data
- Trip history, routes taken, and durations
- In-app chat messages (for safety and dispute resolution)
- Ratings and reviews given or received
- Support tickets and communications
Driver / Operator Data (additional)
- Vehicle registration documents, photos, and VIN
- Driving licence details and expiry dates
- Insurance and roadworthy certificates
- Online/offline status and real-time location during shifts
2. How We Use Your Information
Provide the Service
- Match passengers with nearby drivers
- Calculate and process fares
- Provide real-time trip tracking
- Process payments and wallet transactions
Safety and Security
- Verify identities through KYC
- Detect and prevent fraud and abuse
- Investigate disputes and incidents
- Support SOS alert responses
Communication
- Send trip confirmations and receipts
- Push notifications for ride status updates
- Account verification OTPs
- Customer support responses
Improvement
- Analyse usage patterns to improve the app
- Conduct internal research and analytics
- Fix bugs and improve performance
Legal Compliance
- Meet regulatory obligations under Zimbabwean law
- Respond to lawful requests from authorities
3. Location Data
- Passenger location is collected when you open the app to book a ride, during the trip, and briefly after drop-off
- Driver location is collected continuously while the driver is online
- Location data is used to match rides, show ETAs, and provide tracking
You can disable location access in your device settings, but this will prevent you from using the app's core features. We do not sell or share your real-time location with any third party for advertising purposes.
4. Sharing Your Information
Between Users
- A passenger's name and pickup location is shared with their matched driver
- A driver's name, vehicle details, rating, and real-time location is shared with the matched passenger
Service Providers
- Payment processors (EcoCash, InnBucks, bank APIs) to process transactions
- SMS gateway providers for OTP delivery
- Firebase / Google (FCM) for push notifications
- Cloud hosting providers for data storage
- Analytics tools (aggregated, anonymised data only)
Legal Requirements
We may disclose information to law enforcement or regulatory authorities if required by law, court order, or to protect the rights and safety of users.
We do not sell your personal information to third parties.
5. Data Retention
We retain your data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations.
- Account data: retained while active + 5 years after deletion for legal/audit purposes
- Trip records: 5 years
- Chat messages: 1 year
- KYC documents: 7 years (regulatory requirement)
- Financial records: 7 years (tax and audit requirement)
- Location history: 90 days for active users; shorter after deletion
After these periods, data is securely deleted or anonymised.
6. Your Rights
Access — You can view your account information in the app at any time via Profile.
Correction — You can update your name and email via Profile → Edit Profile. For other corrections, contact support.
Deletion — You can permanently delete your account and all associated personal data via Profile → Delete Account or at this page. Some data may be retained for legal compliance periods (see Section 5).
Data Portability — You can request a copy of your data by emailing courage@mistnex.co.zw. We will respond within 30 days.
Restriction & Objection — You may request that we restrict processing of your data or object to processing for certain purposes, including direct marketing.
To exercise any of these rights, contact us at courage@mistnex.co.zw.
7. Cookies and Tracking
The Enda app does not use browser cookies. We use device identifiers and analytics SDKs (such as Firebase Analytics) to understand app usage. This data is aggregated and anonymised where possible. You can opt out of analytics tracking in your device settings.
8. Children's Privacy
The Enda app is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a user under 18, we will delete it promptly. If you believe a child has provided us with personal information, please contact courage@mistnex.co.zw.
9. Security
We implement industry-standard security measures to protect your data, including:
- Encrypted data transmission (TLS/HTTPS)
- Encrypted storage for sensitive data
- Access controls limiting who can view personal data
- Regular security audits
No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
10. Third-Party Links
The App may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. We encourage you to read the privacy policies of any third-party services you use.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via the App or by email. The "Last updated" date at the top of this page shows when the policy was last revised. Your continued use of the App after changes constitutes your acceptance of the updated policy.
12. Contact Us
For privacy-related questions, requests, or complaints:
Email: courage@mistnex.co.zw
Phone: 0774798743
Address: Harare, Zimbabwe
We aim to respond to all inquiries within 30 days.