Last updated : October 1, 2025
Effective date: October 1, 2025
This Privacy Policy explains how ZIDI Mobility Limited ("ZIDI", "we", "us" or "our") collects, uses, stores and discloses your personal data when you use the ZIDI mobile application, website and related services (collectively, the "Services"). We are committed to protecting your privacy and complying with the Kenya Data Protection Act, 2019.
By using the ZIDI app or website, you agree to the terms described in this policy.
We collect different types of personal information to provide and improve our services.
| Category | Examples | Why We Collect It |
|---|---|---|
| Personal Details | Name, email, phone, ID, driver’s license, profile photo | Account setup, KYC, fraud prevention |
| Location Data | Pickup/drop-off address, Google Maps directions | Enable bookings & navigation |
| Transaction Data | Payments, M-Pesa reference, booking history | Process bookings, refunds |
| Usage Data | App activity, pages visited | Improve app performance |
| Device Data | Device type, OS, app version | Troubleshooting, app security |
| Communication Data | Chats, support requests | Facilitate communication |
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Manage bookings | Personal, location, transaction data | Contract |
| Verify identity | ID, driver’s license, phone | Legal obligation |
| Process payments | Transaction data | Contract |
| Improve app | Usage, device data | Legitimate interest |
| Prevent fraud | Personal, transaction, communication | Legal obligation |
| Communicate with you | Personal & communication data | Consent / legitimate interest |
| Who We Share With | Why |
|---|---|
| Car Owners / Renters | To enable confirmed bookings (contact & pickup details) |
| Payment Providers | Process payments and refunds |
| Service Providers | Hosting, analytics, customer support |
| Regulators / Authorities | Where required by law |
| Data Type | Retention Period |
|---|---|
| KYC (ID, license) | 7 years |
| Booking history | 5 years |
| Payment records | 7 years |
| Communication data | 3 years |
| Marketing data | Until consent withdrawn |
Important distinction: ZIDI displays static pickup locations associated with vehicle listings (provided manually by owners). We do not share a user's live GPS location with other users. If you enable device location permissions to assist with pickup directions or search, that location is used to provide mapping and navigation features and is not broadcast to other app users.
When routing is required, we may open Google Maps (or similar mapping services) on your device to navigate to the pickup/drop-off point.
ZIDI provides an in-app messaging feature so renters and car owners can communicate. Messages you send are stored securely for the purposes of booking, dispute resolution, and fraud prevention.
Although a dedicated blocking/reporting feature may be added (see Roadmap), if you encounter abusive or suspicious behaviour please contact support@zidimobility.co.ke or call +254715296479 with details so we can investigate. We reserve the right to suspend or terminate accounts that violate our Terms & Conditions.
We take reasonable steps to protect personal data. Measures include:
Despite these measures, no system is foolproof. In the event of a data breach, we will follow the procedures required by law, notify affected users and the Office of the Data Protection Commissioner where applicable. Typically within 48hrs.
| Your Right | What It Means |
|---|---|
| Access | Request a copy of your data |
| Correct | Fix inaccuracies |
| Delete | Request deletion unless legally required |
| Withdraw consent | Opt out of marketing, revoke permissions |
| Data portability | Request portable copy of your data |
| Complain | Contact the ODPC (Kenya) |
ZIDI is intended for users aged 18 and above. We do not knowingly collect personal data from children under 18. If we become aware that a minor’s personal data has been collected without appropriate consent, we will take steps to delete it promptly.
Your information may be stored or processed in servers located in jurisdictions outside Kenya (for example our cloud providers have servers in Nairobi Kenya,Dallas Texas, Capetown South Africa and London Europe). When we transfer data internationally, we implement safeguards required by law (contractual safeguards, reputable processors and technical controls). If you require details of the locations where your data is stored, please contact support.
Our Services may contain links to third-party websites or use third-party SDKs (e.g., Google Maps, analytics providers). These third parties have their own privacy policies and are responsible for their own practices. We encourage you to review their policies before sharing personal data with them.
We may update this Privacy Policy occasionally. We will post the updated policy on our website and include the "Effective date" at the top. Substantial changes will be communicated through the app, email or other reasonable means.
If you have concerns about our handling of personal data, contact us at privacy@zidimobility.co.ke. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya:
ZIDI Mobility Limited is the data controller for personal data processed through the Services. Our contact details are:
If you have questions or concerns about this Privacy Policy, contact us at:
Email:
privacy@zidimobility.co.ke
Phone: +254-715-296-479