Deliman is an app for rides and deliveries in Zimbabwe and South Africa. Riders and senders name a fare, nearby drivers and couriers accept it or offer their own, and the rider or sender picks one. This policy explains what personal information Deliman collects, why, who can see it, how long we keep it and what you can do about it.
It applies to everyone who uses the Deliman app, the delivery and trip-sharing links, and Deliman's business dashboards: riders, senders, recipients of parcels, drivers, couriers, members of companies and fleets, and people named as trusted contacts.
Deliman never takes or holds your fare. Riders and senders pay drivers and couriers directly. We do not sell your personal information and we do not show advertising.
1. What we collect
Your account
- Name, email address and mobile number. You sign in with your email (a 6-digit code we email you), with an email and password, or with Google. If you use Google, it gives us your name and email address, nothing else.
- Your password, if you set one, is stored only in scrambled (hashed) form. Deliman staff can never see it.
- A device identifier (Android's per-app ID), sent when you sign in, so we can spot several accounts on one phone.
- A notification token, so we can send you notifications about your trips and deliveries.
Trips and deliveries
- Pickup, destination and any stops; the fare you offer, bids made and the fare agreed; times and the status of each trip.
- For parcels: the size, weight and description you give, and the recipient's name, mobile number, drop-off point and notes. Please only give a recipient's details if they are happy for you to share them with us.
- Collection, delivery and return codes, and a record of each handover (the time and where the courier was).
- Ratings you give and receive: stars, tags and an optional comment.
If you drive or deliver
- Verification documents: an identity document and, depending on how you work, a driver's licence, vehicle registration, a photo of your vehicle and a photo of yourself.
- Your mode (on foot, motorbike, car, van or truck) and vehicle details (make, colour, number plate).
- Your national ID number is never stored. We keep a one-way coded fingerprint of it, so each person gets the free trial only once, and its last 3 characters, so staff can match it to your document.
- Your commission wallet: top-ups, commission charged and every adjustment, plus records of payments confirmed by our payment provider. We never receive your card or mobile-money PIN.
- Your earnings record: jobs, fares, commission and what you kept.
- Routes you declare for long-haul loads.
Safety
- If you press SOS: the alert, what you tell us is happening, your location while the alert is open, and what our safety team does about it.
- Up to 3 trusted contacts you name (name and mobile number). Please only add people who agree to it. We use their numbers only to send them safety alerts and trip links.
Business accounts
- For companies and fleets: the business's details, its members and their roles, and the jobs and rides it books.
Messages with us
- Anything you send us when you contact Deliman.
2. Your location
- Riders and senders: the app uses your phone's location to set your pickup point and show you on the map. Your phone's position is not followed during a trip unless you press SOS.
- Drivers and couriers: while you are online, your phone sends its location every few seconds, also when the app is in the background. Android shows a notification for as long as this is happening. It stops the moment you go offline.
- While you are online and free, riders nearby see an icon for your mode in roughly the area you are in (to within about 150 m). They never see your name, vehicle or exact spot.
- During a trip, the rider or sender sees the driver's or courier's position live. A short trail of recent positions (up to 30 minutes) is kept while the trip is under way and deleted when it ends.
- For deliveries, the courier's position is saved at every handover (collection, arrival, delivery, refusal and return), as proof in case of a dispute.
- For long-haul loads, the trucker's app records positions even without signal and sends them later; they are kept as the load's journey record.
- After an SOS, your phone shares its location with our safety team, and with anyone holding a link sent because of the alert, until the team closes it. The app shows that it is sharing. These positions are kept as the record of the incident.
3. How we use your information
- To run the service: showing your offer to nearby drivers and couriers, matching you, showing each side what they need during a trip, tracking deliveries and checking handover codes.
- To keep people safe: answering SOS alerts, alerting your trusted contacts, and contacting emergency services when needed.
- To verify drivers and couriers before they can take any job, and to prevent fraud (for example, one free trial per person).
- To run the commission wallet: charging commission, crediting top-ups and keeping the ledger.
- To settle problems: disputes about deliveries or fares, support requests, low ratings and breaches of our rules.
- To send you messages about your trips, deliveries, account and wallet, by notification or email.
- To meet our legal obligations, for example tax records and lawful requests from authorities.
4. Who sees your information
Other users
- Drivers who receive your offer see the pickup, destination and fare, but not who you are, until you pick a bid.
- When you choose between bids, you see each driver's name, vehicle and rating.
- A rider and their driver see each other's name and mobile number only while the trip is active (from the match until it ends), so they can call or message each other on WhatsApp. A call or chat you start stays in your own phone's call log or WhatsApp, as any call does.
- Your average rating is shown to the other side once you have 5 ratings. Individual ratings are never shown; comments are seen only by Deliman staff.
- A parcel's recipient gets a signed link that expires. It shows the delivery's progress, the courier's first name and mode, and their position while in transit. It stops working 24 hours after the delivery ends.
- Handover codes are shown only to the person who must give them, and only once the courier has arrived.
- A trip-sharing link shows the trip's progress and the sharer's live position, plus the driver's first name, vehicle and plate (or, for a driver's contacts, the rider's first name). It never shows anyone's phone number or surname.
- If a company books a ride for you as one of its members, it sees that ride (when, where, the driver and the fare) in its reports. It does not see rides you book yourself.
- A fleet sees its own drivers' positions while they are online, their jobs and their earnings.
Deliman staff
- Staff see only what their role allows. For example, only some roles can open identity documents or change wallets.
- Identity documents are opened through links that expire after 5 minutes. Every view of a document, and every staff action on your account, wallet or organisation, is recorded in an audit log that cannot be edited or deleted.
Others
- Emergency services, when our safety team contacts them about an SOS.
- Authorities, when the law requires us to share information, and only what is required.
- The services listed in the next section, to the extent they need it to work for us.
5. Services we use
These companies process some of your information for us:
- Our hosting provider, whose servers run Deliman and store its data. Sign-in also runs on our own servers.
- Google Maps Platform (Google): the maps in the app, and address search, place lookup and road routes. Address search and routing go from our server to Google, so Google receives the text you search and the places on your route, but not who you are.
- Google Sign-In (Google), if you choose to sign in with Google.
- Firebase Cloud Messaging (Google), to deliver notifications to your phone.
- Gmail (Google), to send sign-in and password-reset codes to your email address, and to tell our staff when a driver or courier sends their application (only their name, how they travel and their market).
- Paynow, for drivers' and couriers' wallet top-ups in Zimbabwe (EcoCash, OneMoney and cards). Paynow handles the payment; we receive only its confirmation.
- Your phone's dialler and WhatsApp, only when you choose to call or message someone from the app.
Google and Paynow handle information under their own privacy policies too.
6. Where it is stored and how it is protected
- Deliman's servers are currently outside Zimbabwe and South Africa, so your information is transferred abroad to be stored and processed. We protect it there in the same way, under this policy.
- Identity documents are stored privately on Deliman's own servers, never on a public address.
- Connections to Deliman are encrypted (HTTPS).
- Sign-in codes, passwords, access tokens, ID numbers and document images are never written to our logs, and phone numbers in logs are partly hidden.
- On your phone, the app keeps your sign-in in the phone's secure storage. To work without signal it also keeps your last trip and any action waiting to be sent; these are removed when you sign out, so the next person on a shared phone does not see them.
7. How long we keep it
- We keep your information while your account is open.
- When your account is closed, we delete your profile, documents, trusted contacts and notification tokens within 30 days.
- We keep the records we need for disputes, safety, tax and the law for 5 years after your account is closed, then delete them: trips and deliveries with their handover records, ratings, the wallet ledger and payment records, safety incidents and the staff audit log.
- Some information is deleted sooner: a trip's live trail when the trip ends, and a delivery's tracking link 24 hours after the delivery ends.
8. Your rights
Under Zimbabwe's Cyber and Data Protection Act and South Africa's Protection of Personal Information Act (POPIA), you may:
- ask what personal information we hold about you and get a copy;
- ask us to correct information that is wrong (you can change some of your details in the app);
- ask us to delete your information, subject to what we must keep (see section 7);
- object to how we use your information;
- complain to the regulator: in Zimbabwe, the Data Protection Authority (POTRAZ); in South Africa, the Information Regulator.
To use any of these rights, email deliman-privacy@hsms.co.zw. We may ask you to confirm that the account is yours, and we will reply within 30 days.
9. Deleting your account
To delete your Deliman account and its data, email deliman-privacy@hsms.co.zw from the email address on your account, with the subject "Delete my Deliman account" and the mobile number you use in the app.
- We confirm your request and delete your account within 30 days.
- What we delete at once and what we keep for 5 years is set out in section 7.
- Step by step: deliman.hsmsapi.co.zw/delete-account.html.
10. Age limits
- You must be at least 16 to ride or send parcels with Deliman.
- You must be at least 18 to drive or deliver.
Deliman is not for children under 16. If we learn that someone under 16 has an account, we will close it.
11. Phone permissions
- Location: to set your pickup and, for drivers and couriers, to share your position while online (including in the background). You can turn it off in your phone's settings, but drivers and couriers can't go online without it.
- Camera and photos: only for drivers and couriers, to take or choose their verification documents and photos.
- Notifications: for bids, trip and delivery updates and safety messages.
12. Changes and contact
If we change this policy, we will post the new version here with a new effective date.
Questions about privacy, or about this policy: deliman-privacy@hsms.co.zw.
Deliman · Zimbabwe and South Africa · Terms of Service