Privacy policy
Last updated: 18 October 2026
This policy explains how ZumaGo collects, uses and protects your personal data when you visit zumagoapp.com, contact us, or use the ZumaGo mobile app once it launches. We follow the Nigeria Data Protection Act 2023 (NDPA) and guidance from the Nigeria Data Protection Commission (NDPC).
1. Who we are
ZumaGo is a product of Devgem Technologies Limited, a company registered in Nigeria (RC 7772568), based in Abuja, Federal Capital Territory. Devgem Technologies Limited is the data controller for your personal data.
Contact: hello@zumagoapp.com
2. What we collect
| When | What we collect |
|---|---|
| You email us (for example to be notified, to partner with us or to ride with us) | Your name, email address, phone number, area in Abuja, and anything else you choose to include in your message |
| You create a ZumaGo account (once the app launches) | Name, phone number, email address and password |
| You place an order | Delivery address and location, order details, notes for the rider, and order history |
| You pay | Payment is handled by our payment provider. We receive confirmation of payment and limited details (such as the last four digits of a card), but we never see or store your full card details or PIN. |
| You use the app | Device type, app version, crash reports and approximate usage information, used to keep the app working |
| You apply as a rider or partner business | Identity and contact details, business or vehicle details, bank details for payouts, and verification documents we need to check you can work with us safely |
Our website does not use advertising or tracking cookies.
3. How we use it
- To reply to your messages and tell you when ZumaGo launches in your area (with your consent)
- To create and manage your account
- To process, deliver and support your orders, including sharing what's needed with the restaurant, shop or supplier and your rider
- To take payments and pay our partners and riders
- To keep ZumaGo safe, prevent fraud and meet our legal obligations
- To improve our service
Our lawful bases under the NDPA are: performing our contract with you (your orders and account), your consent (updates and marketing, which you can withdraw at any time), our legitimate interests (safety, fraud prevention and improving the service), and legal obligations.
4. Who we share it with
We never sell your personal data. We share it only where needed:
- Partner businesses (restaurants, shops, water suppliers): your order and first name, so they can prepare it
- Riders: your first name, delivery address, location and phone number, so they can deliver your order
- Service providers who help us run ZumaGo, such as payment processing, hosting, maps, messaging and email, under contracts that require them to protect your data
- Authorities, where the law requires it
Some of our service providers may process data outside Nigeria. Where that happens, we make sure appropriate safeguards are in place as the NDPA requires.
5. Location data
Once the app launches, it will use your location, with your permission, to show nearby businesses and to deliver to the right place. You can turn location access off in your phone's settings and enter your address manually instead.
6. How long we keep it
- Launch-notification emails: until we've told you we've launched, or until you ask us to stop
- Account data: while your account is open, and deleted within 90 days of you closing it, unless we need to keep it longer by law
- Order and payment records: up to 6 years, for accounting and tax purposes
7. Your rights
Under the NDPA you have the right to:
- ask for a copy of your personal data
- ask us to correct or delete it
- object to or restrict how we use it
- withdraw your consent at any time
- ask to move your data to another service
To use any of these rights, or to delete your account, email hello@zumagoapp.com. We'll reply within 30 days. If you're unhappy with how we've handled your data, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
8. Security
We protect your data with encryption in transit, access controls and trusted, secure providers. No system is completely secure, but we work hard to keep your information safe and will tell you and the NDPC if a serious breach affects you.
9. Children
ZumaGo is intended for people aged 18 and over. We don't knowingly collect personal data from children.
10. Changes to this policy
We'll update this page if anything changes and show the new date at the top. For important changes, we'll let you know in the app or by email.