Privacy Policy
Effective Date: December 06, 2025
Last Updated: December 06, 2025
Version: 1.0
Important: This Privacy Policy explains how we collect, use, and protect your personal information. Please read it carefully before using our Platform.
Table of Contents
1. INTRODUCTION
1.1 About This Privacy Policy
CHAP DROP, Registration Number 619585 ("Chap Drop", "we", "us", or "our"), is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Platform").
1.1.1 Lawful Basis for Processing
Chap Drop processes personal data on the lawful bases of user consent, contractual necessity, legal obligation, and legitimate interest as recognized under the Personal Data Protection Act No. 11 of 2022.
1.2 Who We Are
Company Information:
Business Name: CHAP DROP
Registration Number: 619585
Address: Majengo, Vijibweni, Kigamboni, Dar Es Salaam
Email: info@chapdrop.co.tz
Phone: 0652000795
P.O. Box: 36150
Business Activity: Courier Activities (Code 5320)
1.3 Acceptance of This Policy
By registering for, accessing, or using the Chap Drop Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, you must not use the Platform.
1.4 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes through:
- In-app notifications
- SMS to your registered phone number
- Email (if provided)
Your continued use of the Platform after such notification constitutes acceptance of the updated Privacy Policy.
1.5 Applicability
This Privacy Policy applies to:
- All users of the Chap Drop Platform (Clients and Drivers)
- Information collected through the mobile application
- Information collected through our website (when available)
- Information collected through customer support interactions
2. INFORMATION WE COLLECT
2.1 Overview of Data Collection
We collect information that you provide directly to us, information that is automatically collected when you use the Platform, and information from third-party sources. The specific information we collect depends on whether you are a Client or a Driver.
2.2 Information Collected from Clients
2.2.1 Account Information
What We Collect:
- Full name
- Phone number
- Email address (optional)
- Account credentials
Why We Collect It:
- Account creation and management
- Authentication
- Communication with you
2.2.2 Delivery Information
What We Collect:
- Pickup addresses
- Delivery addresses
- Recipient names
- Recipient phone numbers
- Parcel details (size, weight, description)
- Special instructions
Why We Collect It:
- Facilitating deliveries
- Matching you with Drivers
- Delivery tracking
- Customer support
2.2.3 Payment Information
What We Collect:
- Mobile money account details
- Transaction history
- Payment receipts
Why We Collect It:
- Processing payments
- Fraud prevention
- Financial records
- Refund processing
2.2.4 Location Data
What We Collect:
- GPS coordinates during booking
- Addresses for pickup and delivery
Why We Collect It:
- Accurate address selection
- Route optimization
- Service availability verification
2.2.5 Device Information
What We Collect:
- Device model and manufacturer
- Operating system version
- Mobile network information
- IP address
- App version
Why We Collect It:
- Technical support
- Platform optimization
- Security and fraud detection
- Analytics
2.2.6 Usage Data
What We Collect:
- Booking history
- Cancellation patterns
- Feature usage
- App interactions
Why We Collect It:
- Service improvement
- User experience optimization
- Analytics
2.2.7 Ratings and Feedback
What We Collect:
- Driver ratings (1-5 stars)
- Written reviews
- Feedback comments
Why We Collect It:
- Quality assurance
- Driver performance evaluation
- Service improvement
2.3 Information Collected from Drivers
Important Notice: These identifiers are treated as sensitive personal data under Tanzanian law and processed with enhanced security and access controls.
2.3.1 Personal Information
What We Collect:
- Full name
- Date of birth
- Phone number
- Email address (if provided)
- NIDA (National ID) number and documents
- Photograph
Why We Collect It:
- Identity verification
- Account creation
- Legal compliance
- Communication
2.3.2 Emergency Contact Information
What We Collect:
- Next of kin name
- Next of kin phone number
- Next of kin NIDA
Why We Collect It:
- Safety and security
- Emergency situations
- Verification purposes
2.3.3 License and Permits
What We Collect:
- Driving license number
- Driving license copy
- License expiration date
- Local government recognition letter
Why We Collect It:
- Driver eligibility verification
- Legal compliance
- Safety assurance
2.3.4 Vehicle Information
What We Collect:
- Vehicle registration documents
- Vehicle ownership/lease documents
- Vehicle type and model
- License plate number
- Vehicle photos
Why We Collect It:
- Vehicle verification
- Service matching
- Safety compliance
- Insurance purposes
2.3.5 Real-Time Location Data
What We Collect:
- Continuous GPS tracking while online
- Route information
- Movement patterns
Why We Collect It:
- Delivery matching
- Real-time tracking for Clients
- Route optimization
- Joint delivery coordination
- Safety and security
2.3.6 Financial Information
What We Collect:
- Mobile wallet details
- Earnings history
- Transaction records
- Commission details
Why We Collect It:
- Payment processing
- Earnings disbursement
- Financial reporting
- Tax compliance
2.3.7 Performance Data
What We Collect:
- Delivery completion rate
- Average ratings
- Cancellation rate
- Online hours
- Number of deliveries completed
Why We Collect It:
- Performance evaluation
- Quality assurance
- Service improvement
- Account standing
2.3.8 Communication Records
What We Collect:
- In-app messages
- Customer support interactions
- Notifications received and read
Why We Collect It:
- Customer support
- Dispute resolution
- Quality assurance
- Record keeping
2.4 Information Collected Automatically
2.4.1 Log Data
When you use the Platform, our servers automatically record information, including:
- Date and time of access
- Features accessed
- Actions taken within the app
- Error reports and crash data
- Performance metrics
2.4.2 Cookies and Similar Technologies
We use cookies, local storage, and similar tracking technologies to:
- Remember your preferences
- Maintain your session
- Analyze usage patterns
- Improve platform performance
2.5 Information from Third Parties
2.5.1 Payment Processors
We receive transaction confirmation and payment status information from Selcom payment gateway.
2.5.2 Mapping Services
We use Google Maps Platform, which may collect location and device information in accordance with their privacy policy.
2.5.3 SMS Provider
We receive delivery status information from Beem Africa for SMS notifications.
2.5.4 Government Verification
For Driver verification, we may verify NIDA information with relevant Tanzanian authorities.
3. HOW WE USE YOUR INFORMATION
3.1 Primary Uses
3.1.1 Service Delivery
We use your information to:
- Create and manage your account
- Facilitate parcel deliveries
- Match Clients with available Drivers
- Provide real-time tracking and updates
- Process payments and disburse earnings
- Generate delivery receipts
- Enable the joint delivery feature
3.1.2 Communication
We use your contact information to:
- Send booking confirmations
- Provide delivery status updates via SMS and push notifications
- Send payment receipts
- Respond to customer support inquiries
- Send important account notifications
- Communicate changes to our Terms or Privacy Policy
3.1.3 Verification and Security
We use your information to:
- Verify Driver identity and credentials
- Authenticate user accounts
- Detect and prevent fraud
- Ensure platform security
- Investigate suspicious activities
- Comply with legal obligations
3.1.4 Platform Improvement
We analyze aggregated and anonymized data to:
- Improve user experience
- Optimize delivery routes
- Enhance platform features
- Fix technical issues
- Develop new services
3.1.5 Quality Assurance
We use ratings, feedback, and performance data to:
- Monitor Driver performance
- Identify and address service issues
- Maintain platform quality standards
- Make account status decisions
3.1.6 Legal Basis and Consent Withdrawal
Users may withdraw consent at any time without affecting processing previously carried out under valid consent. Withdrawal can be made through account settings or by contacting Chap Drop.
3.2 Marketing and Promotional Communications
With your consent, we may use your contact information to:
- Send promotional offers and discounts
- Inform you about new features
- Conduct surveys and request feedback
You can opt out of promotional communications at any time by contacting us or using the unsubscribe option in messages.
3.3 Legal and Compliance Uses
We may use and disclose your information to:
- Comply with Tanzanian laws and regulations
- Respond to legal requests from authorities
- Enforce our Terms and Conditions
- Protect our rights and property
- Investigate violations of our policies
- Respond to claims of illegal activity
4. HOW WE SHARE YOUR INFORMATION
4.1 Information Sharing with Other Users
4.1.1 Clients to Drivers
When a Client books a delivery, we share the following information with the assigned Driver:
- Client's name (first name only)
- Pickup location and instructions
- Delivery location
- Recipient name and phone number
- Parcel details
- Special instructions
4.1.2 Drivers to Clients
When a Driver is assigned, we share the following information with the Client:
- Driver's name
- Driver's phone number
- Driver's photo
- Driver's rating
- Vehicle details (type, license plate)
- Real-time location during active delivery
4.1.3 Ratings and Reviews
Ratings and reviews may be visible to other users in accordance with our platform features.
4.2 Service Providers and Business Partners
We share information with trusted third-party service providers who assist us in operating the Platform:
4.2.1 Selcom (Payment Gateway)
Information Shared:
Name, Phone number, Payment amount, Transaction details
Purpose: Processing payments and disbursements
4.2.2 Google Maps Platform
Information Shared:
Location data, Device information
Purpose: Mapping, routing, and location services
4.2.3 Beem Africa (SMS Provider)
Information Shared:
Phone number, Message content
Purpose: Sending SMS notifications
4.2.4 Firebase (Google)
Information Shared:
Device information, Usage data, Location data for real-time updates
Purpose: Real-time database, analytics, and notifications
4.2.5 Cloud Hosting Provider
Information Shared:
All platform data
Purpose: Data storage and hosting
Important: These service providers are contractually obligated to protect your information and may only use it for the specific purposes we authorize.
4.3 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and the choices you may have.
4.4 Legal Requirements and Safety
We may disclose your information if required to do so by law or if we believe such action is necessary to:
- Comply with legal obligations, court orders, or government requests
- Enforce our Terms and Conditions
- Investigate potential violations
- Protect the safety, rights, or property of Chap Drop, our users, or the public
- Detect, prevent, or address fraud, security, or technical issues
- Respond to claims of illegal activity
4.5 With Your Consent
We may share your information with other parties when you give us explicit consent to do so.
4.6 Aggregated and Anonymized Data
We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for research, analytics, marketing, or other business purposes.
4.7 Government Authorities and Law Enforcement Requests
We shall clarify that only lawful, written requests are honored and logged in reference to Data-Processing Agreements with service providers to demonstrate compliance with section 50 of the Act.
5. LOCATION DATA AND TRACKING
5.1 Client Location Data
5.1.1 When We Collect
- During booking to set pickup and delivery locations
- With your permission to auto-detect your current location
5.1.2 How We Use It
- Accurate address selection
- Service availability verification
- Improved user experience
5.1.3 Control
You can disable location services in your device settings, but this may limit certain platform features.
5.2 Driver Location Data
5.2.1 Continuous Tracking
IMPORTANT:
When Drivers are online and available for deliveries, we continuously collect and track their real-time location data.
5.2.2 Why We Track
- Match Drivers with nearby delivery requests
- Provide real-time tracking to Clients during active deliveries
- Calculate accurate ETAs
- Optimize routes for joint deliveries
- Verify delivery completion locations
- Ensure Driver and Client safety
- Investigate disputes or incidents
5.2.3 Background Location Access
The Driver app requires permission to access location data even when the app is running in the background. This ensures:
- Continuous availability for delivery requests
- Uninterrupted real-time tracking during deliveries
- Accurate route recording
5.2.4 Driver Control
Drivers can control when location tracking occurs by:
- Using the online/offline toggle in the app
- When offline, location tracking stops
- Drivers must be online to receive delivery requests
Drivers may withdraw location-tracking consent by switching offline or deleting their account in accordance with Section 6.
5.3 Location Data Retention
Location data is retained for:
- Active Deliveries: Duration of delivery plus 30 days
- Completed Deliveries: Up to 2 years for record-keeping and dispute resolution
- Aggregated Data: Indefinitely in anonymized form for analytics
5.4 Location Data Security
Location data is:
- Encrypted during transmission
- Stored securely on our servers
- Accessible only to authorized personnel
- Protected by security measures outlined in Section 7
6. YOUR RIGHTS AND CHOICES
6.1 Your Data Protection Rights
You have the following rights regarding your personal information:
6.1.1 Right to Access
You have the right to:
- Know what personal information we hold about you
- Request a copy of your personal data
- Access your account information through the app
How to Exercise: Contact us at info@chapdrop.co.tz or 0652000795
6.1.2 Right to Correction
You have the right to:
- Correct inaccurate personal information
- Update incomplete information
- Modify your profile details in the app
How to Exercise: Update information directly in the app settings or contact us
6.1.3 Right to Deletion
You have the right to request deletion of your personal information, subject to certain exceptions.
Limitations: We may retain information if necessary for:
- Completing transactions you initiated
- Complying with legal obligations
- Resolving disputes
- Enforcing our agreements
- Fraud prevention and security
How to Exercise: Contact us at info@chapdrop.co.tz with your request
6.1.4 Right to Object
You have the right to object to:
- Processing of your data for marketing purposes
- Automated decision-making (if applicable)
6.1.5 Right to Data Portability
You have the right to:
- Receive your personal data in a structured, commonly used format
- Transfer your data to another service provider
- Lodge a Complaint with the Data Protection Commissioner per section 61 of the Act
6.2 Communication Preferences
6.2.1 Marketing Communications
You can opt out of promotional messages by:
- Clicking "unsubscribe" in email communications
- Replying "STOP" to SMS marketing messages
- Adjusting notification settings in the app
- Contacting customer support
6.2.2 Transactional Communications
You cannot opt out of essential service communications such as:
- Booking confirmations
- Delivery status updates
- Payment receipts
- Account security alerts
- Changes to Terms or Privacy Policy
6.3 Account Deletion
You may request account deletion by contacting us. Upon account deletion:
- You will lose access to the Platform
- Your personal data will be deleted or anonymized
- Some information may be retained as described in Section 6.1.3
- The process may take up to 30 days to complete
6.4 Cookie Control
You can control cookies through your device settings, but disabling cookies may affect platform functionality.
6.5 Do Not Track
Our Platform does not currently respond to "Do Not Track" signals from browsers.
7. DATA SECURITY
7.1 Our Security Commitment
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
7.2 Security Measures
7.2.1 Technical Safeguards
- Encryption: All data transmitted between your device and our servers is encrypted using HTTPS/SSL protocols
- Secure Storage: Sensitive data is encrypted at rest in our databases
- Authentication: Token-based authentication and OTP verification protect account access
- Firewalls: Network firewalls protect our servers from unauthorized access
- Regular Updates: We keep our systems updated with the latest security patches
- Chap Drop conducts periodic security audits and risk assessments to ensure ongoing confidentiality, integrity, and availability of personal data
7.2.2 Administrative Safeguards
- Access Controls: Only authorized personnel have access to personal data
- Employee Training: Staff are trained on data protection and security practices
- Confidentiality Agreements: Employees sign confidentiality agreements
- Audit Logs: We maintain logs of data access and modifications
7.2.3 Physical Safeguards
- Secure hosting facilities with restricted access
- Environmental controls to protect servers
- Backup and disaster recovery procedures
7.3 Third-Party Security
We require our service providers to implement appropriate security measures and handle your data in accordance with this Privacy Policy and applicable laws.
7.4 Security Limitations
IMPORTANT:
While we implement strong security measures, no system is 100% secure. We cannot guarantee absolute security of your information.
7.5 Your Security Responsibilities
You are responsible for:
- Keeping your account credentials confidential
- Not sharing your password with others
- Using a strong password
- Logging out of shared devices
- Reporting suspicious activity immediately
7.6 Data Breach Response
In the event of a data breach that affects your personal information, we will:
- Investigate the breach promptly
- Take steps to contain and remediate the breach
- Notify affected users within a reasonable timeframe
- Report to relevant authorities as required by law
- Provide information about steps you can take to protect yourself
8. DATA RETENTION
8.1 Retention Policy
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
8.2 Retention Periods by Data Category
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Information | Duration of account + 2 years | Legal compliance, dispute resolution, fraud prevention |
| Delivery Records | 3 years from delivery date | Record keeping, dispute resolution, auditing |
| Payment Records | 7 years from transaction date | Tax compliance, financial auditing, legal requirements |
| Location Data (Active) | Duration of delivery + 30 days | Dispute resolution, quality assurance |
| Location Data (Historical) | Up to 2 years | Dispute resolution, pattern analysis (anonymized) |
| Driver Verification Documents | Duration of account + 3 years | Legal compliance, regulatory requirements |
| Ratings and Reviews | Duration of reviewed user's account + 1 year | Quality assurance, transparency |
| Communication Records | 2 years from last communication | Customer support, dispute resolution |
| Device and Usage Data | 1 year from collection | Analytics, platform improvement |
| Suspended/Terminated Accounts | 3 years from suspension/termination | Fraud prevention, legal compliance |
8.3 Deletion After Retention Period
After the applicable retention period, we will:
- Permanently delete personal information from our active databases
- Anonymize information used for analytics
- Securely destroy physical documents
8.4 Extended Retention
We may retain information beyond the stated periods if:
- Required by law or legal process
- Necessary for ongoing litigation or disputes
- Required for regulatory compliance
- Necessary to protect our rights or safety
8.5 Anonymized Data
Aggregated, anonymized data that cannot identify you may be retained indefinitely for research, analytics, and business purposes.
8.6 Retention Schedule Review
Policy review every 12 months to ensure compliance with statutory requirements.
Additional Policy Sections
9. Children's Privacy
Platform not intended for users under 18. We do not knowingly collect information from minors.
10. International Data Transfers
Data primarily stored in Tanzania. Third-party services may process internationally with appropriate safeguards.
11. Third-Party Links
Platform may contain links to third-party services governed by their own privacy policies.
12. Cookies & Tracking
We use cookies for essential, functional, analytics, and performance purposes.
13. Policy Changes
We may update this policy and will notify users of material changes.
14. California Privacy Rights
CCPA compliance section for California residents. We do not sell personal information.
15. Dispute Resolution
Contact us first for privacy concerns. May escalate to Tanzanian authorities if unresolved.
16. Contact Information
Email: info@chapdrop.co.tz | Phone: 0652000795
17. Consent & Acknowledgment
By using the Platform, you acknowledge understanding and consent to data practices.
18. Special Notices for Drivers
Extensive data collection including continuous location tracking while online.
19. Data Protection Principles
Commitment to lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability under Personal Data Protection Act 2022.
Last Updated: December 06, 2025
Version: 1.0
© 2025 CHAP DROP. All rights reserved.
Registration Number: 619585