Numo Eats, operating Numo Drivers ("we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Numo Drivers mobile application (the "App"), a food delivery driver platform that enables independent contractor drivers to accept and complete food delivery orders in South Africa. By using the App, you consent to the practices described herein. This policy complies with the Protection of Personal Information Act (POPIA) of South Africa and Google Play Store requirements.

Information We Collect

We collect the following types of information to provide and improve our services:

Driver Account Information:

  • Full name (first and last name)
  • Email address and phone number (for authentication and communication)
  • National ID number (for identity verification and compliance)
  • Access code (authentication credential in format DRIV-YYYY-XXXXXX)
  • Driver's license information and images
  • Proof of residence documents
  • Emergency contact details (name, phone, relationship)
  • Application status (pending/approved/rejected)

Location Data (CRITICAL - Core App Functionality):

  • Precise GPS location (latitude and longitude coordinates) collected continuously during active deliveries
  • Foreground location tracking: Updates every 5 seconds or 10 meters while app is open
  • Background location tracking: Continuous tracking during deliveries even when app is minimized or screen is off
  • Heading/bearing direction and speed data
  • GPS accuracy metrics and timestamp for each location point
  • Route history and delivery path tracking
  • Distance traveled calculations

Usage: Real-time navigation to restaurants and customers, route optimization, delivery verification and proof of completion, distance-based earnings calculation, order matching with nearby drivers, ETA estimates, performance analytics, and fraud prevention

Retention: Location history stored for 90 days for dispute resolution, then aggregated for analytics

Explanation: "Numo Drivers requires access to your precise location at all times (even when the app is closed or not in use) to enable delivery navigation, track your route for verification and safety, calculate your earnings based on distance traveled, match you with nearby delivery requests, and provide customers with real-time delivery updates."

Address and Delivery Area Information:

  • Driver's home address (street, suburb, city, postal code)
  • Preferred delivery areas and zones
  • Coverage area preferences

Vehicle Information:

  • Vehicle type (motorcycle, car, bicycle, scooter, etc.)
  • Make, model, and year
  • Registration number
  • Insurance information and certificate images
  • Vehicle condition and photos

Delivery Performance Data:

  • Total deliveries completed and in-progress
  • Customer ratings and reviews (1-5 stars, delivery-specific ratings)
  • Overall driver rating and rating history
  • Delivery completion times and on-time rates
  • Order acceptance/rejection history and reasons
  • Route efficiency and distance metrics
  • Average delivery duration

Financial and Earnings Data:

  • Earnings calculations (base delivery fees, customer tips, bonuses/incentives)
  • Transaction history and payment records
  • Payment method preferences (cash/card)
  • Bank account information for payouts
  • Payment status (pending/completed/paid) and settlement history
  • Tax information for 1099 reporting (if applicable)
  • All amounts stored in South African Rands (ZAR), in cents for precision

Customer Data (Read-Only for Delivery Fulfillment):

  • Customer names and phone numbers (for delivery coordination)
  • Delivery addresses with GPS coordinates (for navigation)
  • Order contents and special instructions
  • Chat messages between driver and customer (order-specific)
  • Customer order history (for context)

Communication Data:

  • In-app chat messages with customers (stored per order)
  • Message read status and timestamps
  • Quick message usage (suggested replies)
  • Support inquiries and responses

Device and Usage Data:

  • Firebase Cloud Messaging (FCM) tokens for push notifications
  • Expo push tokens (fallback)
  • Device identifiers for notification delivery
  • App usage patterns (screens visited, actions taken, time spent)
  • Notification engagement metrics
  • Online/offline status changes and duration
  • Session activity and last active timestamp

Analytics Data:

  • App performance metrics
  • Feature usage statistics
  • Error logs and crash reports
  • Network connectivity status

We collect this extensive data to enable core delivery logistics functionality, ensure safety and accountability, calculate fair earnings, and maintain platform quality.

How We Use Your Information

Core Delivery Operations:

To create and manage driver accounts, authenticate access, display available delivery orders, enable order acceptance, provide turn-by-turn navigation to restaurants and customers, track delivery routes in real-time, verify delivery completion, and coordinate with restaurants and customers

Location-Based Services:

To continuously track your precise GPS location (foreground and background) during deliveries for route navigation, delivery verification, safety monitoring, distance-based earnings calculation, matching you with nearby orders, providing customers with live delivery updates, and generating route history for dispute resolution

Earnings and Payments:

To calculate delivery earnings (base fees + tips + bonuses), track transaction history, process payouts to your bank account, generate earnings reports, and provide tax documentation

Performance Management:

To collect and display customer ratings, calculate average driver rating, monitor delivery completion rates, track on-time performance, and identify areas for improvement

Communication:

To enable in-app chat between driver and customer for delivery coordination, send push notifications for new orders and status updates via Firebase and Expo Notifications, provide support messages and promotional alerts, and facilitate emergency communication

Safety and Security:

To verify driver identity, monitor for fraudulent activity, resolve disputes with route history, ensure compliance with platform policies, and respond to emergencies using location data and emergency contacts

Platform Improvement:

To analyze usage patterns, improve navigation and routing algorithms, optimize order matching, develop new features, and enhance overall platform performance

Legal Compliance:

To comply with tax reporting requirements, respond to legal requests, enforce Terms of Service, and protect platform rights

Background location tracking is essential for delivery verification, customer safety, earnings accuracy, and dispute resolution. Location data is collected continuously during active deliveries even when the app is not actively in use.

Third-Party Services and Sharing

We share information only as necessary to operate the App:

Google Maps API (CRITICAL): For turn-by-turn navigation, route optimization, distance calculations, geocoding, place details, and ETA estimates (shared: precise GPS location in real-time, routes, destination addresses; their privacy policy: https://policies.google.com/privacy)

Supabase: For backend database, real-time order synchronization, location history storage, earnings tracking, and authentication (shared: all driver data including location history, orders, earnings, ratings; their privacy policy: https://supabase.com/privacy)

Firebase Cloud Messaging: For push notifications about new orders, status updates, and alerts (shared: FCM device tokens, user IDs, device info; their privacy policy: https://policies.google.com/privacy)

Expo Services: For notification management, location services, secure credential storage, and background task management (shared: device info, location data, push tokens; their privacy policy: https://expo.dev/privacy)

SendGrid: For email notifications to drivers about earnings, updates, and support (shared: email address, notification content; their privacy policy: https://sendgrid.com/policies/privacy)

Paystack: For payment processing of customer orders and driver payouts (shared: transaction details, bank account info for payouts; their privacy policy: https://paystack.com/privacy; compliant with PCI DSS)

We do not sell your personal data. Data may be shared with:

  • Customers: Real-time location during delivery, driver name, phone, vehicle info, and ETA
  • Restaurants: Driver name, phone, arrival ETA, and current location during pickup
  • Platform administrators: For support, dispute resolution, performance review, and safety investigations
  • Authorities: If required by law (e.g., under POPIA, for fraud prevention, or in response to subpoenas)
  • Insurance providers: In case of accidents or incidents during deliveries

International transfers (e.g., to Google, Supabase, Firebase servers) are protected by standard contractual clauses and encryption.

Data Security and Retention

We implement comprehensive security measures to protect your data:

  • Encryption in transit (HTTPS/TLS) and at rest
  • Secure authentication and access controls
  • Regular security audits and penetration testing
  • PCI DSS compliance for payment handling
  • GPS data anonymization for analytics after retention period

However, no system is infallible, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your access code.

Data is retained as long as needed for service provision and legal compliance:

  • Account info: Until account deletion or 2 years of inactivity
  • Location history: 90 days for full GPS tracks (for disputes), then aggregated/anonymized for analytics
  • Earnings and financial records: 7 years per South African tax law
  • Delivery history: 3 years for dispute resolution and performance tracking
  • Chat messages: 90 days, then deleted
  • Ratings and reviews: Permanent (for platform integrity)

Your Rights Under POPIA and Google Play

As a South African user, you have rights under POPIA:

Access: Request a copy of your personal data, including location history and earnings records

Correction: Update inaccurate information through the App or by contacting us

Deletion: Request erasure (account deletion removes most data within 30 days; financial records and ratings retained for legal compliance and platform integrity)

Objection/Portability: Object to processing or request data export in a structured format (e.g., CSV of location history, earnings data)

Withdraw Consent: Revoke permissions (e.g., location, notifications) at any time via device settings. Note: Withdrawing location permission will prevent you from accepting and completing deliveries, as location tracking is essential for core app functionality

To exercise rights, contact us at support@numoeats.com. We respond within 30 days. For data deletion requests via Google Play, use the App's settings or contact support.

Location Data Rights: You may request a copy of your location history, object to location tracking (which will disable delivery functionality), or request deletion of historical location data older than the 90-day retention period.

Children's Privacy

The App is intended for drivers 18+ years of age (legal requirement for independent contractor work). We do not knowingly collect data from children. If we discover such data, it will be deleted immediately.

Changes to This Policy

We may update this policy; changes will be posted in the App with notice at least 30 days before taking effect. Continued use constitutes acceptance. Material changes to location tracking practices will require re-consent.

Contact Us

Numo Eats

Email: support@numoeats.com

Phone: +27 81 790 8420

Address: Tuthong Street, Soshanguve - DD, Pretoria, South Africa

For privacy complaints, contact the Information Regulator of South Africa at https://inforegulator.org.za.