endai
Privacy Policy
Last updated 10 August 2026
Endai ("Endai", "we", "us") is a ride-hailing and courier marketplace operating in Zimbabwe. This policy explains what personal information we collect, how we use and share it, how long we keep it, and the choices and rights you have — including how to delete your account. It applies to the Endai app and website (endai.railscloud.co).
By using Endai you agree to this policy. You must be 18 or older to use Endai.
1. Information we collect
- Account: your phone number (your account identifier), name, and — if you set them — email address and password (stored only as a secure one-way hash). Your date of birth, used to confirm you are 18+.
- Verification (safety): if you choose to verify, a photo of your government ID and/or a selfie. Drivers also provide vehicle details and documents (registration, and where relevant a city permit or insurance).
- Location: your device location while you are using the app to request or provide a trip — for pickup, matching nearby drivers, pricing by distance, and navigation.
- Trips & activity: pickup and destination, agreed price, ride and parcel history, and ratings.
- Payments: wallet balances and transaction records. Mobile-money and card payments are processed by our payment partner (ContiPay); we do not store your card number, mobile-money PIN, or bank credentials.
- Device & usage: a push-notification token, device type and app version, and technical logs used to run and secure the service.
2. How we use your information
- Provide the service — request, match, price, and complete rides and courier deliveries.
- Safety and trust — verify identity, show a verified badge, enforce the 18+ requirement, and investigate reports.
- Payments — process fares, wallet top-ups, change-to-wallet, and driver passes.
- Communication — trip updates, pickup and delivery codes, and one-time login codes, by in-app notification, push, and WhatsApp.
- Support, fraud prevention, and compliance with the law.
3. When we share information
We do not sell your personal information. We share it only as needed to run Endai:
- With the other party to a trip: a rider and driver see each other's first name, rating, verified status, vehicle details (for drivers), and pickup information necessary to complete the trip.
- Service providers: our payment processor (ContiPay), messaging providers (Twilio for WhatsApp), and push delivery (Google Firebase Cloud Messaging), acting on our instructions.
- Legal: authorities or others where required by law, or to protect the safety, rights, or property of users and the public.
4. Location
We use precise device location only while you are actively using Endai — as a rider requesting a trip, or a driver who is online. Drivers who go online share location so nearby requests can reach them and riders can be matched. You can turn location off in your device settings, but core features will not work without it. We keep the pickup and destination of your trips as part of your trip history (see retention).
5. Data retention
We keep personal information only as long as we need it:
- While your account is active: your account, verification, and activity data are retained so the service works.
- When you delete your account: we promptly remove your personal identifiers (name, email, password, date of birth) and delete your verification documents, saved devices, and notifications. Your phone number is released so it can be used to register again.
- Financial and legal records: trip and payment records are kept in de-identified form (no longer linked to your personal identifiers) for up to 7 years, or as otherwise required, to meet tax, accounting, anti-fraud, and dispute-resolution obligations.
- Technical logs: retained for a short period for security and troubleshooting, then deleted or aggregated.
6. Your rights and choices
- Access & correction: view and update your name and account details in the app, or contact us.
- Deletion: delete your account at any time (see below).
- Notifications: control push notifications in your device settings.
- Complaints: contact us with any privacy concern.
7. Delete your account
You can permanently delete your Endai account and personal data:
Deletion removes your personal identifiers and deletes your verification documents, saved devices, and notifications. As explained in Data retention, de-identified financial and trip records are kept where the law requires. If you have an unfinished trip or an outstanding balance, settle it first.
8. How we protect your information
Data is encrypted in transit using HTTPS/TLS. Passwords are stored only as salted one-way hashes. We restrict access to personal data to what is needed to operate the service, and we do not hold your card or mobile-money credentials.
9. Children
Endai is for adults. You must be 18 or older to create an account or use the service. We do not knowingly collect information from anyone under 18; if we learn we have, we will delete it.
10. Changes to this policy
We may update this policy from time to time. We will post the new version here and update the date above; significant changes will be communicated in the app.
Questions or requests about privacy or your data:
Email: info@tamiatlas.com
Endai · Chiredzi, Zimbabwe · endai.railscloud.co