Privacy Policy

Tsemba is the controller of the personal data collected through the platform.

For any privacy question, write to privacidade@tsemba.com or use the contact page. We reply within 30 days at most.

Account data: name, mobile number, email, language and, for partners, identity documents, driving licence and vehicle or establishment documents.

Usage data: orders placed, pickup and destination addresses, location during service, payment history, ratings and support conversations.

Payment data: chosen method, transaction reference and payment status. We do not store full card numbers or security codes.

Technical data: device model, operating system, app version, IP address, session identifiers and error logs.

Directly from you, when you create an account, place an order, submit documents or contact support.

Automatically through platform use (technical logs, location during an active service).

From partners and payment operators, when they confirm service completion or transaction status.

Creating and authenticating accounts, including sending OTP codes by SMS.

Running trips, food orders and deliveries, matching partners and tracking service in real time.

Processing payments, issuing receipts, preventing fraud and meeting legal, tax and accounting obligations.

Providing customer support, reviewing complaints and investigating safety incidents.

Improving platform safety, reliability and performance, using aggregated data whenever possible.

Contract performance: data essential to deliver the requested service.

Legal obligations: invoicing, taxation and requests from competent authorities.

Legitimate interest: platform safety, fraud prevention and service improvement, always weighed against privacy impact.

Consent: marketing messages and optional features, withdrawable at any time without affecting the contracted service.

Location is used to calculate routes, estimate prices, match the nearest partner and enable service tracking.

For partners, location is collected while they are available or on a job; outside those periods collection stops.

You can disable location permission on your device, though some features will then be unavailable.

With partners performing the order: only the necessary data (first name, temporary contact where applicable, addresses and order details).

With payment operators (M-Pesa, e-Mola, mKesh, card acquirers) and the SMS provider, for authentication and charging.

With technology infrastructure and support providers, bound by confidentiality and Tsemba instructions.

With authorities, insurers or courts where legally required or necessary to defend rights.

We do not sell personal data or share it for third-party advertising.

Tsemba operates in Mozambique and South Africa and may use providers with infrastructure outside the country.

In those cases we require contractual confidentiality and security guarantees equivalent to our internal standards.

Account data: while the account is active.

Order, payment and invoicing records: for the period required by tax and accounting rules.

OTP codes: stored only in hashed form and deleted after expiry.

Safety incident records: for as long as needed for investigation and legal defence.

We apply encryption in transit, role-based access control, strong authentication for internal teams, audit logging and data minimisation.

Internal access to order data is limited to staff who need it for support, safety or legal duties.

No system is infallible: never share verification codes and report any suspected unauthorised access immediately.

You may request access, correction, deletion, restriction, portability and object to processing based on legitimate interest.

You can withdraw marketing consent at any time and keep using the platform.

To exercise these rights write to privacidade@tsemba.com or use the contact page. We may verify your identity first to protect your account.

We use local storage and technical identifiers strictly necessary for the platform to work, such as keeping your session and language.

Where we measure audience, data is aggregated and never used for advertising profiles.

The platform is not intended for people under 18 without legal guardian supervision. Accounts found in that condition are closed and associated data deleted.

This policy may be updated to reflect legal or technical changes. The version in force is the one published here, with a visible update date.