Last updated 24 July 2026

Privacy Policy

How ThumaPay collects, uses, shares and protects your information, including every permission our mobile app requests.

1. Who we are

An app store listing names a single publisher, but the day-to-day processing of your data is carried out by our operating companies. Both are set out here so it is clear who is responsible for what.

Entity	Role
Thuma Express Holdings, Inc. Delaware, USA	Publisher of the mobile applications. The ThumaPay app is published on the Apple App Store and Google Play under this entity’s developer account. It owns the platform intellectual property and acts as overall data controller for the group.
ThumaPay Zimbabwe (Pvt) Limited Harare, Zimbabwe	Operator and controller — financial services. Will operate the wallet, payments, ThumaCredit advances and ThumaShield insurance distribution, and is the controller for financial, identity-verification and transaction data. Licence applications with the Reserve Bank of Zimbabwe and IPEC are in progress; it does not yet process regulated financial data.
Thuma Express Zimbabwe (Pvt) Limited Harare, Zimbabwe	Operator and processor — logistics and mobility. Where you use ThumaPay alongside a Thuma delivery or ride, this entity processes the related trip, delivery and location data.

Unsure which entity holds your data? Write to privacy@thumapay.com and we will route it to the correct controller.

2. How we handle your data

ThumaPay Zimbabwe (Pvt) Limited is preparing to operate a regulated payment service. This notice covers how we handle data today, and how we will handle it once live.

Today, before launch

If you join the waitlist or contact us, we hold your email address and what you told us, so we can reply and let you know when the service opens. Nothing more.

Once the service launches

Identity and verification data required by law before an account can transact.
Transaction records: amounts, counterparties, timestamps and fees.
Device and session data used to detect fraud and secure your account.

Why

To provide the service, to meet anti-money-laundering and record-keeping duties under Zimbabwean financial services law, to investigate disputes, and to prevent fraud.

Your rights

Request a copy, ask us to correct it, or complain: hello@thumapay.com. Where a legal duty requires retention, we cannot delete on request.

Sharing

With regulators and law enforcement where legally required, and with providers processing it on our instructions under contract. We do not sell personal data.

5. Cookies and tracking

See our Cookie Policy for what we set and how to change your choice.

6. Permissions and data collected by our mobile app

This section covers data the ThumaPay app collects beyond what a website visitor provides. Each permission is optional at the operating-system level: you may decline it, and we explain what stops working if you do. We ask at the point a permission is first needed, never in bulk on first launch.

6.1 Location

Permission	Why we ask, and what happens if you decline
Precise location (foreground)	Used to find nearby Thuma Hub cash-in and cash-out points, to show agents near you, and as a fraud signal when a transaction looks unusual for your normal pattern. If you decline, you can still transact and can search for Hubs by name or area.
Precise location in the background	The ThumaPay app does not request background location. If you also use a Thuma driver app, background location is requested there, only while you are on duty, and is described in that app’s disclosure.
Approximate location	Used to show the correct currency, available services and nearest city when precise location is unavailable or declined.

6.2 Camera

Used to scan identity documents during account verification, to scan QR codes when paying a merchant or transacting at a Thuma Hub, to photograph evidence for a ThumaShield claim, and to set a profile photo. Images upload only when you take an action that submits them. We never access the camera in the background.

6.3 Microphone

Used only if you record a voice note to support instead of typing, or for in-app calling where enabled. Recordings transmit only when you choose to send them. We do not record ambient audio and do not access the microphone in the background or while the app is closed.

6.4 Contacts

Used only when you choose to send money to someone in your address book, so you do not have to type their number. The picker reads contacts on the device; we upload only the single contact you select for that transfer. We do not upload, store or index your address book.

6.5 Biometrics (Face ID, Touch ID, fingerprint)

Offered as an optional way to unlock the app and authorise payments instead of entering your PIN. Matching happens entirely in your device’s secure hardware. We never receive, transmit or store your fingerprint, face map or any biometric template. The app is told only whether the device authenticated you.

6.6 Notifications

Used to confirm payments and payouts, flag security events on your account, and alert you to a ThumaCredit repayment falling due. Marketing notifications are separate and off unless you opt in.

6.7 Photos and files

Accessed only when you attach an existing image, such as an identity document or a claim photo.

6.8 Device and diagnostic information

Device model, operating system version, app version, a resettable app instance identifier, crash logs and performance data — used for security, fraud prevention and fixing faults. Analytics collection follows your cookie and tracking choice.

6.9 What we do not collect

We do not collect call history, SMS messages, browsing history from other apps, health data, or the contents of other applications. We do not use the microphone or camera for advertising.

6.10 Withdrawing a permission

Withdraw any permission at any time in your device settings under the ThumaPay entry. This disables the related feature but does not close your account. To delete your account, see Delete your account.

7. Deleting your account

You can request deletion at any time, without installing the app and without logging in. The full procedure, what is erased, what we must retain by law and how long it takes is on a dedicated page: Delete your account.