At a glance
01Who we are and what this covers
Gooshen is Zimbabwe's app for rides, food and parcel delivery. It is owned and operated by DropIT Solutions in Harare and was formerly known as Keripax Mall. Information you added to the earlier Keripax shop and service directories, which are paused, stays covered by this policy and the same account.
This policy explains what personal information we collect when you use the Gooshen mobile app, the web app, our websites and our support channels (together, the "Platform"), why we collect it, who we share it with and the choices you have. It applies to riders and customers, to drivers and runners, and to restaurant and shop partners.
If you drive or deliver with Gooshen, or run a partner business, the partner terms you accept during onboarding add to this policy but never reduce your rights under it.
02Information we collect
We collect only what we need to run the service safely. Most of it comes directly from you.
From everyone
- Account details: name, email address, mobile number, profile photo and the language you prefer.
- Trip and order details: pickup and drop-off points, delivery addresses, what you ordered, special instructions, fares, tips, promo codes and receipts.
- Payments: which payment method you used and the transaction reference. Card payments and EcoCash or OneMoney transactions are processed by our licensed payment partners. We never see or store your full card number or your mobile-money PIN.
- Messages and calls: chats and masked calls between you and a driver, runner or restaurant inside the app, and your conversations with support.
- Ratings and reports: the ratings you give and receive, and any safety or quality report you submit.
- Device and usage data: device model, operating system, app version, crash logs, IP address and how you move through the app.
From drivers, runners and partners
- Identity and eligibility: national ID or passport, driver's licence, vehicle registration and insurance, proof of address and a selfie used to confirm you are the person on the documents.
- Business records: business name, registration documents, menus, storefront photos and the verified email addresses and phone numbers you add for your business.
- Payout details: the mobile-money number or bank account you choose to be paid into.
- Work activity: when you are online, trips and deliveries you accept or decline, earnings, payouts and subscription or service-fee records.
03Location data
Location is what makes a ride arrive and a parcel reach the right door, so we are specific about how we use it.
- Customers and riders: with your permission we use your device's precise location to set pickup points, show nearby restaurants and track an active trip or delivery. Tracking stops when the trip ends.
- Drivers and runners: while you are online we collect your precise location continuously, including in the background, so we can match you to nearby requests, show customers where you are and calculate fares and distances. When you go offline, collection stops.
- Safety and support: trip routes are kept with the trip record so we can investigate incidents, resolve fare disputes and respond to lawful requests.
You can switch location permission off in your phone settings at any time. Rides and deliveries will not work without it, but you can still browse and order food with a typed address.
04How we use your information
- To provide the service: match you with drivers, runners and restaurants, calculate upfront fares, process payments, issue receipts and keep you updated in real time.
- To keep people safe: verify identities, operate pickup PINs and delivery handover codes, detect fraud and account sharing, review reports and act on them.
- To support you: answer your questions, resolve disputes and process refunds.
- To run the business: pay drivers and partners, calculate fees, keep financial records and meet tax and legal obligations.
- To improve Gooshen: understand which features are used, fix crashes, plan coverage areas and test improvements. Where possible we do this with aggregated or de-identified data.
- To communicate: send essential messages about your account, trips and orders, and, if you have not opted out, occasional offers and product news.
06How long we keep it
- Account data: for as long as your account is open, then deleted within 7 days of a deletion request (see Delete your account).
- Trip, order and payment records: kept for the period required by Zimbabwean tax and financial-record law, then deleted or anonymised.
- Verification documents: kept while you are an active driver, runner or partner and deleted after your account is closed, except where we must keep a record of a fraud or safety decision.
- Messages and chat: kept with the related trip or order, then removed on the same schedule.
- Crash logs and diagnostics: automatically deleted after 90 days.
07How we protect it
Data is encrypted in transit and at rest. Access inside the team is limited to the people who need it for their role, is logged and is reviewed. Verification documents are stored in private storage that is never publicly reachable and is opened only through short-lived, signed links. Payment details are handled by PCI-compliant partners rather than by us.
No system is perfectly secure. If a breach ever affects your data we will tell you and the relevant authority without undue delay.
08Your rights and choices
- Access and correction: see and update most of your details in Profile inside the app, or ask us for a copy of the data we hold.
- Deletion: request deletion from Profile, or follow the steps on Delete your account. We complete it within 7 days.
- Marketing: opt out of promotional messages in Settings or from any marketing email. Essential messages about trips, orders and your account will still be sent.
- Permissions: location, camera, photos and notifications can each be switched off in your phone settings. Some features need them to work.
- Portability: ask us and we will provide your data in a common, machine-readable format.
- Complaints: if you are unhappy with how we handle your data you can contact us, and you have the right to raise it with the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), the data protection authority.
Email privacy@keripax.tech for any request. We may ask you to confirm it from the email address or phone number on your account.
09Cookies and analytics
Our websites use a small number of cookies: essential ones that make pages work, analytics (Google Analytics) that tell us which pages are read, and advertising measurement that tells us whether a campaign led to an app install. Analytics data is aggregated and not used to identify you.
The app uses Firebase Analytics and Crashlytics so we can see how features are used and fix problems. You can limit analytics in Settings.
10Children
Gooshen is for adults. You must be 18 or older to hold an account, request a ride, place an order or drive and deliver with us. We do not knowingly collect information from anyone under 18. If you believe a minor has an account, email privacy@keripax.tech and we will remove it.
11Changes to this policy
When we change how we handle your information we will update this page and the date at the top. For significant changes we will also tell you in the app or by email before they take effect.
12Contact
- Privacy requests: privacy@keripax.tech
- Account deletion: delete@keripax.tech
- Safety and abuse reports: report@keripax.tech
- General support: support@keripax.tech
- Post: DropIT Solutions, Harare, Zimbabwe
Questions about this page?
Write to us and a person replies, usually within one business day.