ZanGo Privacy Policy

Effective Date: September 17, 2026

Last Updated: October 9, 2026

Policy Version: 2.3

1. About ZanGo

ZanGo is a technology platform operated by Tetaya Software Company Limited that connects tourists with local service providers, including guides and drivers, and provides related travel, communication, safety, booking, payment, and support features.

ZanGo may provide its services through websites, mobile applications, APIs, administrative systems, and related digital services.

For privacy and personal data matters, contact privacy@zango.tetaya.com .

2. Personal Data We Collect

Account and identity information

ZanGo may collect:

• name;
• phone number;
• email address, where provided;
• profile information, such as bio, languages and service details;
• account role;
• account status; and
• profile photograph.

The profile photograph is the picture shown on your public ZanGo profile. It is managed through ZanGo's identity provider and is separate from verification evidence.

Provider verification information

For guides and drivers, ZanGo may collect information required to verify identity, eligibility, safety, and trust. This may include:

• identification documents;
• passport or other identity documents;
• driver's licence;
• driver's badge or permit;
• road licence or other applicable operating documents;
• a personal verification photograph;
• verification status;
• verification decisions; and
• related administrative records.

Verification information is private evidence. Verification evidence is not used as the provider's public profile photograph and is not displayed to tourists or other users as a public avatar.

Booking, payment and travel information

ZanGo may process information about your searches, bookings, trips, itineraries, reviews, credits, payments, refunds, payouts, reports, and disputes.

Communications

ZanGo may process messages you exchange with other users through ZanGo, and communications with ZanGo support.

Technical and security information

ZanGo may process technical information required to operate and protect the service, such as session information, browser and device information, a hashed device identifier, log data, and security events.

3. How We Use Personal Data

ZanGo may process personal data for purposes including:

• creating and managing accounts;
• authenticating users;
• providing marketplace functionality;
• verifying guides and drivers;
• establishing provider eligibility and trust;
• facilitating bookings;
• processing payments and payouts;
• communicating with users;
• providing customer support;
• maintaining safety features;
• investigating incidents and disputes;
• detecting fraud, abuse, and security threats;
• enforcing platform rules;
• improving service functionality;
• maintaining technical and operational security;
• complying with legal obligations; and
• other purposes described at the time information is collected or otherwise permitted by applicable law.

Different processing activities may rely on different lawful bases under applicable data protection law, which may include consent, performance of a contract, compliance with a legal obligation, and other lawful bases. Where ZanGo relies on consent, that consent is requested separately for the relevant activity.

4. Provider Verification and Verification Evidence

Guides and drivers who apply to become verified providers may be required to submit personal and verification information. Verifying providers is a core safety function of the ZanGo marketplace.

ZanGo uses verification information to support purposes such as:

• identity verification;
• provider eligibility;
• safety;
• fraud prevention;
• trust and marketplace integrity; and
• compliance with applicable requirements.

Before submitting verification information, ZanGo will provide information about the relevant data being collected, the purpose of collection, applicable access restrictions, retention, and relevant data protection rights.

Where ZanGo relies on consent as the applicable legal basis for a verification activity, the provider will be asked to provide explicit consent before submitting the relevant information. ZanGo may record the applicable consent, including the policy version and the time at which consent was provided.

Providing consent does not guarantee provider approval.

Consent and verification status are separate records. Consent indicates a permission; verification status indicates the outcome of a review.

Verification evidence is stored privately and is not used as a public profile photograph.

5. Public and Private Information

Some information is intentionally displayed to other ZanGo users as part of marketplace functionality. Depending on the user's role and the applicable feature, public information may include:

• display name;
• public profile information;
• public profile photograph;
• provider role;
• verification status;
• service-related information; and
• ratings and reviews.

Verification documents and verification evidence are private information. Private verification evidence is not displayed to tourists or other providers, and a provider's private verification photograph is not used as the provider's public profile photograph.

6. Location Information

ZanGo may process different types of location information for different purposes.

General location

ZanGo may derive approximate or general regional information from technical information such as IP address, in order to provide relevant regional functionality.

Search location

Location information may be used when a user searches for nearby guides, drivers, hotels, restaurants, or other services. ZanGo does not collect precise device location merely because you have an account, and our web pages do not request device location permission.

Location you choose to share

Where a feature allows you to provide or share a location, for example a meeting point or a location shared with another user during a trip, that information is processed to provide the feature and is subject to the retention rules in this Policy. You control whether to share it.

7. Communications and Chat

ZanGo may store chat messages and related communication information to:

• enable communication between users;
• support booking and trip coordination;
• enforce safety rules;
• investigate reports and disputes;
• detect or prevent abuse and fraud; and
• provide customer support where necessary.

Chat retention depends on the status and purpose of the conversation and is described in the Data Retention section of this Policy. A conversation started as an enquiry before a booking is confirmed expires automatically if it is not converted into an active booking conversation.

8. Bookings and Payments

Booking payments are processed by ZanGo's designated payment provider. Depending on the method used, the payment is completed on the payment provider's own checkout page, or through an authorisation you complete on your own device, such as a mobile money prompt. The payment credentials stay with the payment provider: ZanGo does not receive your full card number or your mobile money PIN.

Where an escrow process applies, payment may be held within the designated ZanGo payment flow until the applicable release, cancellation, refund, or dispute process is completed. A provider is not considered to have received the booking payment merely because the tourist has deposited funds into the escrow process.

ZanGo may process information necessary to:

• initiate and confirm payments;
• associate payments with bookings;
• process refunds;
• process provider payouts;
• detect payment failures or fraud;
• maintain transaction records; and
• comply with applicable legal, financial, accounting, and security requirements.

The record ZanGo keeps of a payment links it to the booking and holds the amount, the currency, the payment method, the payment provider's reference for the transaction, and the outcome, including any refund or payout result. Where a payment is charged in local currency, the record also holds the exchange rate applied and the amount that was authorised in local currency.

A provider is paid out to a payout destination the provider registers with ZanGo - a mobile money number or a bank account, recorded with the account holder's name and confirmed by the provider before it can receive a payout. Account numbers are stored encrypted; only the last four digits are kept in readable form, for display.

Refunds are returned through the payment provider to the original payment method.

9. Service Providers and Data Processors

ZanGo may use carefully selected technology and service providers to operate its services. Depending on the feature, these providers may process information on behalf of ZanGo, including authentication information, infrastructure data, payment information, communications, or technical information.

ZanGo limits access to information to what is reasonably necessary for the relevant service and applies appropriate contractual, technical, and organizational safeguards where required.

The categories of providers ZanGo uses include:

• Identity and authentication: ZanGo's identity provider, which manages account sign-in and the public profile photograph.
• Cloud infrastructure and hosting: Cloudflare, which provides the application platform used by ZanGo, including its databases, private file storage, key-value storage, and event infrastructure.
• Payments: ZanGo's payment provider, which processes tourist payments and provider payouts.
• Email delivery: ZanGo's transactional email provider, used to send account, verification and booking notifications.
• Push notifications: browser and mobile push services used to deliver notifications you have enabled.
• AI features: third-party AI model providers used for the AI travel planning and assistant features. Information you submit in those features is processed to generate the response.
• Maps and measurement: mapping and map-tile providers used to display location-based features, and web analytics tooling (including Google Tag Manager) used to understand how the service is used.

ZanGo will update this Policy if it changes its service providers in a way that materially affects the processing of personal data.

10. International Data Transfers

Some ZanGo service providers may process or store personal data outside Tanzania. Where personal data is transferred across borders, ZanGo will apply the requirements and safeguards required by applicable data protection law.

The location of processing may vary depending on the infrastructure and service providers used by ZanGo.

11. Security

ZanGo uses technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, misuse, or destruction. These measures may include:

• authenticated access controls;
• role-based authorization;
• private storage for verification evidence;
• encrypted network communications;
• restricted administrative access;
• audit logging;
• security monitoring;
• secure credential management;
• server-side authorization;
• retention and deletion controls; and
• other appropriate technical and organizational safeguards.

No internet-based service can guarantee absolute security. ZanGo periodically reviews and improves its security controls as the service develops, and you are responsible for keeping your account credentials safe.

12. Access to Verification Evidence

Verification evidence is restricted information.

Access may be provided only to authorized ZanGo personnel or systems that require access for legitimate verification, safety, security, administrative, legal, or support purposes.

Other ZanGo users, including tourists and other providers, cannot access private verification documents merely because a provider has been verified.

ZanGo may record security events, including denied access attempts, to help protect verification information.

13. Data Retention

ZanGo retains personal data only for as long as necessary for the purposes described in this Policy, or as required by applicable law. Retention is applied by ZanGo's lifecycle systems rather than left to chance.

The following retention periods are currently applied automatically by ZanGo:

Where a period above applies to history you can browse, ZanGo shows the most recent 12 months by default and keeps older records available while their retention period runs. Hiding older history from the default view is not deletion: the records are still retained, and remain available for the purposes described in this Policy.

Other categories of personal data, such as booking and trip records, payment and credit records, reviews, reports and disputes, and administrative logs, are retained for the period necessary for the relevant purpose, for the resolution of disputes, and to meet legal, financial, accounting, and security requirements. Where a specific period is required by law, that period applies.

When personal data is no longer required, it is deleted or de-identified through ZanGo's lifecycle processes.

14. Account Deletion

You may request deletion of your ZanGo account.

When an account is deleted, ZanGo will initiate the applicable deletion process.

Some information may be retained after account deletion where retention is necessary for:

• legal obligations;
• fraud and security investigations;
• dispute resolution;
• financial or accounting records;
• enforcement of platform rules; or
• another lawful purpose.

Where information is retained, access and use will remain restricted to the applicable purpose. Certain technical security identifiers may also remain after account deletion where necessary for security and abuse-prevention purposes.

15. Device and Security Information

ZanGo may create a hashed or otherwise protected device identifier to support account security and abuse prevention. This information may be used to:

• detect excessive account creation;
• prevent attempts to bypass account restrictions;
• investigate suspicious activity; and
• protect the platform and its users.

The device identifier is not intended to function as a public profile identifier. Certain security information may be retained after account deletion where necessary for security and abuse prevention.

16. Cookies and Local Storage

ZanGo may use cookies, local storage, session storage, service workers, or similar browser technologies necessary for authentication, security, preferences, functionality, and service operation.

ZanGo also uses web measurement tooling, including Google Tag Manager, to understand how the service is used. If ZanGo introduces non-essential tracking technologies that require additional notice or consent, ZanGo will provide the applicable notice and controls.

17. Your Data Protection Rights

Subject to applicable law and any lawful limitations, you may have the right to:

• be informed about processing of your personal data;
• access your personal data;
• request correction of inaccurate information;
• request deletion or erasure;
• request restriction of certain processing;
• object to certain processing;
• withdraw consent where processing relies on consent;
• request portability where applicable;
• exercise applicable rights relating to automated decision-making;
• lodge a complaint with the relevant data protection authority; and
• exercise other rights provided by applicable law.

To make a privacy request, contact privacy@zango.tetaya.com . You can also delete your account yourself from Settings or through zango.tetaya.com/account-deletion .

18. Withdrawal of Consent

Where ZanGo processes personal data on the basis of consent, you may withdraw that consent through the method provided for the relevant processing activity or by contacting ZanGo.

Withdrawal of consent does not affect processing that occurred before withdrawal, and does not require ZanGo to delete information immediately where ZanGo has another lawful basis or a legal obligation to retain or process it.

Where withdrawal affects a service or a provider verification process, ZanGo will explain the relevant consequences where reasonably possible.

19. Marketplace Ranking and Recommendations

ZanGo may use information such as relevance, availability, service quality, reliability, completed trips, reviews, response behaviour, penalties, and other marketplace signals when determining how providers or services are displayed. These systems are intended to support marketplace discovery and distribution.

Ranking or visibility does not itself constitute a guarantee of provider quality or performance. ZanGo may modify its ranking and recommendation mechanisms as the marketplace develops.

20. Safety, Reports and Disputes

ZanGo may process information contained in safety reports, complaints, incident reports, disputes, and related communications to:

• investigate reported incidents;
• protect users;
• enforce platform rules;
• prevent fraud or abuse;
• resolve disputes; and
• comply with legal obligations.

21. Children

ZanGo is not intended for persons under 18. We do not knowingly provide accounts or marketplace services to persons who do not meet applicable age requirements. If we learn that an account was created by a person who does not meet the applicable age requirement, ZanGo may take appropriate action, including account restriction or deletion.

22. Changes to This Privacy Policy

ZanGo may update this Privacy Policy when its services, technology, processing activities, or legal requirements change. When material changes are made, ZanGo will provide an appropriate notice and update the effective date and policy version.

Where a change requires renewed consent, ZanGo will request that consent before relying on the new consent for the relevant processing activity.

Previous versions are retained unchanged at version 2.2, version 2.1, version 2.0 and version 1.0.

23. Contact Us

For privacy questions, data protection requests, complaints, or other privacy matters:

Email: privacy@zango.tetaya.com

Location: Zanzibar, Tanzania

Please do not send passwords, payment credentials, or unnecessary sensitive information by email.