Privacy Policy
Last updated: April 2026
Lupasphere Integrated Platforms Limited ("Lupasphere", "we", "us") operates the Lupa buyer app, the Seller Hub, and the TrackIt Pro rider app (collectively, the "Services"). This Privacy Policy explains what personal data we collect, why we collect it, and how we protect it.
1. Data We Collect
- Account data: Name, email address, phone number, and password hash when you register.
- Identity verification: National ID number and document image for KYC (sellers and riders only).
- Orders and payments: Products ordered, delivery address, MoMo transaction reference, and payment amounts.
- Location data: Delivery coordinates (buyers) and live GPS position (riders during active deliveries only).
- Device and usage: App version, device model, and event logs for bug diagnosis.
- Communications: Messages sent through the in-app chat feature.
2. How We Use Your Data
- Matching buyers, sellers, and riders to fulfil orders.
- Processing MoMo payments and maintaining payment records.
- Verifying seller and rider identities for platform safety.
- Sending order status notifications and delivery updates.
- Detecting and preventing fraud.
- Improving our products through aggregated analytics.
3. Data Sharing
We do not sell personal data. We share data only as follows:
- Riders: A buyer's delivery address is shared with the assigned rider to complete delivery.
- Sellers: A buyer's name and order details are shared with the relevant seller.
- Payment processors: Mobile money reference data is exchanged with MTN, Airtel, and Zamtel as needed.
- Legal obligations: Where required by Zambian law or court order.
4. Data Retention
Account data is retained while your account is active. Payment and order records are retained for seven (7) years for financial compliance. You may request deletion of non-financial data by emailing support@lupasphere.com.
5. Security
We store passwords as bcrypt hashes and transmit all data over TLS. Payment references are never stored in plain text. Access to production systems is restricted to authorised Lupasphere personnel only.
6. Your Rights
You have the right to access, correct, or request deletion of your personal data. Contact us at support@lupasphere.com.
7. Contact
Lupasphere Integrated Platforms Limited
Lusaka, Zambia
support@lupasphere.com
