Privacy Policy
Privacy Policy
Effective date: 7 October 2026
This Privacy Policy explains how TAP TAP EXPRESS collects, uses, shares and protects your personal data when you use our website taptapexpres.com, the TT Express mobile app, and our related services (together, the "Platform").
TAP TAP EXPRESS is operated by TAP TAP CHINA Ltd ("we", "us", "our"). We process personal data in line with Law N° 058/2021 of 13/10/2021 relating to the Protection of Personal Data and Privacy of the Republic of Rwanda, supervised by the National Cyber Security Authority (NCSA).
1. Who we are
Data controller: TAP TAP CHINA Ltd, registered in Rwanda (company code 147590677). Registered office: Ndera, Gasabo, Kigali, Rwanda. Head office: Gatenga, Kicukiro, Kigali, Rwanda.
TAP TAP CHINA Ltd also operates our sister marketplace TAP TAP MARKET (ttmarkett.com), which you can reach from the Market tab in our app.
Privacy contact: support@taptapexpres.com
2. What we collect
| Category | What it includes |
|---|---|
| Account details | Your name, phone number, email address and password (stored only as an irreversible hash). |
| Order and booking details | What you order, from which vendor, prices and fees, order notes and special instructions, delivery mode and schedule, and for Send a Package the sender's and recipient's names and phone numbers and a description of the package. |
| Addresses and location | Pickup and drop-off addresses, map pins, delivery zones, and saved addresses. If you allow it, the app reads your phone's location only while you are using it, to help you set a delivery address. We never track your location in the background. |
| Payment details | The payment method, amount, status and reference of each payment, and the mobile money number used to pay. We never receive or store your mobile money PIN or full card details. |
| Wallet details | Your wallet balance and transaction history. Your wallet PIN is stored only as an irreversible hash; we cannot see or recover it. |
| Messages and feedback | Support chat messages, and the star ratings and comments you give vendors and riders. |
| Device and technical data | Device type and name, app version, push-notification token, IP address, and technical logs (including error reports) we use to keep the Platform secure and working. |
Vendors and riders also give us business and identity verification documents (for example a National ID or TIN certificate). Riders' live location is collected while they are delivering, so that dispatchers and the customer can follow the delivery.
3. How we use it
- To create and run your account
- To take, prepare, deliver and track your orders and bookings, including showing you your rider's location while your order is on its way
- To take payments, wallet top-ups and refunds
- To screen orders automatically for fraud and abuse. An order that our system flags is held for a person on our team to review — it is never rejected by the system alone
- To send you messages about your orders, payments and account by push notification, email, in-app notification or WhatsApp
- To send occasional offers and announcements by push notification
- To answer your support requests and handle disputes
- To meet our legal, tax and accounting obligations
- To secure, maintain and improve the Platform
4. Legal basis
We process your data because it is needed to perform our contract with you (your account, orders and deliveries), to meet our legal obligations (tax, accounting, law enforcement requests), for our legitimate interests (fraud prevention, security, improving our service), or with your consent (for example, location access and push notifications, which you can switch off in your phone's settings at any time).
5. Who we share it with
- Vendors — your name, phone number and delivery details, only for the orders you place with them.
- Riders — pickup and drop-off locations, and the contact details needed to complete your delivery.
- TAP TAP MARKET — when you open the Market tab, we share your name, phone number and email address with TAP TAP MARKET to create or link your customer account there, and the details of the Market orders you place. TAP TAP MARKET is operated by the same company, TAP TAP CHINA Ltd; how it handles that data is described in its Privacy Policy. Product pictures in the Market tab load directly from ttmarkett.com.
- Payment partners — mobile money operators and payment gateways (such as MTN MoMo, Airtel Money, Paypack and AfriPay) to process your payments and refunds.
- Service providers who work on our behalf — our hosting provider (Hostinger), Google (Firebase Cloud Messaging for push notifications, and Google Maps Platform for maps and address search), our email delivery provider, and WhatsApp (Meta) where we send messages that way. They may only use your data to provide their service to us.
- Authorities — regulators, tax authorities, courts or police, where Rwandan law requires it.
We do not sell your personal data, and we do not share it with anyone for their own advertising.
6. Where your data is stored
Our servers are hosted by Hostinger in the European Union (Lithuania), and some of our service providers (such as Google) may process data in other countries. We only use providers that protect personal data, and we transfer personal data outside Rwanda only in the ways Law N° 058/2021 allows.
7. How we protect it
- All traffic between your device and our servers is encrypted (HTTPS).
- Passwords and wallet PINs are stored only as irreversible hashes.
- Verification documents are stored privately and can only be opened by authorised staff through short-lived secure links.
- Our staff can only see the data their role needs, and sensitive actions are logged.
8. How long we keep it
We keep your data while your account is open. When you delete your account (see section 9), we remove or anonymise your personal details straight away, except for the records below:
- Order and payment records (items, amounts, dates, status and payment references) — kept for as long as Rwandan tax and accounting law requires.
- Wallet transaction history — kept with the order and payment records.
- Support messages and ratings — kept to handle disputes, no longer linked to your name or contact details.
- Security, audit and fraud-prevention records — kept for as long as needed to protect the Platform and its users.
Push-notification tokens are removed when you sign out of the app or delete your account.
9. Deleting your account
You can delete your account at any time:
- In the app: Account → Delete account
- On the web: taptapexpres.com/account/delete
- By email: write to support@taptapexpres.com from the email address on your account
What we delete: your name, email address, phone number, password and wallet PIN; your saved addresses, cart, notifications and sign-ins; and the names, phone numbers, addresses, map pins and notes on your past orders.
What we keep: the records listed in section 8, without your name or contact details.
Before you can delete: orders still being prepared or delivered, refunds being processed and open issues must finish first. Unpaid orders that nobody has started on are cancelled for you.
Wallet balance: if your wallet still holds money, you give us a mobile money number and our Finance team refunds the balance to it. We keep that number with the refund record.
Your TAP TAP MARKET account is separate. To delete it as well, contact us at support@taptapexpres.com.
10. Your rights
Under Rwandan law you have the right to:
- know how your data is used
- get a copy of the data we hold about you, including in a portable format
- have inaccurate data corrected
- have your data deleted
- object to, or ask us to restrict, some processing
- not be subject to a decision based solely on automated processing that significantly affects you
- designate an heir to your personal data
- complain to the National Cyber Security Authority (NCSA)
To use any of these rights, email support@taptapexpres.com. We may ask you to confirm your identity first.
11. Children
The Platform is for people aged 18 and over. We do not knowingly collect data from children. If we learn that we have, we delete it.
12. Cookies
Our website uses a small number of cookies and similar technologies to keep you signed in and keep the site secure. See our Cookie Policy.
13. Changes to this policy
We may update this policy. When we do, the effective date above changes, and we tell you directly about important changes where we can.
14. Contact us
- Email: support@taptapexpres.com
- Phone / WhatsApp: the support numbers shown on the Support screen of the app and on our website
- Address: TAP TAP CHINA Ltd, Gatenga, Kicukiro, Kigali, Rwanda
You can also contact Rwanda's National Cyber Security Authority (NCSA), the supervisory authority for data protection.
