Limba is a marketplace and parcel delivery platform that connects shoppers, travelers, and local businesses. We operate the Limba mobile application (available on Android and iOS) and the website at trylimba.com.
For the purposes of applicable data protection law, Limba is the data controller responsible for your personal information. Our contact details are in Section 14.
We collect information in three ways: information you give us directly, information generated by your use of our services, and information from third parties.
| Category | Examples | When collected |
|---|---|---|
| Account details | Full name, email address, phone number, country | Registration |
| Password | Stored as a bcrypt hash, we never store your password in plain text | Registration |
| Profile | Profile photo | Optional, any time |
| Identity (KYC) | Government issued ID scan, facial selfie | KYC verification (required for withdrawals) |
| Financial | Mobile money phone number and operator; card details are handled entirely by Fincra and never stored by Limba | Deposits and withdrawals |
| Communications | Messages sent via in app chat | When you message another user |
| Support | Content of support requests, dispute descriptions | When you contact us |
| Purpose | Legal basis | Data used |
|---|---|---|
| Creating and managing your account | Contract performance | Name, email, phone, password |
| Processing transactions and operating your wallet | Contract performance | Transaction history, payment details |
| Verifying your identity (KYC) | Legal obligation & contract | ID document, selfie |
| Fraud detection and security | Legitimate interest | Device info, IP, usage patterns |
| Sending transactional notifications | Contract performance | Email, push token |
| Customer support and dispute resolution | Contract performance & legitimate interest | Account info, communications |
| Improving our services | Legitimate interest | Anonymised usage data, crash reports |
| Legal compliance | Legal obligation | All data as required |
| Marketing communications | Consent | Email, only if you opt in |
We do not sell your personal data to third parties. We do not use your data to train AI or machine learning models.
All payment transactions on Limba, including wallet top ups via mobile money or card, and withdrawals to mobile money, are processed by Fincra, our licensed payment service provider. When you make a payment:
Limba stores only the outcome of transactions (amounts, timestamps, status) and Fincra's internal reference identifiers, never raw card data.
To comply with financial regulations and protect our users against fraud, we require identity verification ("Know Your Customer" or KYC) before enabling wallet withdrawals. This involves:
KYC documents are stored securely and are accessible only to authorised Limba staff for the purpose of verification. They are not shared with third parties except where required by law. Documents are retained for a minimum of five years after account closure to satisfy regulatory requirements.
The Limba app may request access to your device's location for the following purposes:
Location access is always optional and must be explicitly granted by you through your device's permission system. You can revoke location access at any time through your device settings. The Limba website uses only IP based approximate location and does not access your device's GPS.
We do not sell, share, or use location data for advertising purposes.
We use Firebase Cloud Messaging (a Google service) to deliver push notifications to your device. These notifications include payment confirmations, order status updates, new messages, and delivery alerts. You can disable push notifications at any time in your device settings or within the Limba app under Settings → Notifications.
We send transactional emails (e.g. OTP codes, payment receipts, security alerts) to the email address you registered with. These are essential to the service and cannot be opted out of while your account is active.
We only send promotional or marketing emails if you have explicitly opted in. You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any such email.
Limba offers in app video and audio calling between users. Calls are facilitated using WebRTC technology. Audio and video streams are transmitted peer to peer where possible; metadata (call initiation, duration) is processed by our servers. Calls are not recorded or stored by Limba.
Your camera and microphone are only accessed during active calls and only with your explicit permission.
We do not sell your personal data. We share your information only in the following circumstances:
When you participate in a transaction (e.g. as a shopper or traveler), your name and profile photo are visible to the other party. Your contact details are not shared unless you choose to share them in chat.
We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the safety of any person, prevent fraud, or enforce our Terms of Service.
If Limba is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
We implement industry standard technical and organisational measures to protect your personal data, including:
No method of transmission over the internet is 100% secure. While we take your security seriously, we cannot guarantee absolute security and encourage you to use a strong, unique password and keep your device updated.
| Data type | Retention period |
|---|---|
| Account information | For the lifetime of your account, plus 30 days after deletion request |
| Transaction records | 7 years (financial regulatory requirement) |
| KYC documents | 5 years after account closure (regulatory requirement) |
| Chat messages | For the lifetime of the conversation, deleted upon account deletion request |
| Server logs | 90 days |
| Crash & analytics data | 90 days (anonymised after 30 days) |
| Deactivated session tokens | Immediately purged |
When you request account deletion, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it (such as transaction records).
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at privacy@trylimba.com. We will respond within 30 days. You can also delete your account directly from the Limba app under Settings → Account → Delete Account.
Limba is not directed at individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected personal data from a minor without verifiable parental consent, we will delete that information promptly.
If you believe a minor has provided us with personal data, please contact us at privacy@trylimba.com.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:
Continued use of the Limba app or website after changes take effect constitutes your acceptance of the updated policy.
For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:
We aim to respond to all privacy related requests within 30 days.
