Privacy Policy

Last updated: March 24, 2026

This privacy policy explains how ZapNow collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and Dutch privacy law (UAVG).

1. Data Controller

ZapNow
The Hague, Netherlands
Email: support@zapnow.nl

2. What Data We Collect

Personal data:

Phone number (for account creation and authentication)
Payment information (processed and stored securely by Stripe; we do not store card numbers)

Usage data:

Rental history (start time, end time, station, cost)
Station interactions (QR scans, station views)
App usage data (crash reports, performance metrics)

Device data:

Device type and operating system
Push notification token (if you enable notifications)
Approximate location (only when you grant location permission, used to show nearby stations)

3. Why We Collect Your Data (Legal Basis)

Phone number: Contract performance (to create your account and verify your identity)
Payment data: Contract performance (to process rental charges)
Rental history: Contract performance (to provide the rental service and receipts)
Location data: Consent (you can deny or revoke location permission at any time)
Push notifications: Consent (you can disable notifications in your phone settings)
Usage analytics: Legitimate interest (to improve our service)

4. How We Use Your Data

To provide the powerbank rental service
To process payments and send receipts
To send you verification codes via SMS
To send push notifications about your rentals (if enabled)
To show stations near your location (if permitted)
To provide customer support
To improve our service and fix bugs
To comply with legal obligations

5. Third-Party Services

We share data with these services, all of which are GDPR-compliant:

Stripe (payment processing) — receives your payment details. Privacy policy
Twilio (SMS delivery) — receives your phone number to send verification codes. Privacy policy
Supabase (database hosting) — stores your account and rental data on EU servers. Privacy policy
Expo (push notifications) — receives your device push token. Privacy policy

We do NOT sell your data to any third party.

6. Data Storage & Security

Your data is stored on servers in the European Union
We use encryption in transit (HTTPS/TLS) and at rest
Payment data is handled entirely by Stripe (PCI DSS compliant)
We do not store your credit card numbers
Access to personal data is restricted to authorized personnel only

7. Data Retention

Account data: retained while your account is active, deleted within 30 days of account deletion
Rental history: retained for 7 years (Dutch tax/accounting requirements)
SMS logs: deleted after 30 days
Location data: not stored; only used in real-time to show nearby stations

8. Your Rights (GDPR)

Under the GDPR, you have the right to:

Access: Request a copy of all personal data we hold about you
Rectification: Correct inaccurate personal data
Erasure: Request deletion of your personal data ("right to be forgotten")
Restriction: Request restriction of processing
Portability: Receive your data in a machine-readable format
Objection: Object to processing based on legitimate interest
Withdraw consent: Revoke consent for location or notifications at any time

To exercise any of these rights, contact us at support@zapnow.nl. We will respond within 30 days.

9. Cookies

The ZapNow mobile app does not use cookies. Our admin dashboard uses a session cookie for authentication purposes only.

10. Children's Privacy

ZapNow is not intended for children under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via the app. The "last updated" date at the top indicates the most recent revision.

12. Contact & Complaints

For privacy questions or to exercise your rights:

Email: support@zapnow.nl

If you believe we have not handled your data correctly, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):
Website: https://autoriteitpersoonsgegevens.nl

← Back to app