Privacy Policy
Last updated: October 7, 2026
This policy explains what personal data ZapNow uses, why, who helps us process it, and how long we keep it. It applies to the ZapNow app, our website and our support channels.
1. Who we are
ZapNow (trading name)
Sole proprietorship (eenmanszaak) under Dutch law
Owner: Nikita Giasagkasvili
Machinekamerplein 32-019
5617 AP Eindhoven
Netherlands
KvK: 94181057
Email: support@zapnowcharge.nl
ZapNow is the controller of your personal data.
2. What we collect
- Account: your phone number (used to sign in), the display name you set (if any), your app language, and your push notification token and on/off setting.
- Payment references: your Stripe customer ID, the ID of your saved payment method, its type, card brand, last 4 digits, and whether it was added with Apple Pay or Google Pay. You enter your full card details directly with Stripe. We never see or store them.
- Rentals: which station you rented from, when the powerbank was released and returned, the powerbank's ID, the amounts charged and the payment status. Every station has a fixed address, so your rental history also shows where and when you picked up and returned a powerbank.
- Inbox: the messages about your rentals shown in the app, such as return confirmations, amounts charged and reminders.
- Sign-in codes: when you request a code, we store your phone number with a scrambled (hashed) version of the code, its expiry time and the number of attempts.
- Security and event logs: records of actions such as sign-in attempts (with your phone number partly masked), rental starts, changes to your notification setting, and account deletion.
- Server logs: every request to our servers is logged with your IP address, the app or browser identifier (User-Agent), the address requested and the time.
- Error reports: when something goes wrong on our servers, an error report is sent to our error-monitoring service. Before it is sent, we remove request headers, cookies, request contents and IP addresses, plus anything that looks like a phone number, card number or code.
- Venue applications: if you apply on our website to host a ZapNow station: your name, email address, phone number (optional), venue name and address, and your message.
- Support emails: whatever you send us when you contact support.
3. What stays on your device
- Location: if you allow location access, the app uses it on your phone to center the map and show how far stations are. Your location is never sent to ZapNow and we don't store it.
- Profile photo: the photo you choose stays on your phone. It is never uploaded to us. It stays on your phone until you change it or uninstall the app.
- Sign-in and settings: your sign-in token (valid for up to 90 days) is kept in your phone's secure storage, along with app settings such as language, theme and notification preference.
The map uses the Google Maps SDK. To show the map and your position, Google may receive your device's location and map usage under its own privacy policy: https://policies.google.com/privacy
The app contains no analytics, advertising or tracking tools. We don't use your data for analytics, advertising or profiling.
4. Why we use your data (legal basis)
- To provide the service (contract): creating your account, signing you in, renting and returning powerbanks, charging you, showing receipts, sending rental messages to your inbox and phone, and answering support questions. Handling a venue application is a step you ask us to take before a possible agreement.
- To meet our legal obligations: keeping rental and payment records for 7 years, as Dutch tax law requires.
- Our legitimate interests: keeping the service secure, preventing fraud and abuse (for example, limits on sign-in attempts and SMS messages), and finding and fixing errors through server logs and error reports. You can object to this; see section 8.
Location, photos and push notifications are optional. You control them with your phone's permissions, and push notifications can also be turned off in the app's settings.
We do not sell your data.
5. Who processes your data for us
| Provider | Purpose | Region |
|---|
| Supabase |
Database: stores the account, payment-reference, rental, inbox, sign-in code and event data described above |
EU (Paris) |
| Railway |
Hosting: runs our servers; all app and website traffic passes through it, and it keeps our server logs |
EU (Netherlands) |
| Stripe |
Payments: receives your phone number, your card or wallet details and your charges. If you pay with Apple Pay or Google Pay, Apple or Google also process the payment under their own terms. |
EU (Ireland) / United States |
| Twilio |
Sends your sign-in codes by SMS; receives your phone number |
United States / Global |
| Expo |
Delivers push notifications through Apple (iPhone) and Google (Android); receives your push token and the notification text |
United States / Global |
| Google (Maps SDK) |
Shows the map in the app (see section 3) |
United States / Global |
| Sentry |
Error monitoring for our servers only (not the app), with personal data removed before sending |
EU |
| Google Workspace |
Hosts our support mailbox |
EU / United States |
Our station hardware partner receives only station and powerbank identifiers, never your personal data.
6. Transfers outside the EU
Providers marked "United States" or "Global" in the table above may process your data outside the European Union. For these transfers we rely on the EU-US Data Privacy Framework where the provider is certified under it, and on the European Commission's Standard Contractual Clauses otherwise.
7. How long we keep your data
- Account details: kept while you have an account. When you delete it, we remove your phone number, name, display name, language, push token and saved payment method, and we delete your customer record at Stripe.
- Rental and payment records: kept for 7 years, as Dutch tax law requires. After you delete your account, they are linked only to a deleted placeholder account that no longer holds your phone number or name.
- Sign-in codes: deleted automatically about 2 hours after you request them.
- Inbox: kept while you have an account, and deleted when you delete it.
- Security and event logs: unlinked from your account when you delete it; kept for up to 7 years.
- Venue applications: deleted automatically after 2 years.
- Server logs and error reports: kept for up to 90 days.
- Support emails: kept as long as needed to handle your question, and at most 2 years.
Stripe keeps its own records of past payments to meet its own legal obligations.
8. Your rights
You have the right to:
- Access the personal data we hold about you
- Correct data that is wrong
- Delete your data (see section 9)
- Object to processing based on our legitimate interests
- Portability: receive your data in a machine-readable format
- Complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl
To use these rights, email support@zapnowcharge.nl. We respond within one month.
9. How to delete your account
In the app, go to Profile → Settings → Delete Account. Or delete it on the web at /delete-account, where we confirm your phone number with an SMS code.
Deletion is blocked while a rental is still open or a payment is unpaid. Return the powerbank and settle the balance first. Section 7 explains what is removed and what we have to keep.
10. Cookies
The app and our public website don't use cookies. Our internal admin dashboard uses a login cookie for ZapNow staff only.
11. Age
ZapNow is for people aged 18 and over. We don't knowingly collect data from anyone younger.
12. Changes to this policy
When we make significant changes, we'll tell you in the app. The date at the top shows the latest version.
13. Contact
← Back to ZapNow
Support