Data Protection
Our commitments under the Zambia Data Protection Act, 2021 and GDPR-aligned best practice.
Encrypted in transit
All traffic between your device and Vula is encrypted with HTTPS / TLS 1.2+.
Row-level security
Database policies ensure you can only ever read or change your own data.
No data selling
We never sell your personal data to advertisers, brokers, or third parties.
Right to delete
You can delete your account at any time. Personal data is purged within 30 days.
Your rights
- Access — request a copy of all data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — ask us to delete your account and personal data.
- Restriction — pause processing in certain situations.
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdraw consent — at any time, without affecting prior processing.
Sensitive data
Information about your sexual orientation and gender identity is classified as sensitive personal data. We process it only with your explicit consent (given when you complete your profile) and use it solely to power matching. It is never shared with advertisers.
Data breach notification
In the unlikely event of a personal data breach affecting you, we will notify you and the Office of the Data Protection Commissioner of Zambia within 72 hours of becoming aware, in line with the Data Protection Act.
International transfers
Your data is hosted on servers operated by our cloud provider. Where data is transferred outside Zambia, we rely on adequacy decisions or standard contractual clauses to ensure the same level of protection.
Exercise your rights
To request a data export, deletion, or correction, email our Data Protection Officer:
privacy@vula.appWe respond within 30 days as required by the Zambia Data Protection Act.
See also our Privacy Policy.