Trust & safety
Zumis is built Africa-first and private by default. This page explains exactly what that means, what we monitor, and how to get help fast.
Every new Zumis account starts private. Nobody can find, view, message or call you unless you approve them as a friend or you deliberately switch on a public profile. Search never exposes your email, phone number, presence, last seen or friend list.
You decide, separately, who can do each of these.
Blocking is mutual and total: a blocked account cannot find you, message you, call you, invite you or see anything about you. Reports go to a moderation queue where every decision — warning, suspension or ban — is recorded with an auditable trail.
Sign-in, password reset, search, friend requests, messaging, uploads and call-token generation are all rate limited. Blocked requests are logged with hashed identifiers only, and sustained spikes raise an alert to our operations team. We monitor the pattern, not your content.
All traffic is encrypted in transit with TLS, and calls use encrypted WebRTC media. Message content is encrypted at rest on our infrastructure and access is restricted and audited. Full end-to-end encryption for chats is in progress; we will not claim it before it ships.
Zumis is not for children under 16. Accounts found to belong to under-age users are removed and their data deleted.
Report a security issue to security@zumis.life, or read /.well-known/security.txt. Please give us 90 days to fix an issue before disclosing it publicly. We do not take legal action against good-faith research.