Effective date: 20 August 2026

1. Who we are

Uilo is an online taxi booking and food delivery platform operating in Samoa. This policy applies to everyone who uses Uilo, including riders, drivers, restaurant and merchant accounts, and couriers. It explains what we collect, how we use it, and how we protect it.

2. Information we collect

Riders

• Account information: your username, phone number and/or email, and a password
• Optional trusted contact: a name, phone number, and/or email you can add for safety alerts
• Saved places: addresses you save for quick booking, like "Home" or "Work"
• Location data: your GPS position when you request a ride
• Trip history: pickup and drop-off locations, fare, and the date and time of completed trips
• Ratings and feedback: driver and merchant ratings and any comments you submit

Drivers

• Account information: your name, phone, email, and password
• Optional ID photo: shown to riders as a trust signal on their in-app driver ID card
• Optional trusted contact: same as riders, for safety alerts
• Live location: your GPS is broadcast while you're marked available, so riders can see nearby drivers
• Vehicle assignment: which fleet vehicle you're currently assigned to (vehicles are a shared company asset, not personal data)
• Ratings: ratings riders submit after a completed trip

Merchants

• Business information: your business name, contact phone/email, and password
• Storefront and menu photos
• Business location: used to calculate delivery distance and fees
• Orders received: items ordered, delivery address, and order total
• Customer reviews: ratings and comments riders leave about your business

Couriers

• Account information: your name, phone, email, and password
• Live location: your GPS is broadcast while you're delivering an order
• Delivery-proof photos: taken when you mark an order delivered

3. Signing in with Google

Riders can sign in or create an account using Google. When you do, Google shares your verified email address, name, and Google account ID with us, and nothing more. If that email already matches an existing Uilo account, we link the two automatically instead of creating a duplicate. This option is currently available to riders only.

4. How we use your information

• Match riders with available drivers, and connect merchants with couriers or drivers for delivery
• Show your live position during an active trip or delivery
• Calculate fares and delivery fees based on route distance
• Maintain trip and order history for every account type
• Send account emails, like password resets, welcome messages, invoices, and safety alerts
• Show ratings and reviews back to drivers and merchants
• Investigate account flags and platform-safety issues
• Improve app reliability and performance

5. Location data

Location access is required for the core function of the app. Here's how your GPS position is handled:

• It's shared with your matched driver or courier only during an active booking or delivery, and vice versa
• It's used to display your live position on the in-app map
• It isn't stored permanently while live. Only the pickup and drop-off addresses of completed trips and orders are kept in your history

Drivers' and couriers' GPS is broadcast to the server only while they're marked available or actively delivering, and it stops the moment they go offline.

6. Trusted contact & safety alerts

If you add a trusted contact, they'll receive an SMS and/or email when you start a trip. It includes your name, your trip's destination, and a link to follow your live position until the trip ends. This is the only case where we share a rider's information with someone who isn't a Uilo account holder.

7. Data sharing & third-party services

We don't sell your personal information. We only share data as needed to run the service, including with these service providers:

• Cloudinary: stores photos uploaded through the app, including driver ID photos, merchant storefront and menu photos, and delivery-proof photos
• Resend: sends our transactional email, including password resets, welcome emails, invoices, and safety alerts
• Twilio: sends the safety-alert SMS described in section 6, to a rider's trusted contact only
• Mapbox and OpenStreetMap: process trip coordinates to calculate routes, distances, and fares
• Sentry: receives technical error and performance data to help us fix bugs. It isn't used to profile users
• Google: verifies Google sign-in (see section 3), and Google Fonts loads the standard web fonts used in the app

We may also disclose information if required by law or to protect the safety of our users.

8. Data retention

We keep your account data for as long as your account is active. Trip history, order history, and delivery records are kept for operational reasons and to help resolve disputes. You can ask us to delete your account and its data at any time by contacting us.

9. Data security

We hash passwords and never store them in plain text, and all data is sent over HTTPS. We follow standard industry practices to protect your information, though no system is completely risk-free.

10. Children's privacy

Uilo is not directed at children under 13. We do not knowingly collect personal information from children.

11. Your rights

You can ask to see, correct, or delete your personal data at any time by contacting us. You can also update most of your account details yourself from within the app.

12. Contact

For any privacy questions or data requests, contact us at: teletamati22@gmail.com