Effective date: 26 October 2026

1. Who I am

Uilo is a taxi booking and food delivery app in Samoa. I'm Tele, the independent developer who builds and runs it. Wherever this policy says "I" or "me", it means me, Tele. It applies to everyone who uses Uilo, including riders, drivers, restaurant and merchant accounts, couriers, and affiliates. It explains what I collect, how I use it, who else sees it, and how I protect it.

2. Information I collect

Riders

• Account information: your username, your name, your phone number and/or email, and a password
• Optional trusted contact: a name, phone number, and/or email you can add for safety alerts
• Saved places: places you save for quick booking, like "Home" or "Work"
• Location: your GPS position when you set a pickup point or choose "Use my current location", for example when saving a place or setting a delivery address
• Trip and order history: pickup and drop-off locations, delivery addresses, fares and order totals, any promo code you used and the discount it gave, whether you asked a restaurant to get in touch about an order it missed, and the date and time of each trip or order
• Ratings, reviews and feedback: ratings and comments you leave for drivers and restaurants, the photo required with a 1 or 2 star restaurant review, and any feedback you send me through the app
• Activity in the app: which places and restaurants you view, and when you get a fare quote, directions, or book a ride from one. Also which Tripo ads were shown to you, and whether you watched, skipped, or tapped them. This is linked to your account
• Tripo game: your scores, how many games you've played, and any medals you've won
• Referrals: your referral code, and which riders signed up using it
• Email preference: whether you've unsubscribed from order update emails

Drivers

• Account information: your name, phone, email, password, and gender, recorded when your account is set up
• Optional ID photo: shown to riders as a trust signal on their in-app driver ID card
• Optional trusted contact: you can save one, but at the moment safety alerts are only sent for riders' trips (see section 6)
• Live location: your GPS position while you're marked available or on a job (see section 5)
• Trip routes: the GPS path of each trip you drive is saved with that trip, and used to work out the distance you actually drove
• Vehicle assignment: which fleet vehicle you're currently assigned to (vehicles are a shared company asset, not personal data)
• Activity and account records: when you go online or offline, when you accept, decline, start, or complete a job, and any flags, warnings, suspensions, or notes on your account
• Ratings and reviews: ratings and comments riders leave after a trip
• Push notifications: if you allow notifications, your device's push subscription, so I can alert you to new ride requests and nudges

Merchants

• Business information: your business name, contact phone/email, and password
• Storefront and menu photos
• Business location: used to calculate delivery distance and fees
• Orders received: items ordered, the rider's username, the delivery address, the order total, any promo code used, and whether it's paid by cash or card
• Customer reviews: ratings, comments, and any photos riders leave about your business
• Affiliates: the affiliates you add, their codes and the terms you set, the sales made with each code, and when you mark a payout as paid
• Activity and account records: changes to your menu, couriers, and orders, when you first open each day's pre-orders, and any warnings, suspensions, or notes on your account
• Email preference: whether you've unsubscribed from new-order emails

Couriers

• Account information: your name, phone, email, and password, set up by the merchant you deliver for
• Live location: your GPS position while you have deliveries to make (see section 5)
• Delivery-proof photos: taken when you mark an order delivered
• Account records: any warnings, suspensions, or notes on your account

Affiliates

• Account information: your name, phone and/or email, and password, set up by a restaurant that adds you as an affiliate
• Codes and earnings: your checkout code for each restaurant, the commission and rider offer each restaurant sets, the sales made with your codes (date, food total, and your commission), and whether each payout has been marked paid and confirmed by you

Ordering by message

Some restaurants let you order by messaging their Facebook or Instagram page, without a Uilo account. When you do, I receive:

• Your name and Messenger or Instagram ID, so the replies about your order reach you
• Your phone number, if you give it, so the restaurant can call you about the order
• Your order: the items, pickup time, any note, the total, and the order's status
• The messages about your order, which are read automatically to work out what you'd like to order

3. Signing in with Google

Riders can sign in or create an account using Google. When you do, Google shares your verified email address, name, and Google account ID with me, and nothing more. If that email already matches an existing Uilo account, I link the two automatically instead of creating a duplicate. This option is currently available to riders only.

4. How I use your information

• Match riders with available drivers, and connect merchants with couriers or drivers for delivery
• Show live positions during an active trip or delivery
• Calculate fares and delivery fees based on route distance, and work out distance driven for each trip
• Keep trip and order history for every account type
• Send account emails, like password resets, welcome messages, invoices, and safety alerts
• Send order emails: riders get one when a restaurant accepts their order and another when it's ready to collect or on its way, and restaurants get one for each new order. Each has an unsubscribe link (see section 12)
• Record the sales made with each affiliate's code, so the restaurant and the affiliate can see what's owed and paid
• Send drivers push notifications about ride requests and nudges
• Show ratings and reviews back to drivers and merchants
• Run the Tripo game, its leaderboard, and its medals, and unlock rewards from referrals
• Understand how places, restaurant storefronts, and Tripo ads are used, so I can see what's working and improve them
• Manage driver, merchant, and courier accounts, including investigating flags and safety issues and recording warnings or suspensions
• Find and fix bugs, and keep the app reliable and fast

5. Location data

Location access is needed for the core function of the app. Here's how GPS positions are handled for each kind of account:

• Riders: your GPS is used to set your pickup point and whenever you choose "Use my current location". Your matched driver sees your pickup point, not a live feed of where you are. During a trip or delivery, you can see your driver's or courier's live position
• Drivers: your GPS is sent to the server every few seconds while you're marked available or on a job. Riders can see nearby available drivers on the map and follow their own driver's live position during a trip, and I can see online drivers on a live map. Sending stops when you go offline, but your last known position stays saved on your account until it's next updated
• Couriers: your GPS is sent to the server every few seconds while you have deliveries to make, so the rider can follow their order. Your last known position stays saved on your account until it's next updated

What's kept long-term: each trip keeps its pickup and drop-off points and the GPS path the driver took. Each order keeps its delivery address. Riders' live positions aren't stored.

6. Trusted contact & safety alerts

If you're a rider, add a trusted contact, and turn on Safety mode for a booking, your contact will get an SMS and/or email when that trip starts. It includes your name, your trip's destination, and a link to follow the trip live until it ends. No alert is sent for a booking where Safety mode is off. Drivers can save a trusted contact too, but alerts aren't sent for drivers' trips yet.

7. Who else sees your information

I don't sell your personal information. It's shared only as needed to run Uilo.

Other Uilo users

• Your driver sees your username or first name, your pickup point, and your destination
• The courier or driver delivering your order sees your name, phone number, and delivery address, so they can reach you. The restaurant sees your username, what you ordered, your delivery address, and any promo code you used
• If a restaurant doesn't accept your order in time and you ask it to get in touch, that restaurant sees your first name and the phone number or email you chose, for that order only. It doesn't see your contact details otherwise
• If you order by message, the restaurant sees your name, your phone number if you gave it, and your order
• Affiliates see the sales made with their own code: the date, the food total, and their commission. They don't see who placed the order
• Riders see their driver's first name, ID photo, vehicle, and rating
• Other riders see your name and score if you make the Tripo leaderboard, and other players in a Tripo multiplayer room see your username and in-game position
• Your trusted contact gets the safety alert described in section 6. This is the only case where I share a rider's information with someone who isn't a Uilo user

Service providers

• Cloudinary: stores photos uploaded through the app, including driver ID photos, merchant storefront and menu photos, delivery-proof photos, and the photos riders attach to restaurant reviews
• Resend: sends Uilo's emails, including password resets, welcome emails, invoices, safety alerts, and order emails. For order emails it receives your name and email address, the restaurant's name, and the items and total of that order
• Meta (Facebook and Instagram) and Chatfuel: carry the messages when you order through a restaurant's page, and see what you send there. Meta's and Chatfuel's own privacy policies apply to those messages
• Twilio: sends the safety-alert SMS described in section 6, to a rider's trusted contact only
• Mapbox, OSRM, and OpenStreetMap (Nominatim): process trip coordinates to calculate routes, distances, and fares, and turn map positions into place names
• CARTO and Esri: provide the street and satellite map images. Like any website that loads their maps, they receive your IP address and the area of the map you're viewing
• Push services (Google, Apple, or Mozilla, depending on the driver's device and browser): deliver push notifications to drivers who've allowed them
• Sentry: receives technical error and performance data to help me fix bugs. It isn't used to profile users
• Google: verifies Google sign-in (see section 3), and Google Fonts loads the standard web fonts used in the app

I may also disclose information if required by law or to protect the safety of Uilo's users.

8. On your device

The app saves your sign-in and your preferences, such as theme, language, sound, and logo style, on your own device so they're remembered next time. I don't use advertising or third-party tracking cookies.

9. Data retention

I keep your account data for as long as your account is active. Trip history (including trip routes), order history, delivery records, ratings, and account records are kept for operational reasons, for safety, and to help resolve disputes. There isn't a delete button in the app yet, but you can email me at any time and I'll delete your account and its data.

10. Data security

I hash passwords and never store them in plain text, all data is sent over HTTPS, and the admin tools need an extra one-time code to use. I follow standard industry practices to protect your information, though no system is completely risk-free.

11. Children's privacy

Uilo is not directed at children under 13. I do not knowingly collect personal information from children.

12. Your rights

You can ask to see, correct, or delete your personal data at any time by emailing me. You can also update most of your account details yourself from within the app.

You can stop order emails at any time with the unsubscribe link at the bottom of each one, or your email app's own Unsubscribe button. The page that opens also lets you subscribe again. Emails you need for your account, like password resets, still get sent.

13. Changes to this policy

When I change this policy, I'll update the effective date at the top of this page.

14. Contact

For any privacy questions or data requests, email me, Tele, at: teletamati22@gmail.com