Privacy policy

This page describes what the Pilovio Android app really does with data. It covers the Pilovio app and this website.

In short

• Pilovio reads the offers shown by ride-hailing apps to work out and display the net amount. The app never taps anything for you.
• No account, no advertising, no audience measurement, no tracking tool. No data is sold or rented.
• Most data stays on your phone. The history of offers and rides is erased after 30 days; other data stays until you clear the app's data (section 6).
• Riders' first names are never sent. On inDrive and Bolt offers, they are erased as soon as the screen is read (exceptions in section 2).
• To work out distances, the addresses of an offer or coordinates may be sent to our server and to Google (section 5).

1. Who is responsible

Prompley SARLAU, publisher of Pilovio. Registered office: 416 Lot Al Massar, Apartment 2, 2nd floor, Marrakech, Morocco. Contact: [email protected] (Contact and support page).

2. The accessibility service: what it reads and why

Android offers no other way to read a ride offer. Pilovio therefore uses the accessibility service, which you turn on yourself in Android's settings.

• What it reads: the text shown by the ride-hailing apps you have chosen (by default inDrive, Bolt and Yango Pro): price, pickup and ride distances and durations, pickup and drop-off addresses, the rider's rating and number of rides, payment method, bonuses and counter-offers.
• What is erased as soon as it is read (inDrive and Bolt offers): the rider's first name or name, phone numbers, order numbers and the text of input fields. Of the rider's comment, only its length is kept.
• Exceptions: for some inDrive “City to City” notifications, the first name shown in the notification may be stored on the phone, in the City to City history; for the other apps that are read (Yango Pro for example), this erasing is not guaranteed; and if you turn on diagnostics, images of the ride-hailing app's screen (which may show the rider's name and photo) are kept on the phone for 7 days.
• What it ignores: Android reports screen changes from all apps, but Pilovio discards anything that does not come from a chosen ride-hailing app. Keyboards are never read.
• Screen images: to spot some elements (a colour, text inside an image), Pilovio analyses the image of the ride-hailing app's screen on the phone; outside diagnostics, the image is then discarded.
• Why: to work out the offer's net amount, its colour, DH per hour and per kilometre, and to display them on top of the ride-hailing app.
• Nothing is tapped: the Pilovio app presses no button and makes no gesture. You always accept or decline in the ride-hailing app yourself.

Pilovio also reads the notifications of the chosen ride-hailing apps (new offer, message from the rider). Only their type and the price are kept (with your location if diagnostics are on). A chat message from the rider may be read aloud or translated on the phone, without being kept.

3. Location

• Pilovio asks for your location only while its reading is on, with a notification that stays visible. It does not ask for background location access.
• The location is read about every 15 seconds (Google Play location services).
• Why: to estimate the pickup distance, know which city you are in and count kilometres.
• It is stored on the phone with each offer seen and, if you turn on the GPS trace, continuously (section 6).
• To work out a distance, points learned from your GPS may be sent to our server, and the address search sent to Google may be limited to an area centred on your location: Google can therefore infer where you are (section 5).
• Pilovio may use Android's activity recognition (“in a vehicle”) to wake up; it is processed on the phone.

4. Microphone, voice and translator

• Voice announcements use your phone's text-to-speech.
• The microphone is only used by the translator, while you hold a button or in conversation mode. Pilovio does not record audio.
• Speech recognition is done by your phone's voice service, offline when possible. Otherwise this service goes through the Internet and is governed by its provider (often Google).
• Translation happens on the phone (Google ML Kit). Language models are downloaded once, over Wi-Fi. Translated sentences are not kept.

5. What leaves the phone

Pilovio has no user account, no advertising, no analytics or crash-reporting tool. Depending on the version and the features you turn on, this is what may leave the phone:

• Our routing server: the text of an offer's pickup and drop-off addresses (to find the place) and pickup and drop-off coordinates (for the distance). Never the rider's first name. These requests carry a random identifier created by the app, which is neither your phone number nor the device identifier. Our program does not record these addresses or this identifier; the server's routing engine may however keep a technical trace of the requested coordinates in its logs.
• Google Maps Platform (depending on the version): the text of the offer's addresses or place coordinates, with a search area centred on your location. Google processes these data under its own rules, as the provider of the distance calculation.
• General information: the app may ask our server for the fuel price, the latest version and its reading rules, sending only the app version.
• “My zones” map: map tiles come from OpenStreetMap, and the search for taxi ranks covers the city centre, not your location.
• “Founding member” code: if you enter one, it is sent to our server to be checked.
• Testers only: if you have a tester code and have agreed, a daily numeric summary (counters, city, app and inDrive versions, reading health, battery) with a random identifier. It is rejected if it contains a first name, an address, a phone number, a location or an image. These summaries are kept on our server with no time limit so far; they are deleted on request.
• Exports: a diagnostic file (after a warning screen) or the list of your rides, only if you create and share them yourself, with the recipient you choose. The diagnostic file may contain the GPS trace, the offers' addresses and, if you choose so, screen images.
• SOS: if you trigger it, a text message goes to the trusted contacts you have saved, with the time, a link to your exact location and the destination.
• Google components on the phone: location (Google Play services), speech recognition and text-to-speech, and translation (ML Kit) are provided by Google; these components may send technical information to Google under their own rules.
• As with any exchange over the Internet, these requests reveal your IP address to our server and to Google. Our server keeps no access log.

6. What stays on the phone, and for how long

These data are in the app's private storage.

• History of offers, rides and sessions (price, net, distances, addresses, rider's rating): erased automatically after 30 days.
• Voice announcement log: 7 days.
• Diagnostic log, only if you turn diagnostics on (screens read, ride-hailing app notifications with the location, possibly screen images): 7 days, at most 300 MB.
• Kept until you clear the app's data or uninstall it: the GPS trace, your location when each offer was seen, the City to City history (addresses, sometimes the first name shown), SOS incidents, your trusted contacts, the places notebook, fuel fill-ups, an internal technical log of the app, and your settings (including your car's make, model and number plate, and your tester or founding member codes).
• Backup: the app is not backed up to Android's cloud. When moving to a new phone (Android 12 and later), Android may however copy its data.

7. What we do not do

• We do not sell, rent or exchange any data.
• No advertising, no profiling, no advertising identifier. The Android ID is never sent.
• No account and no payment in the app.
• This website sets no cookies and loads no third-party script.

Waiting list and messages

If you write to [email protected], we keep your e-mail address and your message so we can reply and tell you about the launch, and nothing else. Nothing is sold or shared. Messages are forwarded by Cloudflare to a Gmail inbox (Google). They are deleted at the latest one month after the app launches, or sooner on request (within 10 days).

Website hosting

The website is hosted by Cloudflare, which processes visitors' IP addresses in order to serve the pages and protect the site. The website sets no cookies.

8. Your rights

Under Moroccan law no. 09-08 on the protection of individuals with regard to the processing of personal data, you may ask for access to your data, its correction or deletion, and object to its processing: write to [email protected]. You may also contact the Moroccan data protection authority (CNDP).

Each request to erase or rectify data is handled within 10 clear days, as provided by article 8 of law 09-08.

9. Deleting your data

See the Data deletion page.

10. Audience

Pilovio is intended for adult ride-hailing drivers.

11. Changes

If the app changes how it processes data, this page will be updated and its date will change.