Privacy policy
The VivPilot app is not available yet. This document describes how the app will handle data at launch, including the account and subscription, and may be updated before launch.
1. Who we are
The data controller is VIVADAR DELIVERY S.R.L., tax ID (CUI) 45834030, Trade Register No. J2022005336401, registered office Str. Fălticeni nr. 75, Sector 2, Bucharest, Romania (“we”). Contact us about your data at vivadardelivery@gmail.com.
2. Summary
| Data | Where it goes | Why |
|---|---|---|
| Offers read from the screen (price, distances, durations, displayed addresses) | Your phone only | Calculating the verdict |
| Settings, thresholds, car cost, shift report | Your phone only | Running the app |
| Ride destination address | May be sent to Google through the Android geocoding service | Calculating the empty return |
| The text you search for in “Destinations to avoid” | Nominatim service (OpenStreetMap) | Finding the address you searched for |
| Places saved in “Destinations to avoid” and checking offers against them | Your phone only | The warning on the card |
| Address opened with “View on map” | The map app you choose (for example Google Maps, Waze) | Showing the place on a map |
| Phone number (at launch) | Google Firebase Authentication | Sign-in with an SMS code |
| Account ID and subscription status (at launch) | Our verification server | Checking the subscription |
| Payment data (at launch) | Lemon Squeezy; card details never reach us | Paying for the subscription |
| Phone number left in the “Notify me” form, with the date and version of your consent | Cloudflare (D1 database, in the European Union) | Telling you about the launch |
| Messages you send us on WhatsApp or by email | WhatsApp (Meta) / Gmail (Google), to us | Telling you about the launch and replying |
The app has no ads, sends no usage statistics and sends no crash reports over the internet.
3. The VivPilot app
3.1. Android accessibility service
VivPilot uses the Android accessibility service (the AccessibilityService API) to read the ride offer shown on screen in the Uber, Bolt and Blue apps: price, distances, durations and displayed addresses. Without this permission the app cannot calculate the verdict.
- We use the information read only to identify the offer and calculate the verdict (lei/km, lei/hour, profit, return cost).
- Offers read and calculations stay on your phone. We do not send them over the internet, sell them or use them for advertising.
- VivPilot does not tap buttons for you and does not accept or decline rides.
- The app asks for the permission explicitly, after explaining what it is used for. You can turn it off at any time in Android Settings → Accessibility.
3.2. Data kept on the phone only
Settings, thresholds (day, night, weekend), car cost per km, the shift report and places saved in “Destinations to avoid” are stored only on the phone. You can delete them in the app, in Android Settings → Apps → VivPilot → Storage → Clear data, or by uninstalling the app.
3.3. Geocoding the destination address
To estimate the cost of the empty drive back, the app turns the destination address into a map position using the geocoding service built into Android (Geocoder). On most phones this service is provided by Google and may send the address to Google's servers. Google's processing is described in the Google Privacy Policy. If you turn off the return-cost feature, the address is no longer sent.
3.4. Destinations to avoid
The optional “Destinations to avoid” feature lets you save addresses or areas you don't want to end up at.
- Search. When you search for an address, the app sends only the text you typed over the internet to OpenStreetMap's Nominatim address search service, operated by the OpenStreetMap Foundation (United Kingdom). As with any internet request, the server also sees your phone's IP address. The OpenStreetMap Foundation's processing is described in its privacy policy.
- Saved places and checking offers (whether an offer's destination is near a saved place) stay on your phone. We do not send them over the internet.
- The verdict does not change. The card only shows a warning, for example “⛔ Strada…” (street name).
- “View on map” opens the map app you choose (for example Google Maps or Waze). It receives that address and handles it under its own privacy rules.
Address data comes from OpenStreetMap: © OpenStreetMap contributors (in Romanian: © contribuitorii OpenStreetMap), available under the Open Database License (ODbL).
3.5. Voice announcement
The voice announcement uses the text-to-speech engine selected in your phone's settings. VivPilot does not send the announcement text over the internet; the speech engine works under its provider's rules. The feature is optional.
3.6. Account (at launch)
You will sign in with your phone number. Sign-in uses Firebase Authentication, a Google service, which sends you a code by SMS. For this, Google processes your phone number and technical data needed to prevent abuse (for example IP address and device information). Google acts as our processor. Details: Privacy and Security in Firebase.
3.7. Subscription and payment (at launch)
Payment is handled by Lemon Squeezy, acting as merchant of record, which processes payment, invoicing and taxes. You enter card details directly with Lemon Squeezy; they never reach us. From Lemon Squeezy we receive what we need to manage the subscription: name, email address, country, order details and subscription status. Lemon Squeezy also processes data under its own privacy policy.
The app checks on our server whether your subscription is active. For this, the server receives your account ID and stores the subscription status (active, expired, renewal date). Ride offers and calculations are not sent to the server.
4. The vivpilot.com website
- No tracking cookies. The website uses no cookies and does not track you.
- Hosting. The website is hosted by Cloudflare, which processes technical data (for example IP address and browser type) to deliver pages and protect them from attacks.
- Analytics. We currently use no visitor analytics. If we enable it, we will use Cloudflare Web Analytics, which uses no cookies and does not identify visitors, and we will update this policy.
- “Notify me”. The form and launch messages are described below, in 4.1.
4.1. The “Notify me” form and launch messages
- What we collect. Through the form: your mobile phone number and the date and time you gave consent (plus the version of the consent text and the page language, so we can prove what you agreed to). We don't ask for a name, email or anything else. If you message us on WhatsApp or by email, we receive your number or address and the name shown on your account.
- Purpose. Only to tell you, by SMS or WhatsApp, when VivPilot can be downloaded. We don't use your number for advertising and don't share it with anyone.
- How we notify you. We send the launch message ourselves, manually, by WhatsApp or SMS, from the company's phone number. We don't use an external SMS service. Messages go through the mobile operator's network (SMS) or WhatsApp (Meta), under their rules.
- Legal basis. Your consent (Art. 6(1)(a) GDPR), given by ticking the box in the form. The box is not pre-ticked; without it the form is not sent.
- Where we keep it. Numbers from the form are stored at Cloudflare, in our account's D1 database, with storage in the European Union. Cloudflare acts as our processor. Only we can access the list, through our Cloudflare account.
- How long. Until the app launches and at most 6 months after that; then we delete them. We delete them sooner if you ask.
- Anti-spam protection. To stop automated submissions, the form uses Cloudflare Turnstile. Turnstile loads only when you open the form and processes technical browser signals (for example IP address and browser type) to check you're human. According to Cloudflare, Turnstile does not use cookies to collect or store information. Details: Turnstile Privacy Addendum. We do not keep your IP address.
- How to ask for deletion. Message us on WhatsApp at +40 745 891 976 or email vivadardelivery@gmail.com with the number you want deleted. We delete it without undue delay, within one month at most, and confirm.
- Your rights. You can withdraw consent at any time, without affecting earlier processing, and you have all the rights in section 8: access, rectification, erasure, restriction, portability, objection and complaint to the Romanian authority (ANSPDCP).
5. Legal bases
- Performance of a contract (Art. 6(1)(b) GDPR): running the app, the account, subscription checks.
- Consent (Art. 6(1)(a) GDPR): the “Notify me” form and messages; you can withdraw it at any time.
- Legitimate interest (Art. 6(1)(f) GDPR): security of the website and account, abuse prevention.
- Legal obligation (Art. 6(1)(c) GDPR): keeping records required by tax and accounting law, where applicable.
6. Recipients and transfers outside the EU
We use these providers: Google (Firebase Authentication, Android geocoding, Gmail), the OpenStreetMap Foundation (address search via Nominatim), Cloudflare (website hosting, the “Notify me” form database and Turnstile anti-spam protection), Lemon Squeezy (payments), Meta (WhatsApp, only if you write to us there) and the hosting provider of the subscription verification server. Some are based or have servers outside the European Economic Area, for example in the USA or the United Kingdom. In such cases, transfers rely on a European Commission adequacy decision (including for the United Kingdom and the EU-US Data Privacy Framework, for certified companies) or on Commission-approved standard contractual clauses. The map app you open with “View on map” is chosen by you and processes data under its own responsibility. We do not sell your data.
7. How long we keep data
- Data on the phone: until you delete it or uninstall the app.
- Account and subscription status: while you have an account; after closing it we delete them within 30 days, except data we are legally required to keep.
- Billing data: as long as tax law requires (kept by Lemon Squeezy as merchant of record and by us where applicable).
- “Notify me” data (phone number and consent date, from the form or messages): until launch and at most 6 months after that, then deleted; sooner if you ask for deletion.
8. Your rights
You have the right of access, rectification, erasure, restriction, portability, objection and to withdraw consent, without affecting earlier processing. Write to vivadardelivery@gmail.com; we reply within one month. You can complain to the Romanian data protection authority (ANSPDCP), www.dataprotection.ro.
9. Minors
VivPilot is meant for ride-hailing drivers, who must be adults. We do not knowingly collect data about people under 18.
10. Security
We keep as much data as possible on the phone only, use encrypted connections (HTTPS) for everything sent over the internet and limit access to data to people who need it.
11. Changes
If we change this policy, we publish the new version here with the update date. For important changes we will also tell you in the app.