Privacy Policy

1. Who we are

Veloo ("Veloo", "we", "us") operates the Veloo rider app (tn.veloo.customer), the Veloo Driver app (tn.veloo.driver), and this website. Veloo is based in Tunisia. For any privacy question, contact us at privacy@veloo.tn.

2. Data we collect

• Account data — name, email address, phone number, password (stored hashed by our auth provider), profile photo.
• Verification data — one-time codes sent by SMS or email; for drivers, identity and vehicle documents (license, insurance, vehicle photos) required for KYC review.
• Location data — precise GPS while you use the app to set pickup points and match rides. For drivers, location is collected while the app is in use and during active rides, including in the background when you go online.
• Ride data — pickup and drop-off points, routes, timestamps, fares, ride status, and in-app ride messages.
• Device data — device model, OS version, push-notification token, app version.
• Crash and diagnostic data — anonymized error reports used to keep the app stable.

3. Why we use it

• To match riders with drivers, compute fares, and complete trips.
• To verify accounts and protect against fraud and abuse.
• To review driver eligibility and keep documents current.
• To send service notifications (ride status, receipts, security alerts).
• To improve reliability via aggregated, anonymized analytics.

We do not sell your personal data.

4. Who we share it with

We share only what is needed with the processors that run Veloo:

• Supabase — database, authentication, and file storage (EU region).
• Twilio — SMS delivery for verification codes.
• Google Maps Platform — maps, geocoding, and route display.
• Sentry — crash reporting and diagnostics.
• Cloudflare Turnstile — bot and abuse protection on auth screens.
• Your ride counterpart — drivers see a rider's first name and pickup point; riders see the driver's first name, vehicle, and live position for the duration of a trip.

5. Retention

Account and ride data is kept while your account is active and for the period required by Tunisian accounting and transport rules. When you delete your account, your profile, documents, push tokens, and identifying data are removed; ride records are anonymized, and a minimal audit entry (that a deletion occurred, without your identity) may be kept for legal compliance.

6. Your rights

Under Tunisian data-protection law (Organic Law No. 2004-63, INPDP) you may request access, correction, or deletion of your personal data. Most of this is self-service in the app (Profile → Edit, Profile → Delete account) or on our account deletion page. For anything else, write to privacy@veloo.tn.

7. Security

Data in transit is encrypted with TLS. Passwords are hashed and never stored in plain text. Access to production data is limited to the operators who keep Veloo running.

8. Changes

If this policy changes materially we will update this page and, where appropriate, notify you in the app before the change takes effect.