Privacy policy

Last updated: 2026-09-25

1. Who processes your data

[operator legal name] ("VYLLS") is responsible for your data in the VYLLS Customer, Merchant and Rider apps and the Admin console. Privacy contact: [email protected]

2. Data we collect

• Account data: name, email, phone number, language, and your password stored as an unreadable hash.
• Order data: products, amounts, shop, order status, delivery code, reviews and support requests.
• Address: the chosen locality, address description and nearby landmark. We do not collect precise GPS location.
• Merchant data: business, branch and staff details and documents uploaded for review.
• Courier data: working locality, vehicle, availability, task history and cash amounts.
• Device data: the push notification token (FCM) if you allow notifications, and limited technical logs for security.

We collect no bank card data because payment is cash.

3. Why we use it

To fulfil orders and deliveries, verify accounts, prevent fraud and abuse, prepare settlements and commissions, answer support, send verification codes and notifications, and comply with the law. We do not sell your data or use it for third-party advertising.

4. Who sees it

• The shop: your name, phone, address and order details, to fulfil the order.
• The courier: your name, phone and delivery address for the order they deliver.
• Service providers: our email provider to send codes, Google Firebase to deliver notifications to your phone (without order details), and our hosting provider.
• Authorities where the law requires it.

5. Where and how long

Data is kept on VYLLS servers. Order and financial records are kept as long as law and accounting require. Verification codes are removed after they expire, and push tokens are erased when you sign out or your session ends.

6. Your rights

You can view your data in the app and ask for a copy of it at [email protected], edit your account, request account deletion (see the account deletion page), turn off notifications in your device settings and contact us at [email protected].

7. Security

We use encrypted connections (HTTPS), hashed passwords, limited staff access with security keys and private document storage. No system is perfectly secure; we will notify you as the law requires if a breach affects your data.

8. Children

The apps are not intended for anyone under 18 without a guardian's consent.

9. Changes

We may update this policy and will publish the new version with its date.