Private-pilot terms and privacy notice — Waiti
Version: pilot-ar-20260912-v1. The owner approved publication of this text on 12 September 2026. It applies only to approved private-pilot participants; it does not replace public-service terms or a launch privacy policy, and does not open public registration.
Participation terms
This is a private, invitation-only software pilot to test the Waiti Customer and Operator apps. Participation is limited to approved people and accounts.
Orders, dispatch, tracking, delivery confirmation and cash-on-delivery records in this pilot are software simulations only. They do not create an obligation to deliver water or require money to be paid or collected. Do not contact operators or customers outside the approved participants.
Actual login codes are sent only to the two approved participants’ numbers with their consent. The approved SMS test window lasts 15 minutes, with a maximum of two messages per recipient and four messages in total, each one segment, using Rogers SIM 2 / subscription 2 under the latest authorization. The window and limits must not be increased automatically. Your carrier’s normal plan charges may apply.
Use only your own account and number. Do not share login codes, passwords or authenticator codes. Use non-sensitive test order data and specimen documents; do not upload genuine identity documents or information about non-participants. Do not use the app while driving.
You may stop participating at any time and contact the pilot supervisor to withdraw access. The pilot may stop or fail and must not be relied on for an actual service or an emergency response.
Pilot privacy notice
The person responsible for this pilot’s data is Mohammed Mahyoub. For questions and privacy requests, contact support@waiti.org.
We process the phone number, account role, consent and session records, test-order data, operator and tanker status, uploaded test files, and security and error records. We may also process device information, notification tokens and network addresses to operate and protect communications and diagnose problems.
When location permission is granted and sharing is enabled, precise location is used for readiness checks, dispatch and test tracking. An operator’s location may continue to be collected in the background during active sharing under the granted permissions. You can stop sharing or withdraw permission in the phone settings; location-dependent functions may stop. This consent does not authorize tracking unrelated to the pilot.
Data is used to operate the test, verify login, prevent misuse, investigate faults and document results. It is not used for targeted advertising or to create real orders. The Customer and Operator apps do not read your SMS inbox or contacts; the private phone gateway sends login codes only within the approved limits.
Waiti team access is limited to the necessary permissions. Contact and location information needed by the other participant associated with your test order may be displayed. Operational providers process the data needed for their services, including Cloudflare, PlanetScale, Google for maps, notifications and distribution, and the mobile carrier for SMS delivery. Processing may take place outside your country; the pilot’s production-hosted database is in Frankfurt.
Expiry of the test window stops the sending and access associated with it, but does not automatically delete accounts or test records. You may request access, correction, deletion or withdrawal through support@waiti.org. Any data that cannot be deleted immediately and the reason for retention should be explained before completion is confirmed.
The approved pilot retention policy is to erase eligible account-related data, including order, location, document and security records and their backup copies, without unnecessary delay and no later than 90 days after actual account closure. The period does not start when a record is created or a deletion request is submitted, and expiry of the test window does not close the account. The approved exception is limited to records specifically covered by an active, documented legal hold, or an unresolved financial obligation for which necessary retention is legally justified. Those records remain restricted only until the retention reason ends; this does not extend the erasure deadline for other eligible data.
For support and contact with the pilot supervisor: +16132913479 or support@waiti.org. This number reaches the pilot supervisor; it is not a substitute for local emergency services.
Consent to participate
“I have read the private-pilot terms and privacy notice and agree to voluntary participation and receipt of login codes within the stated limits. I understand that orders and payments are for testing only, and that location sharing requires separate permission and can be stopped.”
Publishing or reading this text does not automatically record your consent. Consent is requested within the app; photography consent and phone permission remain separate.
Photography and verification during the pilot
In this pilot, the customer uses one test document clearly marked as a non-genuine specimen: both sides of an identity card or driving licence, or the identity page of a passport. We do not ask for a customer face photograph. The operator captures their own face with explicit participation, then test specimens of both sides of the identity card and driving licence, and a registration document for each tanker with proof of ownership or authorization to operate it. Do not upload a genuine identity document to the pilot.
These are requirements chosen by Waiti, not a claim that they are government-mandated. The camera opens after consent to the photography disclosure and permission on the phone. You may cancel or ask for help; cancellation does not complete verification. Gallery and file imports are not available.
The camera preview is analyzed locally to guide framing, clarity, lighting and steadiness, and to check that one face is visible in the operator’s face photograph. The face check does not identify a person or establish liveness. We do not create searchable face templates or profiles or infer age, gender or ethnicity. Quality guidance may be incorrect; team review remains separate.
After reviewing the photograph and choosing “Use photo”, it is sent to private Cloudflare storage for security processing. Only the processed result is available to the account holder and authorized verification staff. The quarantined original is not shown to reviewers, and a verification photograph does not become a public profile picture. The image is bound to the account, purpose and evidence version. Uploading a customer document does not approve their identity; operator approval requires review of all required evidence.
The Google ML Kit library may collect technical information about the device and app, installation identifier, performance and errors for diagnostics and usage analysis. This is separate from local camera-image processing; the workflow does not upload a preview stream or facial landmark points to Waiti’s server.
Images are not saved to the gallery or included in the phone’s backup. Resuming an upload is tied to a bounded session of no more than 15 minutes. The local copy is deleted after a successful upload or when discarded, and when it expires while the app is running or the next time it runs. The app cannot perform timed deletion while force-stopped. Support or account deletion may be requested before approval. The approved retention rule above applies to originals, processed results, replaced copies and backups.
Separate consent before photography: “I have read what will be photographed, how it will be used and who may review it, and I agree to capture and send photographs for this purpose. I understand that the quality check does not establish identity or liveness, and that I can cancel or ask for help.”