Waiti service terms and privacy notice
Version: service-ar-20260912-v1. The person responsible authorized publication of this public-service version on 12 September 2026. The previous private-pilot version is preserved separately and does not constitute consent to this version. Publishing the terms does not mean registration or delivery is available at every time or location; the apps show actual operating availability.
The service and your account
Waiti lets you request water tanker delivery and connects your order with an eligible operator within the service areas, water categories, quantities and operating hours that are actually configured. Registration does not guarantee a suitable tanker, acceptance of an order or a particular delivery time. This website does not support ordering water in a browser; actions are completed in the Customer and Operator apps available to you.
Use your own phone number and account, provide accurate information, and read the order summary, price, payment method and displayed cancellation terms before confirming. This document does not set new prices or fees. Do not pay an amount that did not appear in your order; contact support if there is a disagreement. Orders expressly marked as software tests do not create an obligation to deliver water or pay money.
Actual login codes are sent through a private phone gateway using a mobile-network SIM authorized by its owner. The currently authorized destinations are Canada and Yemen. Sending is subject to quotas, time limits and abuse-prevention controls; messages may fail or be delayed because of the network, an offline gateway or an exhausted quota. We do not promise instant SMS delivery. Your carrier’s normal plan charges may apply. Do not share your login code, password or authenticator-app code.
A new account does not mean that an operator or tanker is approved or ready. Acceptance of documents, team review, and the required water category, capacity, location and readiness remain separate requirements. A water description or tanker review is not an independent certificate or laboratory guarantee of drinking-water suitability. Do not use the app while driving or rely on it for emergency service.
Photography and verification
Customers are asked to photograph both sides of a national identity card or driving licence, or the identity page of a passport. We do not request a photograph of the customer’s face. Operators capture their own face with explicit consent, both sides of their national identity card and driving licence, and each tanker’s registration document with proof of ownership or authorization to operate it. Use your genuine documents for a real account; do not upload someone else’s documents. Test documents remain separate and are not approved as genuine evidence.
These are requirements chosen by Waiti, not a claim that they are government-mandated. The camera opens after you consent to the photography disclosure and grant permission on your phone. You can cancel or ask for help; cancelling does not complete verification. Gallery or file imports are not available. This workflow accepts JPEG and PNG images only, not PDFs, animated images or other formats.
The camera preview is analyzed locally to guide framing, clarity, lighting, steadiness and the presence of one face in an operator’s face photograph. The quality check does not identify a person or establish liveness. This workflow does not create searchable face templates or infer age, gender or ethnicity. Quality guidance may be incorrect; team review is independent of it.
After reviewing the image and selecting “Use photo”, it is uploaded to private, isolated Cloudflare storage for security processing, which produces a new image file with unnecessary metadata removed. The quarantined original is not available to reviewers or for download. Access to the processed result is restricted to the account holder and authorized verification staff. Processing failure prevents review and approval. A face photograph does not become a public profile picture. Evidence is bound to the account, purpose and version; uploading it does not mean it is approved.
The Google ML Kit library may collect technical information about the device and app, installation identifier, performance and errors for diagnostics and usage analysis. This is separate from local camera-preview processing; this workflow does not upload the preview stream or facial landmark points to Waiti’s server.
Images are not saved to the gallery or included in the phone’s backup. Resuming an upload is tied to a session lasting no more than 15 minutes. The local copy is deleted after a successful upload or when discarded, and when it expires while the app is running or the next time it runs. The app cannot perform timed deletion while force-stopped. Support or account deletion can be requested before approval is complete.
Privacy and data use
The person currently responsible for Waiti’s data is Mohammed Mahyoub. For questions, privacy matters and complaints: support@waiti.org. This document does not claim that a company has completed registration in Yemen or that an independent legal review has taken place.
We process the phone number and account role; profile, order, delivery and payment information; operator and tanker status; verification evidence; and consent, session, security and error records. We may process device information, notification tokens and network addresses to operate and protect communications and diagnose faults. The Customer and Operator apps do not read your SMS inbox or contacts.
After location permission is granted and sharing is enabled, precise location is used for service location, readiness, dispatch and order-related tracking. An operator’s location may continue to be collected in the background during active sharing, subject to the permissions granted. You can stop sharing or withdraw permission in your phone’s settings; functions that depend on location may then stop. This consent does not authorize tracking unrelated to the service.
Data is used to operate the service, verify login and evidence, fulfil orders, communicate about operations, prevent abuse, handle disputes and faults, and document security and consent. It is not used for targeted advertising. Necessary contact and location information may be visible to the other party associated with your order. Staff access is limited to their work permissions.
Operational providers process the data needed for their services, including Cloudflare, PlanetScale, Google for maps, routes and notifications, and the mobile carrier for SMS delivery. Processing may take place outside your country; the production database is hosted in Frankfurt. Document storage is private, not publicly accessible links.
Data and deletion requests
You may request access, correction or deletion through support@waiti.org. Account-closure requests and status tracking are available in the app, with separate public instructions on the “Request account and data deletion” page. Account ownership may need to be verified. Submitting a request alone does not confirm data erasure or actual account closure.
Eligible account-related data, including order, location, document and security records and their backup copies, is erased without unnecessary delay and no later than 90 days after actual account closure. This period does not start when a record is created or a deletion request is submitted. Restore safeguards prevent data due for erasure from being returned to service.
The exception is limited to records specifically covered by an active, documented legal hold, or an unresolved financial obligation for which necessary retention is legally justified. Those records remain restricted until the retention reason ends; this does not delay erasure of other eligible data. You should be informed of the request’s status and any legitimate reason preventing immediate completion.
Support and consent
For support: support@waiti.org. Operator support contact: +16132913479. This number reaches the person responsible for Waiti; it is not a substitute for local emergency services.
“I have read and agree to the Waiti service terms and privacy notice, and to the use of my phone number for login codes. I understand that registration does not guarantee delivery availability, and that location sharing and photography require separate consent and permission.”
Publishing or reading the text does not automatically record your consent. The app presents the effective versions and asks you to accept them yourself. Accepting the terms does not grant camera or location permission on your behalf.
Separate consent before photography: “I have read what will be photographed, how it will be used and who may review it, and I agree to capture and send photographs for this purpose. I understand that the quality check does not establish identity or liveness, and that I can cancel or ask for help.”