InstaOrder · Courier application
InstaPilot Privacy Policy
How InstaOrder collects, uses and shares information when you use InstaPilot to take and deliver trips — including exactly when your location is tracked, and when it is not.
The short version
- Your location is tracked only while you are online. Go offline and it stops. We never track you between shifts.
- While you are online, tracking continues with the screen off and the app in the background — that is the only way dispatch can reach you with a trip. Android shows a permanent notification the whole time it is running.
- We collect your national ID number and photographs of your ID because we have to know who is carrying other people's goods. Only the managers who review your registration ever see them.
- The shop you are collecting from sees your name and phone number for the length of the trip. No other courier sees anything about you.
- Your battery level never leaves your phone. The app has no access to your camera or contacts.
Who this policy covers
This policy is issued by the team behind InstaOrder (“InstaOrder”, “we”, “us”), a delivery service operating in Egypt. We are the ones responsible for the information described here, and you can reach us at any time using Section 15.
It applies to the InstaPilot app and to the courier account you use it with. If you also run a shop on InstaOrder, that account is covered separately by the vendor privacy policy.
Being a courier means handing over more information than most apps ask for — where you are while you work, and proof of who you are. This policy is written to be specific about both.
What we collect
| Category | What it includes | Why we hold it |
|---|---|---|
| Account identityphone, otp, device_name | Your mobile number, the one-time codes we send it by SMS, and the name your handset reports for itself. | To sign you in — there are no passwords — and to tell your devices apart if you sign in from more than one. |
| Who you arefirst_name, sur_name, national_number | Your first name and surname, and your 14-digit Egyptian national number. | To verify you before you are allowed to carry goods, and to pay you. |
| Identity documentspilot_id_front, pilot_id_back | Photographs of the front and back of your national ID, and a profile photograph, chosen from your photo library. | So a manager can check the ID against the number you gave. See Section 4. |
| Home baseaddress, latitude, longitude, district | Your address, the coordinates you pin at registration, and the district you are assigned to. | To decide which area's trips you are offered. |
| Live locationlat, long — while online | Your position, reported continuously while your shift is on. Nothing is recorded while you are offline. | To offer you trips near you and to let dispatch see the fleet. See Section 3. |
| Shift activityonline, offline | When you go online and offline, and whether tracking was working during the shift. | To know who is available, and to settle what you are owed. |
| Trips and deliveriestrips, orders, is_cash | Trips assigned to you, the shop's name and pick-up address, drop addresses and coordinates, order counts and values, whether the order is cash, status changes, and the position recorded when you mark an order delivered. | To run the delivery, to record that it was completed, and to settle any dispute about it. |
| Earningsbalance | What each trip earned you, your balance, and payments made to you. | To pay you correctly and show you your own history. |
| Notificationsfcm_token | The notification token your device is issued by Firebase Cloud Messaging. | To offer you a trip and alert you when one changes. |
| Device and diagnosticsapp_version, os, crash | App version, operating system, device model, language, network type, crash reports and performance measurements. | To keep the app working on the phone you actually use. |
What the app does not take
Your battery level never leaves your phone. The app reads it only to warn you when it is getting low mid-shift, and that warning is drawn on your device — it is never sent to us. The app also has no camera access, no access to your contacts, and no advertising identifier. We do not track you across other apps.
Your location
This is the part of the app that matters most, so here is precisely how it works.
When it is on
Your location is reported only while you are online — that is, while your shift is on and you are available for trips. The moment you go offline, reporting stops.
While you are online, it keeps reporting with the screen off, the phone in your pocket, and the app in the background. This is deliberate and it is the whole point: dispatch cannot offer you a trip it does not know you are near. Android requires us to show a permanent notification for as long as this is running, and we do — if that notification is not there, you are not being tracked.
When it is off
Between shifts, we do not collect your location at all. Not a reduced rate, not occasionally — not at all. What we keep from a shift is the reporting done during it, plus the position recorded at each delivery.
The rule
Online means tracked. Offline means not tracked. There is no third state, and nothing in the app reports your position when your shift is off.
If your GPS stops working
If your phone stops producing a position while you are online, the app tells you at once and offers to fix it. If it is still not working about a minute and a half later, your shift is ended for you and you go offline. We would rather drop you from the queue than leave you online while dispatch is guessing where you are.
How it travels
Your position goes to our servers over an encrypted connection, tied to your account and your district. It is used to offer you trips and to show dispatch where the fleet is.
Battery
Continuous location reporting uses power. The app may ask Android to exempt it from battery optimisation, because otherwise the system can stop the reporting while your shift is still on and you will simply stop being offered work. Granting it is your choice and you can withdraw it in your phone's settings.
Your identity documents
Before you can take trips, we ask for your national number and photographs of both sides of your national ID, plus a profile photograph. You choose these from your phone's photo library and the app uploads them.
We ask because you will be carrying goods that belong to other people, sometimes with cash attached, and both the shops and we need to know who you are.
Our commitment on your ID
Your ID photographs and national number are never shown to a shop, to a customer, or to another courier. They are seen only by the InstaOrder staff who review registrations and handle account or payment problems, and that access is restricted and logged. They are not used for marketing, are not shared for anyone else's purposes, and are not published in any form.
Device permissions
You can change any of these at any time in your phone's settings. Declining some of them means the app cannot do its job, and we say so plainly rather than hiding it.
Location, including “all the time”
Required to go online. Android and iOS will both ask you separately for permission to use your location while the app is in the background, and without it you cannot take trips — see Section 3 for exactly when it is used.
Notifications
How a trip offer reaches you. Without it you will miss work.
Photos
Used once, at registration, to let you pick your ID and profile photographs. The app opens your photo library only when you tap to add one, and receives only the images you pick. It has no camera permission at all.
Ignore battery optimisation
Optional, and explained in Section 3. It grants no access to any data.
How we use your information
- Running deliveries. Matching you to trips near you, routing you to the shop and the drop, and recording what was delivered.
- Paying you. Calculating what each trip earned, keeping your balance, and settling payments.
- Verifying you. Checking your identity documents before your account is authorised.
- Safety and fraud prevention. Investigating a lost or damaged delivery, a dispute over cash, or a report about conduct — yours or someone else's.
- Support. Answering you and resolving problems between you, a shop and a recipient.
- Improving the platform. Understanding how long deliveries actually take, where couriers are short, how well dispatch matches trips, and how the app performs on real phones — and building new features from that.
- Planning. Working out where we need more couriers, and when.
- Telling you about InstaOrder. News about the app, pay changes, incentives and opportunities. See Section 12 for opting out.
We may also use your information for other purposes that are compatible with those above and that serve the operation, safety, improvement or growth of the platform. If a new purpose is materially different from these, we will update this policy and tell you before it takes effect.
What other people can see
A fair question, and it has a specific answer for each group.
- The shop you are collecting from sees your name and phone number while the trip is running, so they can reach you, and can follow the delivery's progress. They do not see your ID, your national number, your address, your earnings, or where you are outside that trip.
- The person receiving the delivery may be told the delivery is on its way and roughly where it has reached, if the shop passes that on. They are not given your ID or your home address.
- InstaOrder dispatch and managers see your live position while you are online, your shift history, your trips and your earnings. This is the job — someone has to assign the work and pay you for it.
- Other couriers see nothing about you. Not your position, not your earnings, not your trips, not your details.
Who we share information with
- Shops on your live trips — limited to what Section 7 describes.
- Service providers who run our infrastructure, on our instructions: Google (Firebase Cloud Messaging for notifications, and Google Maps for maps and addresses on Android), Apple (maps and addresses on iPhone), Expo (app updates and crash and performance diagnostics), our cloud hosting and database providers, and our SMS gateway for login codes.
- Payment and banking partners, where they are needed to pay you.
- Professional advisers, under a duty of confidentiality.
- Authorities, where we are required to disclose, or where it is necessary to protect our couriers, our users or the public — for example after an accident or a theft.
- A successor, if InstaOrder is involved in a merger, acquisition, financing or sale of assets. We will tell you before your data becomes subject to a different privacy policy.
These providers are bound to use your data only for what we ask of them, and not for their own purposes.
Aggregated data
We produce statistics across the whole fleet — delivery times by district, courier availability by hour, demand patterns, and similar. These are computed across many couriers and carry nothing that identifies a person.
What this permits, and what it does not
We may use, publish, license and share aggregated and de-identified data for any lawful purpose, without further notice to you. We will not re-identify it, and we will not build it in a way that reveals an individual courier — including where a district or a shift is small enough that one person could be inferred.
Storage and security
Every request travels over an encrypted connection, including the live location stream. Sign-in gives your device a short-lived token held in its secure keystore, not a password. Access to courier records inside InstaOrder is limited to staff who need it, and is logged — with identity documents restricted more tightly than the rest.
The session is a pair of credentials rather than a stored password: one that expires within a day and is renewed in the background, and one that renews it and is itself replaced every time. Signing out discards both, so a phone you sign out of can no longer reach your account or receive its trip offers.
Our servers are run by cloud providers whose facilities may be outside Egypt. Where your data is stored or processed abroad, we do so under terms that require an equivalent standard of protection.
No system is perfectly secure. If something goes wrong in a way that is likely to affect you, we will tell you.
Retention and deletion
- Account and profile — kept while your account is open, then removed once it is closed and everything owed is settled.
- Identity documents — kept while you are an active courier, and deleted when your account is closed unless they are needed for an unresolved dispute.
- Location history from your shifts — kept only as long as it is useful for settling deliveries and investigating disputes, then removed or reduced to aggregate statistics.
- Trip, delivery and earnings records — kept while we still need them to keep our accounts straight and settle anything outstanding.
- Diagnostics and crash reports — kept only while they are useful for fixing faults.
- Notification tokens — deleted when you log out or uninstall the app.
To close your account and have your data deleted, email it@instaorder.app or follow the steps at instaorder.app/en/delete-account. We aim to confirm within 30 days and will tell you what, if anything, we are keeping and why.
Your choices
These are commitments we make to you directly. Ask, and we will:
- tell you what information we hold about you, and why;
- send you a copy of it, including your trip and earnings history;
- correct anything that is wrong or incomplete;
- close your account and delete what we hold, as described in Section 11;
- stop sending you marketing, without affecting the trips you are offered; and
- stop a particular use of your information wherever we can do that and still get you paid.
To ask for any of these, contact us using Section 15. We aim to respond within 30 days, and will usually ask you to confirm a one-time code sent to your registered number first, so that nobody can make a request in your name.
You can stop location collection yourself at any moment by going offline in the app, and you can withdraw any permission in your phone's settings. Withdrawing location permission means you cannot go online.
Age
InstaPilot is for adults working as couriers. It is not directed at children, and we do not knowingly collect information from anyone under 18. If we learn that we have, we will delete it and close the account.
Changes to this policy
We may update this policy as the app changes. When we do, we will revise the effective date above and increment the version. If a change materially affects how we use your information — particularly anything about location — we will tell you in the app before it takes effect.
Contact us
For any question about this policy, or to ask for any of the things in Section 12, reach us at:
- Service
- InstaOrder
- it@instaorder.app
- Phone
- [SUPPORT PHONE]
- Operating in
- Egypt