Unipilot is a ride and fuel-split app for the staff of Worx. It is operated by Worx (worxbyglimpse.com). This page explains what the app collects, why, who sees it and how to have it removed.
Who can use the app
Unipilot is for Worx staff and the company driver only. Accounts are approved by a Worx administrator. It is not meant for the general public and not for anyone under 18.
What we collect
Account details. Full name, work email, phone number and password. If you sign in with Google we receive your name and email from Google. Passwords are stored hashed by our authentication provider and are never visible to us.
Profile picture (optional). A photo you choose, or an icon. The app asks for photo or camera access only when you change your picture.
Rides. Ride requests, pick-up and drop-off addresses, times, notes, the purpose you pick (company meeting, company coverage, company cheque, fetching a company asset, home or office transport, or personal), whether it is a round trip, and which riders were on board. Your ride history and your favourite places (home, office and so on, with their addresses and map coordinates) are kept so you can reuse them.
Driver location (the driver only). While a run is active, the driver's phone records its position and sends it to our servers. Recording starts when the driver taps Start run and stops when the driver taps End run. Nothing is recorded outside a run. The route is used to measure the distance of each leg so the monthly fuel cost can be split fairly. Riders and other staff never share their location and the app never asks them for it.
Live driver position (riders). A rider who is waiting to be picked up or dropped off can see the driver's current position on the ride screen, only while that screen is open and only for their own ride.
Fuel records. Fill-up date, litres, cost and optional odometer reading, entered by the driver or an administrator. The driver can attach a photo of the receipt. Receipt photos are stored privately. Only the driver who added it and Worx administrators can open them.
Statements. Each month the app produces a statement for every employee with the rides, distance, time and the share of fuel cost charged. A PDF copy is stored and emailed to the employee.
Ride issue reports. A rider can report a problem with a ride or the driver. The report holds your message, the ride it is about and your name. Worx administrators read it.
Error reports. If the app crashes or hits an error, it sends a report to Worx administrators: the error message, technical trace, the screen you were on, the app version and your phone's platform (Android or iOS). The report is tied to your account so we can follow up. It does not contain your location or the contents of your rides.
Ride sharing link. A rider can create a link for a ride and send it to someone who does not use the app. Anyone with the link can open a web page showing the first names of the rider and driver, the pick-up and drop-off places, the ride status and, while the ride is live, the car's position. The link stops working about 12 hours after the ride was requested. The rider decides who gets it.
Notifications. A push token for your phone so we can send ride updates, and the notification history shown in the app. This includes arrival messages from the driver ("I'm here", and a heads-up when the car is about 5 minutes away), a statement-ready message, and reminders for a fuel fill-up and for the car's service. Notification permission is optional and you can turn it off in your phone settings.
Admin web portal. Worx administrators can also use a web portal at a Worx-owned address on vercel.app. It uses the same sign-in and shows the same data as the admin screens in the app. It does not use advertising or analytics trackers.
Technical data. Our hosting providers keep standard server logs. We do not use advertising or analytics trackers in the app.
Why we use it
- To run the ride service: requests, approvals, pick-ups, arrival alerts.
- To work out each person's share of the fuel cost, by ride purpose, and produce statements.
- To check fuel claims against receipts.
- To look into ride issues and fix errors in the app.
- To keep an audit trail of changes made by administrators.
- To send notifications and emails you need to act on.
We do not sell personal data and we do not use it for advertising.
Who sees it
- You see your own rides, statements, favourite places and profile.
- The driver sees ride requests, rider names, phone numbers and addresses needed to carry out the rides.
- Worx administrators see all users, rides, legs, fuel records and receipts, statements, issue reports, error reports and the audit log.
- Anyone you send a ride link to sees what the ride sharing section above describes.
Services we use
| Service | What for | Data involved |
|---|---|---|
| Supabase | Database, sign-in, file storage, server functions. Region: Mumbai, India. | All app data, including receipt photos |
| Google Maps Platform | Address search, route lines, and the map on Android | Search text, coordinates |
| Apple Maps | Map on iPhone | Coordinates shown on screen |
| Expo | Push notification delivery and app updates | Push token, notification text |
| Resend | Sending statement and system emails | Name, email address, statement PDF |
| Vercel | Hosting the admin web portal and the shared ride page | Page requests; the data shown comes from Supabase |
How long we keep it
- Raw location points are deleted automatically after 90 days. The distance calculated from them stays with the ride.
- Ride, fuel, receipt and statement records are kept for company accounting, even after a person leaves.
- Issue reports and error reports are kept for operations and for checking past rides.
- Ride share links expire about 12 hours after the ride was requested.
- Notification history and push tokens are removed when you delete your account.
Deleting your account
In the app: Profile, then Delete my account. Your name, email, phone, saved places, push tokens and notifications are removed or anonymised straight away and you are signed out. Ride, fuel, receipt and statement records stay for accounting but show "Deleted user" instead of your name. Receipts, issue reports and error reports are kept for accounting and operations, and once your profile is anonymised they no longer name you.
If you cannot open the app, email Hello@worxbyglimpse.com from your work address and ask for deletion. We reply within 30 days.
You can also ask us for a copy of your data or for a correction at the same address.
Security
Data is sent over encrypted connections and protected by row level access rules so each person can only read what they are allowed to see. Receipt photos sit in private storage. If you turn it on in Profile, the app can sign you back in with your fingerprint or face. The saved sign-in stays in your phone's secure storage and is wiped when you turn the option off or delete your account.
Changes
If this policy changes we will update the date at the top and tell users in the app when the change matters.
Contact
Worx, Dubai, United Arab Emirates. Hello@worxbyglimpse.com