Privacy policy

Last updated: 6 October 2026

SAYO (operated by TIMUS, MCHJ) collects personal data to arrange transfers and tours across Uzbekistan. This policy covers the SAYO website and the SAYO and SAYO Service mobile apps, and explains what we collect, how we use it, how long we keep it and your rights.

Data we collect

• Account: your name, e-mail address and phone number. If you sign in with Google we receive only your name and e-mail (openid, email and profile scopes). • Bookings: trip dates, routes, pick-up and drop-off points, number of travellers and any notes you add. • Location: in the SAYO app it is optional — only when you choose your pick-up point on the map, and only that point is saved with the booking. In the SAYO Service app (drivers and guides) precise location is taken when the partner confirms a trip step, such as arriving at the pick-up point, and only while the app is open; there is no background tracking. That location is saved with the trip step. • Messages and files: trip chat messages, support requests, and the photos and files you attach to them. • Ratings and reviews you leave after a trip. • Device and diagnostics: a push-notification token (Firebase Cloud Messaging), device model, operating-system and app version, and crash logs and diagnostics (Firebase Crashlytics). • Partners (drivers, guides, hotels): identity and licence documents, vehicle photos, photos taken as proof during a trip, payout details, and earnings and debt records.

How we use your data

We use your data to create and manage your account; to arrange and run your bookings; to send booking confirmations and service notifications by push, e-mail and, for partners, Telegram; to handle support requests and disputes (trip-step locations and proof photos serve as evidence); to keep the apps stable using crash reports; and to meet accounting and legal obligations.

Payments

All payments are made in Uzbek soum (UZS) directly to the driver or SAYO agent at the point of service. We do not process card payments on the platform and do not store payment card details. Prices shown in other currencies are indicative only.

Service providers and sharing

We do not sell your personal data and do not share it with third parties for their own purposes. We share your name and contact details with your driver, guide or hotel only as needed to fulfil your booking. To run SAYO we use service providers that process data on our behalf: Google Firebase (push notifications and crash reports), Yandex (maps and address search), and providers for server hosting, file storage and e-mail delivery; partners also receive notifications through Telegram. Data is sent over encrypted connections (HTTPS).

Cookies

We use session cookies to keep you signed in and preference cookies to remember your chosen language and currency. We do not use third-party advertising trackers.

How long we keep data

• Account data: until you delete your account. • Trip, booking and payment records: for the period required by accounting and tax law. After an account is deleted they no longer contain the person's name or contact details; trip chat messages and reviews stay with their trip record. • Files attached to support requests: deleted after 6 months. • Crash reports: kept by Firebase Crashlytics for 90 days. • Push tokens: removed when you delete your account, or when Firebase reports them as no longer valid (for example, after the app is uninstalled).

Your rights and deleting your account

You can edit your profile at any time. • Clients can delete their account in the SAYO app (Profile → Settings → Delete account) or on the website; their personal data is anonymised immediately. • Partners (drivers, guides, hotels) can request deletion as described on our Delete account page. A partner account is first archived and can be restored for 30 days; after that its personal data is anonymised. Anonymising means the name is replaced with "Deleted user" and the phone number, e-mail, profile photo, documents, passport and licence details, payout details and push tokens are deleted, including uploaded photos and documents in our file storage. Trip, booking, payment, review and message records are kept without your identity for the period required by law. For any other data request, contact info@sayo.uz.

How to delete your account (clients and partners)

Governing law

This policy is governed by the laws of the Republic of Uzbekistan. For questions or data requests, contact info@sayo.uz. Operator: TIMUS, MCHJ, 16, 92, Yurtobod MFY, Microdistrict 19, Tashkent 100114, Uzbekistan.