Updated 21 October 2026
Oilflow EV is provided by Trianta Group Ltd, KN 310 St, Urugwiro, Kamatamu, Kacyiru, Gasabo, Kigali, Rwanda. Contact: [email protected], +250 788 350 252.
You can browse stations, filter connectors, plan trips, get directions, and save favourite stations on your device without registering. Guest favourites and connector preferences remain on that device. Signed-in favourites sync with your account across the phone and web; offline changes sync when you reconnect. You can import guest favourites into your account from Saved stations. If you allow location access, Oilflow uses your location to show nearby stations and estimated distances. You can disable location permission in your device settings.
When you register or sign in, we process your name and email address. Passwords provided to Oilflow are stored as password hashes. If you choose Google sign-in, Google sends identity information that we verify to sign you in or link your existing account. Oilflow does not receive your Google password and does not request access to Gmail, contacts, or Google Drive.
If you register a vehicle, we store the plate, optional make and model, and charging connector. Charging activity is available only when a station operator has linked the relevant charging card to your account. It can include station, charger, time, vehicle plate when recorded, energy and charges. Company staff accounts also have operator-assigned access to business information.
Authorised station and fleet users can manage charging accounts, prepaid balances, loyalty benefits, invoices and records of money received. We process the amount, payment method, transaction or refund reference, relevant charging record and account identifiers. The app does not ask you to enter a bank-card number or card security code. A payment reference recorded by station staff is not a claim that Oilflow processed the payment itself.
Explore asks for foreground location permission to frame your position and the nearest matching station. You can decline permission and browse or search manually. Location can also be used for nearby results, trip planning and directions. Online trip requests send the requested start, destination and place-search terms to Oilflow’s routing service. Route inputs can remain in its memory cache until replaced or the service restarts; infrastructure and provider logs are handled separately.
Map tiles are requested from OpenStreetMap. Those requests expose your IP address, application or browser information and the map areas requested. Online 3D terrain and imagery can be requested from Cesium and its imagery providers when that feature uses online data. Map requests can reveal the area you are viewing, including an area around your current position. These providers operate under their own privacy notices: OpenStreetMap Foundation and Cesium.
If you select Waze, Google Maps or Apple Maps for directions, the destination is passed to the provider you choose. Google sign-in processes your selected Google identity under Google’s privacy notice; Oilflow receives the identity information needed for authentication and account linking. Connector-comparison photos are processed on your device and are not uploaded by that feature.
On supported iPhones, active offline navigation can continue using location while the screen is locked. Ending guidance stops its navigation updates. The Android release requests foreground location only. Your last planned trip and cached preferences can remain on your device until cleared.
Open Account → App settings → Privacy & my data in the app:
To request removal of your Driving profile or personal account, open the account-deletion controls in the app or visit Oilflow EV account deletion. The current release provides a support-assisted request path. Contact [email protected] using the address associated with your account, state whether you want the Driving profile or full personal account removed, and provide the minimum information needed to identify it. Do not send your password. We verify the request and explain the completion timetable and any records that must remain.
Where scheduled deletion is available, the account screen displays its deadline and cancellation controls. Automated 30-day scheduling is not enabled on the current production account service; a policy target does not by itself schedule your request. Company access must be removed before a shared personal login can be deleted. Removing data cannot be undone after completion.
Manage location and camera permissions through your phone’s app settings. Clearing local data does not revoke those permissions.
The updated mobile app can save selected Work session-history lists on the device for faster reopening and offline viewing. These lists can include session IDs, vehicle plates, stations, charging times, energy, tariff and money totals, payment status and attendant names. They do not contain login credentials, payer phone numbers or complete receipts. Saved lists are separated by user, company, role and selected filters. Their seven-day expiry is checked when accessed; signing out, expired Work access or clearing device data removes the local copy. Device storage cleanup or cache limits may remove it earlier. Offline copies can be out of date; Oilflow checks current access and synchronises new and corrected records when online. Removing this local copy does not delete station operators’ original charging or financial records.
The native app stores your session credentials in the iPhone Keychain or encrypted Android device storage, together with your selected workspace. It does not save your password. Signing out removes the saved session. Personal sessions expire after 30 days of inactivity and renew while you use authenticated features. Business access is checked separately. The web app saves your session in this browser so closing and reopening it does not sign you out. Sign out on shared devices; clearing browser site data also removes the saved login.
We use account and vehicle information to provide the features you request. Operational logs can include network and request metadata, such as IP addresses, request times, endpoints and response status, for security and troubleshooting. Assigned company roles control access to business tools. Removing a vehicle or deleting your Driving profile does not delete an operator's charging and billing records. Deleting the Driving profile also does not remove an existing company staff identity or its work access.
You can remove saved vehicles and unlink charging cards in the app. For help accessing, correcting or deleting personal information, contact [email protected]. Some charging, billing and business records may need to be retained to meet contractual or legal obligations.
Oilflow’s application and database hosting uses Contabo infrastructure in France. Cloudflare provides network delivery and security. Requests to Google identity services, OpenStreetMap, Cesium or a directions provider you choose may be processed internationally under that provider’s arrangements. We do not claim that all processing, logs or recovery copies stay in Rwanda. Backup and recovery-copy handling is reviewed separately when a deletion request is processed.
Charging operators and fleet organisations have role-controlled access to the records needed to provide charging and administer their business. Their own notices can also apply to records they control. Trianta uses service providers for hosting, security and the requested features; requests to independent map and identity providers are described above.
We use account information while providing your account and process verified removal requests through the deletion path above. Removing personal account access does not automatically erase an operator’s original charging records, invoices, payment ledger or records needed for an unresolved dispute or another documented obligation.
Our approved schedule targets a 30-day grace period following a verified personal-account deletion request, ten years for charging financial records and financial wallet entries measured from 1 January after the relevant fiscal year, two years for support correspondence after case closure, and 90 days to one year for security records depending on the stream. These are retention targets; automatic expiry is not enabled for every record category. Requests are currently handled with support, which confirms the applicable timetable and exceptions. Personal-session expiry after inactivity is an authentication rule, separate from account deletion.
Operational logs use rolling rotation and can contain IP addresses, request metadata, response status and technical information needed for security and troubleshooting. Infrastructure-provider logs and recovery copies can have separate schedules. Deleting a profile does not establish that every historical recovery copy was immediately removed; any remaining recovery-copy handling must be considered as part of the request.
For access, correction or deletion requests contact [email protected]. Data Protection Officer: Lambert RULINDANA, [email protected], +250 781 187 555. Trianta Group Ltd, KN 310 St, Urugwiro, Kamatamu, Kacyiru, Gasabo, Kigali, Rwanda.
We will update this notice when Oilflow's handling of personal information changes. The current notice will be available on the Oilflow website.