What is an agentic commerce platform?

An agentic commerce platform lets an AI agent handle a purchase on your behalf. You describe the outcome you want, the agent searches across merchants, builds the basket and places the order inside limits you set in advance.

Does Ayo have access to my card?

No. Ayo does not ask for your card details and never holds your money. You pay the merchant, exactly as you do today. Ayo finds the thing, prepares the order and follows it through.

Which merchants does Ayo work with?

Ayo targets the merchants people in the UAE already use every day across food delivery, quick commerce, grocery, retail marketplaces and everyday services. Coverage arrives through partner APIs, affiliate networks, agent checkout protocols and assisted flows.

Can Ayo buy something without asking me?

Only inside the limits you set yourself. By default Ayo proposes and you approve. You can allow hands off execution for known merchants under a spend cap, and you can revoke that at any time.

Legal

Privacy policy

Last updated 21 October 2026

This policy explains what Ayo collects, why we collect it, who else sees it, and how long we keep it. Ayo is operated by Ayo Apps For Computer Systems & Communication Equipment Software Design, a sole establishment licensed in Dubai, United Arab Emirates (licence 1659034). If anything here is unclear, write to us at support@ayo.ae.

What we collect

Account details. Your name, email address or phone number, and how you signed in (Google, Apple, email or phone). Sign in is handled by Google Firebase Authentication.
Your delivery address. The location you confirm, with your apartment or villa number and directions for the rider. When you type an address, the text is sent to Google Maps to suggest matches and place it on the map.
Connected apps. When you connect an app such as Deliveroo, LuLu or Amazon, you sign in on that app's own page inside Ayo. We never see your password or the codes the app sends you. We keep the signed in session the app gives back, encrypted, so Ayo can search, build a basket and, when you approve, place an order on your account. Disconnecting an app stops Ayo from using its session; deleting your account erases it.
Messages. What you write or say to Ayo, and Ayo's answers, so the agent can understand and complete what you asked for.
Answer logs. For each answer Ayo gives, we log your message, Ayo's reply, the items and cards it showed you, and how long each step took. We use these logs to improve Ayo's answers (see Answer quality review).
Feedback. If you rate an answer (thumbs up or down), we store your rating with that answer, together with the reason you picked or the short note you wrote, if any.
Voice. When you use the microphone, the recording is sent to OpenAI to turn it into text, which appears in the message box for you to check. Ayo does not keep the recording.
Orders. What was ordered, from which app and store, at what price, the delivery address and what happened to the order.
Subscription. Whether you have Ayo Plus, which plan, its status and renewal date.
Where you heard of Ayo. The creator code or link you used, if any, and the answer you chose to "How did you hear about Ayo?".
Device and usage data. Your app language, country, notification token, and counts of how the app is used (see Analytics).

Payment data

Ayo never stores card numbers. Orders are paid on the connected app, with the card saved on your account there; when a card has to be added or confirmed, you do it on that app's own page inside Ayo. Each payment is approved by you on your phone before it is made, unless you turn on Full automation, which you can turn off at any time. Ayo Plus is billed by Apple (App Store) or Google (Google Play); they handle your payment details, and RevenueCat, our subscription provider, tells us whether your subscription is active. We receive no card details from either.

Why we use it

To understand your request, search your connected apps and compare options.
To build baskets and, when you approve, place and track orders.
To deliver to the address you confirmed.
To provide Ayo Plus and apply the free plan's limits.
To send you order updates and reminders you can turn off in Profile.
To count how a creator's link performs, and pay creators for paying users they bring.
To check and improve the quality of Ayo's answers.
To detect fraud and abuse and protect your account.
To meet legal, accounting and regulatory obligations.

Who we share it with

The apps you connect, to search them and place your orders, as if you used them yourself.
OpenAI, which runs the AI that reads your messages and voice recordings and writes the answers. OpenAI also runs the automatic review of answer quality. Under OpenAI's terms for businesses, this data is not used to train their models.
Google: Firebase for sign in, analytics and Android notifications, Maps for address suggestions, and Google Play for subscriptions on Android.
Apple for Sign in with Apple, iPhone notifications and App Store subscriptions.
Nuitee (LiteAPI), when you book a hotel: your name and email go to them to make the booking, and you pay on their secure payment form. Ayo never sees your card.
RevenueCat, which manages Ayo Plus subscriptions, and Expo, which delivers notifications to your phone.
PostHog (servers in the EU), for usage analytics, app screen recordings with all text and images hidden, and crash and error reports.
Hosting providers that run our servers, located in Europe.

We do not sell your personal data, and we do not share your messages or orders with advertisers.

Analytics

We use Google Analytics for Firebase to count how the app is used: screens opened, connectors connected, checkouts shown, orders placed and subscriptions started. It is linked to your Ayo user number, never to what you write or say, the products you search, or your address.

We also use PostHog to understand where the app is confusing and to fix crashes. It receives the same counts, and may record how you move through the app's screens (taps and scrolling). In those recordings every text, text field and image is hidden, so your messages, addresses, phone number and card details are never captured. Crash and error reports contain technical details about the failure and your Ayo user number, never what you wrote. Recordings are kept for at most 90 days.

Answer quality review

We keep a log of each answer Ayo gives: your message, Ayo's reply, the items and cards it showed, and timings. Some answers are reviewed automatically by an AI model to detect answers that are inaccurate. Every answer you mark as unhelpful is reviewed this way. The model is provided by OpenAI, the same provider that already writes Ayo's answers. Our team may read answers that the review flags, so we can fix the problem. These logs are kept for as long as the conversation they belong to (see Retention).

Feedback

You can rate any answer with a thumbs up or down, and if you like, pick a reason or write a short note. Your feedback is stored with that answer and used only to improve Ayo.

Creator links

When you open a creator's link (ayo.ae/i/...), we count the visit with the creator's code, your device type and your country. We do not store your IP address or a device identifier. Individual visits are deleted after 90 days; daily totals per creator are kept for their results. If you sign up with a creator's code, we record which code you used.

Notifications

If you allow notifications, your phone's notification token is stored so we can tell you about your orders and connected apps. You can turn them off in Profile or in your phone's settings.

Agent decisions

Ayo uses automated systems to search, compare and prepare orders. An order is only placed after you approve it on your phone, or within Full automation if you turn it on, and you can turn that off at any time. Every step is logged so you can review what the agent did.

Retention

Your account, orders, connected app sessions, devices and preferences are kept while your account is open, and deleted when you delete it.
Conversations are kept for safety and to resolve disputes. Deleting a chat hides it from your app. When you delete your account, your conversations are detached from it, kept for 12 months, then erased.
Answer logs and your feedback on answers follow the conversation they belong to: kept while your account exists, and erased 12 months after you delete your account.
A log of the actions Ayo took for you (for example, that an order was placed and when) is kept for safety, including after your account is deleted, to answer disputes and meet legal obligations. It holds no message text.
Creator link visits are deleted after 90 days.

Your rights

You can delete your account from Profile in the app. You can also ask for a copy of your data, correct it, or object to specific processing: write to support@ayo.ae and we will respond within thirty days.

Security

Data is encrypted in transit, and connected app sessions and keys are encrypted at rest. Access to production systems is restricted and logged. There is no card number in our systems, so there is none to lose.

When you approve a payment with your fingerprint or face, your phone signs the approval with a key that stays on the phone. We keep only the public half of that key, to check that an approval came from your phone.

The waitlist form

When you ask to join the waitlist on this site we receive the name, email address, emirate and message you typed. Cloudflare Turnstile checks that a person and not a script sent it; that check sees your IP address and basic browser signals and is not used to track you. Resend, our email provider, delivers the message to us from do-not-reply@ayo.ae. Ask us and we will remove you from the list.

Children

Ayo is not meant for children under 18, and we do not knowingly collect their data.

Changes

If this policy changes in a way that affects you, we will say so on this page and, where the change is material, tell you in the app before it takes effect.