Privacy Policy

Effective October 12, 2026

Spokes, Inc. ("Spokes", "we") makes Spokes and Wildflower. This policy explains what information we collect when you use our websites, the Wildflower app for iPhone and Android, our APIs and our other services; who sees it; how long it's kept; and the choices you have.

Wildflower is software for work. Most people use it because an organization invited them: a carrier, fleet or other business they drive, dispatch or ship for. That organization controls the work records it keeps in Wildflower and decides which of its people can see them.

The short version

We don't sell your information, show ads, or track you across other companies' apps and websites.
The Wildflower app shares your location in the background only while you're on shift, with the organizations you're working for. It stops when you end your shift.
You can delete your account in the app, on the web, or by emailing us. Organizations keep the work records the law requires.

Your account

We collect your name, email address, phone number, profile photo and password, or the account you sign in with (Apple, Google, Microsoft or GitHub). Your password is stored only in hashed form. Your organizations see your profile, and the people in your conversations see your name and photo. When your organization shares you with a partner organization, that partner sees what your organization chooses to share.

If you join the waitlist, we keep the email address or phone number you give us so we can send you an invitation.

Your location

While you're on shift (available, busy or on a break) with an organization, the Wildflower app collects your precise location and shares it with that organization's dispatchers, even when the app is closed or not in use. Dispatchers use it to offer you nearby jobs and give customers arrival times, and it records when you arrive at and leave each stop. Collection stops when you end your shift or sign out. We don't keep locations from while you're off shift.

With each location, the app sends:

your position and its accuracy, speed, heading and altitude;
the distance you've driven on shift;
whether you're moving or still, and the motion activity the phone detects (such as driving or walking), which the app also uses to save battery;
arrivals at and departures from stops; and
the phone's battery level and whether it's charging.

The app also uses your location at these other times:

when you take proof of delivery, such as a photo or signature, its time and place are saved with it;
when you choose to share your location once to answer a job offer while you're off shift; and
while the app is open, to show where you are on job maps. This stays on your phone.

Who sees your location:

people in the organization you're on shift with whose role lets them see locations, such as dispatchers;
partner organizations, when your organization shares you or a job you're doing with them and chooses to share location;
the organization's own systems and the services it connects, through its API keys and webhooks. Its location webhooks include everything listed above; and
customers, who see when each stop was reached and left, and pickup estimates, but not your live location.

You can turn off location access in your phone's settings at any time, but you need to allow it, including "Always" (iPhone) or "Allow all the time" (Android), to go on shift.

Your work

Wildflower keeps the records of the work you do: jobs, stops and tasks; proof of delivery, including photos, signatures (with the signer's printed name) and scanned barcodes; notes and problems you report; your shifts, breaks and availability; pay amounts for jobs and offers; vehicles and equipment you add, such as a VIN, plate, year, make and model; and compliance items you send, such as a driver's license, insurance or registration, with their photos and files. These belong to the organization you did the work for. Its people see them according to their permissions, its API keys and webhooks can read them, and partner organizations see what it shares with them.

If you save places or say where you're headed, only you see the places themselves. Dispatchers see only the city you're headed to and when. If you choose a place you usually start from, automatic dispatch can plan your first jobs of the day from it.

Photos and files

The app uses your camera, photo library and files only when you choose to take or add something: in chat, for proof of delivery, for a compliance document, for your profile photo, or to enter a job from a picture. We receive only the photos and files you pick, not your whole library.

AI features

A few features use an AI service provider to read what someone gives them. Nothing is sent until someone uses one of them.

Entering a job from a message, photo or document. We send what you add to OpenAI with your organization's customers, recent saved places, services and vehicle types, then the contacts and places of the customer it picks, so it can fill in a draft of the job for you to check.
Setting up an EDI connection. The documents and sample files an organization uploads for a trading partner are read to draft the connection's setup.
Vehicle costs. To estimate a vehicle's fuel economy and running costs, we send its year, make, model, age and yearly miles, and nothing about you.

These providers process the information only to answer us. OpenAI doesn't use what we send it to train its models.

Messages

Wildflower has chat. We store your messages and the photos you send, with their reactions and read status. The people in a conversation see them and see when you're typing, including people from partner organizations in shared conversations. People in your organization can see whether you're online or away.

Anyone can report a message or a person in the app, and block a person. Spokes staff review every report and act on it within 24 hours. To review one, staff read the reported message and the messages around it. They can remove a message for everyone and disable an account that breaks the community rules in our Terms.

Your phone

The app sends us a random identifier it creates for each install; the phone's model and maker; its operating system, memory and processor; the app's version; whether notifications and location are allowed and whether GPS is on; and the phone's clock, so times line up. Owners and administrators of your organizations see this for the phones you use for work, and their API keys can read it. We also keep a push notification token, used only to send you notifications.

Payments and websites

Organizations set up billing and payouts on the web. Our payment provider collects and checks bank details there; the Wildflower app doesn't ask for them. When you use our websites and APIs, our servers record technical information such as your IP address and browser, to keep the service secure and working. We record each request made with an organization's API keys, for that organization's usage history.

What we don't collect

Wildflower doesn't access your contacts, calendar, microphone or browsing history, and we don't use advertising identifiers. There are no ads in our apps, and we don't track you across apps and websites owned by other companies.

How we use information

We use information to:

sign you in and keep your account secure;
run the work your organizations do in Wildflower, including dispatch, offers, arrival times, pay and compliance;
send notifications, texts and emails you need for that work;
review reports, prevent abuse and fraud, and enforce our Terms;
answer support requests, fix problems and keep the service reliable; and
meet our legal obligations.

Your organization owns its business and operational data. We don't use it to compete with an organization or give another one an undisclosed advantage. Optional network participation and sharing with partner organizations are off by default, and happen only when an authorized person in the organization turns them on.

When information leaves Spokes

We share information only:

with the people and organizations described above;
with service providers that work for us: hosting and databases, file storage, maps and address search, push notifications (through Apple and Google), text messages and email, payments, and the AI features described above;
with integrations an organization connects, through its API keys and webhooks;
to comply with law, or to protect people, rights and the service's security; or
when you ask us to.

We don't sell personal information or share it for advertising.

Signing in with another account

If you sign in with Apple, Google, Microsoft or GitHub, that provider gives us basic identity information under your settings with it, usually an account identifier, name, email address and profile image. We use it only to sign you in, link your account and protect the service, and we don't read anything else from your account with that provider. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Deleting your account

You can delete your Wildflower account:

in the app: Settings, tap your name, then Delete account;
on the web: sign in, then open your name › Profile › Delete account;
or by emailing [email protected] from the address on your account.

wildflower.spokes.ai/delete-account explains the steps without signing in.

Right away, you're signed out on every phone, Wildflower stops sharing your location, dispatch stops sending you work, and your organizations are told so they can hand off your upcoming jobs.

30 days after you ask, we delete your sign-in and profile (name, photo, email address, phone number and password), the places you saved and where you said you were headed, your phones and notification settings, and the vehicles and equipment you added. A vehicle you share with another driver stays with them. Until then, you can sign in to cancel and keep your account. Copies in our backups are removed as those backups expire.

What your organizations keep: the work records the law requires them to keep, under your name: jobs you did and their proof, your shifts and the location recorded while you were working, pay and tax records, compliance documents and job messages. They keep them only as long as the law requires.

An organization's owner can ask Spokes to close the whole organization. Spokes reviews each request and contacts the owner, the owner can get a copy of the organization's data, and the organization closes within 30 days.

How long we keep information

We keep your account information until you delete your account. Organizations keep their work records, including the location recorded while you worked for them, while they need them for their work and as the law requires. We keep waitlist entries until you ask us to remove them.

Your choices

Change your name, photo, email address and phone number in Profile.
Turn location and notifications on or off in your phone's settings. Ending your shift stops location sharing.
Delete your account as described above.
Ask us for a copy of your information, or to correct or delete it, at [email protected].

Some requests about work records go to the organization that keeps them, and we'll help you reach it.

Security

Information travels between our apps and our servers over encrypted connections.

Children

Wildflower is for work and isn't meant for anyone under 18.

Changes

If this policy materially changes, we'll update the date above and give reasonable notice.

Contact

Questions and requests are welcome at [email protected].