Data collections and uses

1. The data we collect

   Uva collects personal data:

   • provided by users to Uva, such as during account creation

   • created during use of our services, such as location, app usage, and device data

   • from other sources, such as other users or account owners, business partners, vendors, insurance and financial solution providers, and governmental authoritiesThe following personal data is collected by or on behalf of Uva

   The following personal data is collected by or on behalf of Uva:

   1. Data provided by users. This includes:

      • User profile: We collect data when users create or update their Uva accounts. This may include their name, email, phone number, login name and password, address, profile picture, payment or banking information (including related payment verification information), driver’s license and other government identification documents (which may indicate document numbers as well as birth date, gender, and photo). This also includes vehicle or insurance information of drivers and delivery persons, emergency contact information, user settings to provide services using Uva apps.

      • We may use the photos submitted by users to verify their identities, such as through facial verification technologies. Background check and identity verification (drivers and delivery persons). This may include information such as driver history or criminal record (where permitted by law), license status, known aliases and prior addresses, and right to work. This information may be collected by an authorized vendor on Uva’s behalf. We also verify the identities of riders, and of delivery recipients who request alcohol delivery.

      • Demographic data: We may collect demographic data about users, including through user surveys. In some countries, we may also receive demographic data about users from third parties.

        We may also infer demographic data from other data collected from users. For example, where necessary to enable features that allow women to provide or receive services from other women, we may infer gender using their first name. In such cases, we enable users to change their gender if necessary via in-app settings.

      • User content: We collect the data submitted by users when they contact Uva customer support, provide ratings or compliments for other users, restaurants or merchants, or otherwise contact Uva. This may include feedback, photographs or other recordings collected by users, including audio or video recordings (such as from dashcams) submitted by users in connection with customer support. This also includes metadata relating to the method you use to communicate with Uva.

   2. Data created during use of our services. This includes:

      • Location data (driver and delivery person): We collect drivers’ and delivery persons’ precise or approximate location data, including to enable rides and deliveries, to enable ride/delivery tracking and safety features, to prevent and detect fraud, and to satisfy legal requirements. Uva collects this data when the Uva app is running in the foreground (app open and on-screen) or background (app open but not on-screen) of their mobile device.

      • Location data (delivery recipients). We collect delivery recipients’ precise or approximate location data to enable and enhance use of our apps, including to improve pick-ups, facilitate deliveries, enable safety features, and prevent and detect fraud.

        We collect such data from users’ mobile devices if they enable us to do so. Uva collects such data from the time a ride or delivery is requested until it is finished (and may indicate such collection via an icon or notification on your mobile device depending on your device’s operating system), and any time the app is running in the foreground (app open and on-screen) of their mobile device.

        Delivery recipients may use the Uva apps without enabling Uva to collect precise location data from their mobile devices. However, this may affect features in the Uva apps. For example, a user who has not enabled location data collection will have to manually enter their pick-up address.

      • Transaction information: We collect transaction information related to the use of our services, including the type of services requested or provided, order details, payment transaction information (such as a restaurant’s or merchant's name and location and amount of transaction), delivery information, date and time the service was provided, amount charged, distance traveled, and payment method. Additionally, if someone uses your promotion code, we may associate your name with that person.

      • Usage data: We collect data about how users interact with our services. This includes data such as access dates and times, app features or pages viewed, app crashes and other system activity, and type of browser. We may also collect data regarding the third-party sites or services used before interacting with our services, which we use for marketing. (Please see "How We Use Data" below for more information on how we market our services to users).

        In some cases, we collect this data through cookies, pixels, tags, and similar tracking technologies that create and maintain unique identifiers. To learn more about these technologies, please see our Cookie Notice.

      • Device data: We may collect data about the devices used to access our services, including the hardware models, device IP address or other unique device identifiers, operating systems and versions, software, preferred languages, advertising identifiers, device motion data, and mobile network data.

      • Communications data: We enable users to communicate with each other and Uva through Uva’s mobile apps and websites. For example, we enable drivers, and delivery persons and delivery recipients, to call, text, or send other files to each other (generally without disclosing their telephone numbers to each other). To provide this service, Uva receives some data regarding the calls, texts, or other communications, including the date and time of the communications and the content of the communications. Uva may also use this data for customer support services (including to resolve disputes between users), for safety and security purposes, to improve our services and features, and for analytics.

   3. Data from other sources. These include:

      • Users participating in our referral programs. For example, when a user refers to another person, we receive the referred person’s personal data from that user.

      • Uva account owners who request services for or on behalf of other users, or who enable such users to request or receive services through their accounts. This includes owners of Uva for Business accounts.

      • users or others providing information in connection with claims or disputes.

      • Uva business partners through which users create or access their Uva account, such as payment providers, social media services, or apps or websites that use Uva’s APIs or whose APIs Uva uses.

      • Uva business partners in connection with debit or credit cards issued by a financial institution in partnership with Uva to the extent disclosed in the terms and conditions for the card.

      • vendors who help us verify users’ identity, background information, and eligibility to work, or who screen users in connection with sanctions, anti-money laundering, or know-your-customer requirements

      • insurance, vehicle, or financial services providers for drivers and/or delivery persons

      • partner transportation companies (for drivers or delivery persons who use our services through an account associated with such a company)

      • publicly available sources

      • marketing service providers or data resellers whose data Uva uses for marketing or research

      • law enforcement officials, public health officials, and other government authorities Uva may combine the data collected from these sources with other data in its possession.

2. How we use personal data

   Uva uses personal data to enable reliable and convenient transportation, delivery, and other products and services. We also use such data:

   • to enhance the safety and security of our users and services

   • for customer support

   • for research and development

   • to enable communications between users

   • to send marketing and non-marketing communications to users

   • in connection with legal proceedings

   Uva does not sell or share user personal data with third parties for their direct marketing, except with users’ consent.

   We use personal data we collect:

   1. To provide our services. Uva uses data to provide, personalize, maintain, and improve our services.

      This includes using data to:

      • create/update accounts

      • enable transportation and delivery services (such as using location data to facilitate a pick up or delivery), features that involve data sharing (such as fare splitting, ETA sharing, and ratings and compliments), and accessibility features to facilitate use of our services by those with disabilities

      • process payments

      • track and share the progress of rides or deliveries

      • personalize users’ accounts. We may, for example, present an Uva user with personalized restaurant or food recommendations based on their prior orders.

      • personalize users’ accounts. We may, for example, present an Uva user with personalized restaurant or food recommendations based on their prior orders.

      • perform necessary operations to maintain our services, including to troubleshoot software bugs and operational problems; to conduct data analysis, testing, and research; and to monitor and analyze usage and activity trends.

      Uva performs the above activities, including the collection and use of location data for purposes of these activities, on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users

   2. Safety and security. We use personal data to help maintain the safety, security, and integrity of our services and users. This includes

      • verifying users' identity and eligibility to provide transportation or deliveries, including through reviews of background checks, where permitted by law, to help prevent use of our services by unsafe drivers.

      • using data from drivers’ or delivery persons’ devices to detect unsafe driving behavior such as speeding or harsh braking and acceleration, and to inform them of safer driving practices. We also use data from delivery persons’ devices to verify the type of vehicles they used to provide deliveries.

      • using device, location, user profile, usage, and other data to prevent, detect, and combat fraud. This includes identifying fraudulent accounts or uses of our services, preventing use of our services by unauthorized drivers or delivery persons, verifying user identities in connection with certain payment methods, and preventing and combating unauthorized access to users’ accounts.

      • using user ratings, reported incidents, and other feedback to encourage compliance with our guidelines and as grounds for deactivating users with low ratings or who otherwise violated such guidelines in certain countries.

      • sharing information regarding serious driver or delivery person safety incidents or compliance with local regulations with third parties, including other companies who enable users to request or provide rides or delivery services, or intermediaries who collect and report such information for multiple companies, to prevent drivers or delivery persons who may pose a safety risk to the platform or its users from using Uva’s or those other companies’ services. We may also share with third parties, including those affected by such incidents, whether the incidents result in account deactivation.

      • using ratings, usage and other data to prevent matching of riders and drivers for whom there is higher risk of conflict (for instance, because one user previously gave the other a one-star rating).

      Uva performs the above activities on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users, and/or for purposes of the legitimate safety and security interests of Uva or other parties, including users and members of the general public.

   3. Customer support. Uva uses the information we collect (which may include call recordings) to provide customer support, including to investigate and address user concerns and to monitor and improve our customer support responses and processes.

      Uva performs the above activities on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users.

   4. Research and development. We may use personal data for testing, research, analysis, product development, and machine learning to improve the user experience. This helps us make our services more convenient and easy-to-use, enhance the safety and security of our services, and develop new services and features.

      Uva performs the above activities on the grounds that they are necessary to fulfil our obligations to users under our Terms of Use or other agreements with users in improving our existing services and features, or for purposes of Uva’s legitimate interests developing new services and features.

   5. Enabling communications between users. For example, a driver may message or call a rider to confirm a pickup location, a rider may contact a driver to retrieve a lost item, or a restaurant or delivery person may call a delivery recipient with information about their order.

      Uva performs the above activities on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users.

   6. Marketing. Uva may use personal data to market our services to our users. This includes sending users communications about Uva services, features, promotions, sweepstakes, studies, surveys, news, updates, and events. We may do so through various methods, including email, text messages, push notifications, in app communications and ads, and ads on third party platforms.

      We may also inform users about products and services offered by Uva partners. For example, we may provide recommendations, promotions, or ads for Uva partners based on users’ past delivery orders. Although we inform users about products and services offered by Uva partners, we do not sell users’ personal data to, or share it with, such partners or others for purposes of their own direct marketing or advertising, except with users’ consent.

      We may use the data we collect, including in combination with advertising partners’ data, to personalize and improve the marketing communications (including ads) that we send on and off Uva’s apps and websites, including based on user location, use of Uva’s services, and user preferences and settings. For example, we share user data (such as hashed email address, usage information, and device or user identifiers) with Facebook and TikTok to personalize and improve our ads for Uva’s services.

   7. Non-marketing communications. Uva may use personal data to generate and provide users with receipts; inform them of changes to our terms, services, or policies; or send other communications that aren’t for the purpose of marketing the services or products of Uva or its partners.

      Uva performs the above activities on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users, or for purposes of Uva’s and it’s users legitimate interests in informing users about events that may have an impact on how they can use Uva services.

   8. Legal proceedings and requirements. We may use personal data to investigate or address claims or disputes relating to use of Uva’s services, to satisfy requirements under applicable laws, regulations, or operating licenses or agreements, or pursuant to legal process or governmental request, including from law enforcement.

      Uva performs the above activities on the grounds that they are necessary for purposes of Uva’s legitimate interests in investigating and responding to claims and disputes relating to use of Uva’s services and features, and/or necessary for compliance with applicable legal requirements.

   9. Automated decision-making We use personal data to make automated decisions relating to use of our services. This includes:

      • Enabling dynamic pricing, in which the price of the delivery fee for Uva orders, is determined based on constantly varying factors such as the estimated time and distance, the predicted route, estimated traffic, and the number of drivers using Uva at a given moment.

      • matching available delivery persons to users requesting services. Users can be matched based on availability, proximity, and other factors such as likelihood to accept a trip based on their past behavior or preferences.

      • determining user ratings, and deactivating users with low ratings.

      • flagging users who are identified as having engaged in fraud, unsafe activity, or other activities that may harm Uva, its users, and others. In some cases, such as when a user is determined to be abusing Uva’s referral program or has submitted fraudulent documents, such behavior may result in automatic deactivation, or in the European Union or where otherwise required by law, deactivation after human review.

      Click the links in this section for more information about these processes. To object to a deactivation resulting from these processes, please contact Uva customer support.

      Uva performs the above activities on the grounds that they are necessary to fulfill our obligations to users under our Terms of Use or other agreements with users, or on the grounds that they are necessary for purposes of the legitimate interests of Uva, its users and others.

3. Cookies and third-party technologies

   Uva and its partners use cookies and other identification technologies on our apps, websites, emails, and online ads for purposes described in this notice.

   Cookies are small text files that are stored on browsers or devices by websites, apps, online media, and advertisements. Uva uses cookies and similar technologies for purposes such as:

   • authenticating users

   • remembering user preferences and settings

   • determining the popularity of content

   • delivering and measuring the effectiveness of advertising campaigns

   • analyzing site traffic and trends, and generally understanding the online behaviors and interests of people who interact with our services

   We may also allow others to provide audience measurement and analytics services for us, to serve advertisements on our behalf across the Internet, and to track and report on the performance of those advertisements. These entities may use cookies, web beacons, SDKs, and other technologies to identify the devices used by visitors to our websites, as well as when they visit other online sites and services.

4. Data sharing and disclosure

   Some of Uva’s services and features require that we share personal data with other users or at a user’s request. We may also share such data with our affiliates, subsidiaries, and partners, for legal reasons or in connection with claims or disputes.

   Uva may share personal data:

   1. With other users

      This includes sharing

      • delivery recipients’ first name, delivery address, and order information with their delivery person and restaurant or merchant. We may also share ratings and feedback, or other information to the extent required by law, with the restaurant partner and delivery person.

      • for drivers and delivery persons, we may share data with the rider(s), delivery recipient(s) and restaurants or merchants, including name and photo; vehicle make, model, color, license plate, and vehicle photo; location (before and during trip); average rating provided by users; total number of trips; period of time since they signed up to be a driver or delivery person; contact information (if permitted by applicable laws); and driver or delivery person profile, including compliments and other feedback submitted by past users.

        We also provide riders and delivery recipients with receipts containing information such as a breakdown of amounts charged, driver or delivery person first name, photo, and route map. We also include other information on those receipts if required by law. for those who participate in Uva’s referral program, we share certain personal data of referred users, such as trip count, with the user who referred them, to the extent relevant to determining the referral bonus.

   2. At the user’s request

      This includes sharing data with:

      • Other people at the user’s request. For example, we share a user’s ETA and location with a friend when requested by that user, or a user’s trip information when they split a fare with a friend.

      • Uva business partners. For example, if a user requests a service through a partnership or promotional offering made by a third party, Uva may share certain data with those third parties. This may include, for example, other services, platforms, apps, or websites that integrate with our APIs; vehicle suppliers or services; those with an API or service with which we integrate; or restaurants, merchants or other Uva business partners and their users in connection with promotions, contests, or specialized services.

   3. With the general public

      Questions or comments from users submitted through public forums such as Uva blogs and Uva social media pages may be viewable by the public, including any personal data included in the questions or comments submitted by a user.

   4. With the Uva account owner

      If a user requests transportation or places an order using an account owned by another party, we may share their order or trip information, including location data, with the owner of that account. This occurs, for example, when:

      • a driver or delivery person uses an account owned by or associated with an Uva partner transportation company or restaurant

   5. With Uva subsidiaries and affiliates

      We share personal data with our subsidiaries and affiliates to help us provide our services or conduct data processing on our behalf. For example, Uva processes and stores such data in the United States on behalf of its international subsidiaries and affiliates.

   6. With Uva service providers and business partners

      Uva provides personal data to vendors, consultants, marketing partners, research firms, and other service providers or business partners. These include:

      • payment processors and facilitators

      • background check and identity verification providers

      • cloud storage providers

      • Google, in connection with the use of Google Maps in Uva’s apps (see Google’s privacy policy for information on their collection and use of data)

      • social media companies, including Facebook and TikTok, in connection with Uva’s use of their tools in Uva’s apps and websites (see Facebook’s and TikTok’s privacy policies for information on their collection and use of data)

      • Marketing partners and marketing platform providers, including social media advertising services, advertising networks, third-party data providers, and other service providers to reach or better understand our users and measure advertising effectiveness

      • research partners, including those performing surveys or research projects in partnership with Uva or on Uva’s behalf

      • vendors that assist Uva to enhance the safety and security of its apps

      • consultants, lawyers, accountants, and other professional service providers

      • insurance and financing partners

      • airports

      • providers of bike and scooters that can be rented through Uva apps, such as Lime

      • restaurants, grocery stores and other merchants from whom delivery recipients place orders, as well as partners and/or their point of sale providers, including for order fulfillment, delivery, communications and marketing purposes

      • third-party vehicle suppliers, including fleet and rental partners

   7. For legal reasons or in the event of a dispute

      Uva may share users’ personal data if we believe it’s required by applicable law, regulation, operating license or agreement, legal process or governmental request, or where the disclosure is otherwise appropriate due to safety or similar concerns.

      This includes sharing personal data with law enforcement officials, public health officials, other government authorities, airports (if required by the airport authorities as a condition of operating on airport property), or other third parties as necessary to enforce our Terms of Service, user agreements, or other policies; to protect Uva’s rights or property or the rights, safety, or property of others; or in the event of a claim or dispute relating to the use of our services. In the event of a dispute relating to use of another person’s credit card, we may be required by law to share your personal data, including trip or order information, with the owner of that credit card.

      This also includes sharing personal data with others in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.

   8. With consent

      Uva may share a user’s personal data other than as described in this notice if we notify the user and they consent to the sharing.

5. Data retention and deletion

   Uva retains user data for as long as necessary for the purposes described above.