Privacy & Policy
Last updated: October 3, 2025
Who we are
Udrivy (“Udrivy”, “we”, “us”, “our”) operates a digital marketplace that connects vehicle providers (rental agencies and other professional fleets) with renters (the “Platform”). This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit our website, use our mobile app, or interact with our services.
Scope
This Policy applies to personal data processed through the Platform, support channels, marketing properties, APIs, and integrations with third-party services (payments, KYC/identity verification, telematics, analytics). If a third party provides services to you directly (e.g., an insurer or a payment provider), their privacy terms also apply.
Data Controller
For Platform operations, Udrivy is the data controller. Contact:
Udrivy — Legal & Compliance
Email: privacy@udrivy.net
Address: Abu Dhabi, UAE
If we act as a processor for certain services on behalf of providers, we will state this clearly.
Personal Data We Collect
Data you provide
• Account data: name, email, phone, password.
• Identity & license data (KYC): government ID, driver’s license details, selfies/face scan for match, date of birth.
• Profile & preferences: language, notification choices, saved locations, vehicle preferences.
• Booking & trip data: rental dates, pickup/return points, messages between renter and provider, claims and support tickets.
• Payment data: billing address, masked card details/token (full card details handled by our payment partners).
• Business data (for providers): trade license, VAT/TRN, contact person, payout details (IBAN), fleet info.
Data we collect automatically
• Device & usage: IP address, device identifiers, app version, browser, OS, referral URLs, session logs.
• Location & telematics (where enabled): GPS pings during rental, lock/unlock events, odometer, fuel/charge level, diagnostic alerts, incident flags.
• Cookies & similar tech: analytics, performance, preference cookies, and advertising tags (see “Cookies” below).
Data from third parties
• Identity/KYC vendors: verification results, fraud/sanctions screening, watchlists checks.
• Payment partners: payment status, authorization results, risk scores, chargebacks.
• Providers/agencies: vehicle availability, condition photos, incident reports.
• Public/official sources: traffic fines, toll data, police report references (where applicable).
How We Use Personal Data (Purposes & Legal Bases)
Account creation & access
• To register your account, authenticate you, and maintain your profile.
• Legal bases: contract performance; legitimate interests (secure access).
Identity verification & eligibility to drive
• To verify your identity and driver’s license; prevent fraud and misuse.
• Legal bases: contract performance; legitimate interests (safety & fraud prevention); legal obligation (where KYC is required).
Bookings, operations & customer support
• To process searches, bookings, changes/cancellations, in-app messaging, check-in/out, and support requests.
• Legal bases: contract performance; legitimate interests (quality of service).
Payments & payouts
• To process charges, holds, refunds, claims, provider payouts, and tax/VAT documentation.
• Legal bases: contract performance; legal obligation (tax); legitimate interests (financial operations).
Telematics & connected access (keyless)
• To enable smartphone lock/unlock, confirm vehicle handover, calculate mileage/usage, and investigate incidents.
• Legal bases: contract performance; legitimate interests (safety, asset protection, dispute resolution); consent where required.
Safety, security & fraud prevention
• To detect and prevent fraud, abuse, sanctions violations, and unsafe behavior.
• Legal bases: legitimate interests; legal obligation (where applicable).
Marketing & communications
• To send service notifications, updates, and—if you consent or as permitted by law—marketing communications.
• Legal bases: legitimate interests; consent (for certain channels); contract performance (service messages).
Analytics & product improvement
• To measure performance, fix bugs, improve UX, and develop new features.
• Legal bases: legitimate interests (service improvement).
Legal compliance & dispute handling
• To comply with law enforcement requests, court orders, tax/VAT rules, insurance requirements, and to manage disputes/claims.
• Legal bases: legal obligation; legitimate interests (defense of rights).
Special Categories and Sensitive Data
We do not intentionally collect sensitive health data.
Biometric data (facial template for selfie/ID match) may be processed strictly for identity verification and fraud prevention, by vetted KYC providers, and retained only as necessary (see “Retention”).
Cookies and Similar Technologies
We use cookies, SDKs, and pixels to:
• keep you logged in, remember preferences, and secure sessions;
• measure traffic and usage (analytics);
• support advertising/retargeting where applicable.
You can manage preferences via our Cookie Settings banner or your browser/app settings. Some cookies are essential and cannot be switched off.
Sharing Your Data
We share data only as needed for the purposes above:
• Providers (agencies/fleets): booking details, driver eligibility confirmation, pickup/return info, relevant contact data.
• Payment processors: card tokenization, payments, fraud checks, chargebacks.
• KYC/identity & risk vendors: ID verification, selfie match, fraud/sanctions screening.
• Telematics partners: device provisioning, lock/unlock, odometer and diagnostics data collection.
• Insurance partners: policy issuance (if offered), claims support, incident documents.
• Analytics & infrastructure: hosting, storage, monitoring, error logging, push notifications.
• Authorities & law enforcement: when required by law or to protect rights, safety, or property.
• Corporate events: in case of merger, acquisition, financing, or asset transfer (with notice where required).
We do not sell your personal data.
Data Retention
We retain personal data only as long as necessary for the purposes stated or as required by law. Typical periods:
• Account data: while your account is active and for a reasonable period thereafter for legal/operational purposes.
• KYC/identity data: minimum needed to meet verification, compliance, and fraud prevention requirements, then securely deleted or minimized.
• Booking & financial records: as required by tax and accounting law (e.g., 5–10 years, subject to jurisdiction).
• Telematics & access logs: for the rental period and a limited period after for safety, claims, and disputes.
• Marketing data: until you withdraw consent or opt out.
Exact periods may vary; we apply data minimization and secure deletion.
Security
We use administrative, technical, and organizational measures to protect data, including encryption in transit, network segmentation, access controls, and monitoring. No system is 100% secure; you are responsible for keeping your credentials confidential and reporting any suspected compromise immediately.
International Transfers
We may store or process data in the UAE and other countries. Where data is transferred internationally, we implement safeguards such as contractual clauses and security measures to protect your information and ensure compliance with applicable law.
Your Rights
Depending on your location and applicable law (e.g., UAE PDPL, GDPR in the EEA/UK, similar frameworks elsewhere), you may have rights to:
• access and obtain a copy of your data;
• rectify inaccurate or incomplete data;
• erase data (subject to legal retention obligations);
• restrict or object to certain processing;
• portability of certain data;
• withdraw consent where processing is based on consent;
• lodge a complaint with a supervisory authority.
To exercise rights, contact us at [privacy@udrivy.net]. We may verify your identity before acting on your request.
Children
The Platform is not intended for individuals under the legal driving age. We do not knowingly collect data from minors. If you believe a minor has provided data, contact us to remove it.
Automated Decision-Making
We may use automated risk and fraud screening and KYC checks to protect users and providers. You can contact us to request human review where required by law.
Third-Party Links
The Platform may contain links to third-party sites or services. We are not responsible for their privacy practices. Review their policies before providing personal data.
Changes to this Policy
We may update this Policy from time to time. The “Last updated” date indicates the latest revision. Significant changes will be notified via the Platform or by email where appropriate. Continued use of the Platform after changes means you accept the updated Policy.
Contact Us
Udrivy — Privacy Team
Email: privacy@udrivy.net
Address: Abu Dhabi, UAE
If you are located in the EEA/UK, you may have the right to contact your local data protection authority. We will cooperate with competent authorities in the UAE and other jurisdictions as required.
Download From AppStore
Scan The QR Code on the side To download
Download From PlayStore
Scan The QR Code on the side To download
About Us
Udrivy is redefining access to mobility.
Our connected technology transforms every car into a fast, simple, and 100% digital experience.
No more waiting in line.
No more endless paperwork.
No more complicated key exchanges.
With Udrivy, you book, unlock, and hit the road directly from your smartphone.
A new generation of mobility — seamless, instant, and stress-free.
Udrivy. Rent. Drive. Live Freedom.
© 2025 Udrivy Inc. All Rights Are reserved.