I. Introduction / II. Overview / III. Data collections and uses / IV. Choice and transparency / V. Updates to this notice
When you use Uber, you trust us with your personal data. We’re committed to keeping that trust. That starts with helping you understand our privacy practices.
This notice describes the personal data we collect, how it’s used and shared, and your choices regarding this data. We recommend that you read this along with our privacy overview, which highlights key points about our privacy practices.
This notice applies to users of Uber’s services anywhere in the world, including users of Uber’s apps, websites, features, or other services.
This notice also governs Uber’s other collections of personal data in connection with its services. For example, we may collect the contact information of individuals who use accounts owned by Uber for Business customers, or of owners or employees of restaurants or other merchants; personal data of those who start but do not complete applications to be drivers or delivery persons; or other personal data in connection with our mapping technology and features.
All those subject to this notice are referred to as “users” in this notice.
In addition, please note the following:
Our practices are subject to applicable laws in the places in which we operate. This means that we engage in the practices described in this notice in a particular country or region only if permitted under the laws of those places. Please contact us here or through the addresses below with any questions regarding our practices in a particular country or region.
Uber B.V. and Uber Technologies Inc. are the data controllers for the personal data collected in connection with use of Uber’s services in the European Economic Area, the United Kingdom and Switzerland.
Uber Technologies Inc. is the data controller for the personal data collected in connection with use of Uber’s services everywhere else.
Uber B.V. (Mr. Treublaan 7, 1097 DP, Amsterdam, the Netherlands) and Uber Technologies Inc. (1515 3rd Street, San Francisco, CA, 94158, USA) are the data controllers for the personal data collected in connection with use of Uber’s services in the European Economic Area, the United Kingdom and Switzerland.
If you’re a driver in the UK, the Uber entity holding the relevant PHV operator license is a controller for complying with licensing requirements. For drivers in the UK that are qualified as workers, the relevant contracting Uber entity in the UK will act as joint controller with Uber B.V. and Uber Technologies Inc. solely for the personal data necessary to comply with worker rights.
Uber Technologies Inc. is the data controller for the personal data collected in connection with use of Uber’s services everywhere else.
Questions, comments, and complaints about Uber’s data practices can be submitted here. You may also use this form to submit a question to Uber’s Data Protection Officer.
Uber collects personal data:
The following personal data is collected by or on behalf of Uber:
1. Data provided by users. This includes:
2. Data created during use of our services. This includes:
3. Data from other sources. These include:
Uber may combine the data collected from these sources with other data in its possession.
Uber uses personal data to enable reliable and convenient transportation, delivery, and other products and services. We also use such data:
Uber does not sell or share user personal data with third parties for their direct marketing, except with users’ consent.
We use personal data we collect:
1. To provide our services. Uber uses data to provide, personalize, maintain, and improve our services.
2. Safety and security. We use personal data to help maintain the safety, security, and integrity of our services and users. This includes:
Where permitted by law, we may also use selfies to verify that users are wearing masks, helmets or other safety gear through the use of object verification technology, where permitted by law.
In addition, where permitted by law, we may use facial recognition technology to process user profile photographs, identification photographs, or other user-submitted photographs for the sole purpose of preventing identity-borrowing or use of our services by unauthorized drivers or delivery people.
3. Customer support. Uber uses the information we collect (which may include call recordings) to provide customer support, including to investigate and address user concerns and to monitor and improve our customer support responses and processes.
4. Research and development. We may use personal data for testing, research, analysis, product development, and machine learning to improve the user experience. This helps us make our services more convenient and easy-to-use, enhance the safety and security of our services, and develop new services and features.
5. Enabling communications between users. For example, a driver may message or call a rider to confirm a pick-up location, a rider may contact a driver to retrieve a lost item, or a restaurant or delivery person may call an order recipient with information about their order.
6. Marketing. Uber may use personal data to market our services to our users. This includes sending users communications about Uber services, features, promotions, sweepstakes, studies, surveys, news, updates, and events. We may do so through various methods, including email, text messages, push notifications, in app communications and ads, and ads on third party platforms.
We may use the data we collect, including in combination with advertising partners’ data, to personalize and improve the marketing communications (including ads) that we send on and off Uber’s apps and websites, including based on user location, use of Uber’s services, and user preferences and settings. For example, we share user data (such as hashed email address, usage information, and device or user identifiers) with Facebook and TikTok to personalize and improve our ads for Uber’s services.
For information about how to opt out of certain marketing communications (including ads) from Uber and its advertising partners, please see the section titled “Marketing choices.”
We may also send users communications regarding elections, ballots, referenda, and other political and notice processes that relate to our services. For example, Uber has notified some users by email of ballot measures or pending legislation relating to Uber’s services in those users’ areas.
Uber performs the above activities on the grounds that they are necessary for purposes of Uber’s legitimate interests in informing users about Uber services and features or those offered by Uber partners, or on the basis of user consent. See the sections titled “Choice and transparency” and “Marketing choices” for information on your choices regarding Uber’s use of your data for marketing.
7. Non-marketing communications. Uber may use personal data to generate and provide users with receipts; inform them of changes to our terms, services, or policies; or send other communications that aren’t for the purpose of marketing the services or products of Uber or its partners.
8. Legal proceedings and requirements. We may use personal data to investigate or address claims or disputes relating to use of Uber’s services, to satisfy requirements under applicable laws, regulations, or operating licenses or agreements, or pursuant to legal process or governmental request, including from law enforcement.
Uber performs the above activities on the grounds that they are necessary for purposes of Uber’s legitimate interests in investigating and responding to claims and disputes relating to use of Uber’s services and features, and/or necessary for compliance with applicable legal requirements.
9. Automated decision-making
We use personal data to make automated decisions relating to use of our services. This includes:
Click the links in this section for more information about these processes. To object to a deactivation resulting from these processes, please contact Uber customer support.
Some of Uber’s services and features require that we share personal data with other users or at a user’s request. We may also share such data with our affiliates, subsidiaries, and partners, for legal reasons or in connection with claims or disputes.
Uber may share personal data:
1. With other users
This includes sharing:
2. At the user’s request
This includes sharing data with:
3. With the general public
Questions or comments from users submitted through public forums such as Uber blogs and Uber social media pages may be viewable by the public, including any personal data included in the questions or comments submitted by a user.
4. With the Uber account owner
If a user requests transportation or places an order using an account owned by another party, we may share their order or trip information, including location data, with the owner of that account. This occurs, for example, when:
5. With Uber subsidiaries and affiliates
We share personal data with our subsidiaries and affiliates to help us provide our services or conduct data processing on our behalf. For example, Uber processes and stores such data in the United States on behalf of its international subsidiaries and affiliates.
6. With Uber service providers and business partners
Uber provides personal data to vendors, consultants, marketing partners, research firms, and other service providers or business partners. These include:
7. For legal reasons or in the event of a dispute
Uber may share users’ personal data if we believe it’s required by applicable law, regulation, operating license or agreement, legal process or governmental request, or where the disclosure is otherwise appropriate due to safety or similar concerns.
This includes sharing personal data with law enforcement officials, public health officials, other government authorities, airports (if required by the airport authorities as a condition of operating on airport property), or other third parties as necessary to enforce our Terms of Service, user agreements, or other policies; to protect Uber’s rights or property or the rights, safety, or property of others; or in the event of a claim or dispute relating to the use of our services. In the event of a dispute relating to use of another person’s credit card, we may be required by law to share your personal data, including trip or order information, with the owner of that credit card.
For more information, please see Uber’s Guidelines for Law Enforcement Authorities - United States, Guidelines for Law Enforcement Authorities - Outside the US, and Guidelines for Third Party Data Requests and Service of Legal Documents.
This also includes sharing personal data with others in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.
8. With consent
Uber may share a user’s personal data other than as described in this notice if we notify the user and they consent to the sharing.
Uber retains user data for as long as necessary for the purposes described above.
Users may request deletion of their accounts at any time. Uber may retain user data after a deletion request due to legal or regulatory requirements or for reasons stated in this policy.
Uber retains user data for as long as necessary for the purposes described above. This means that we retain different categories of data for different periods of time depending on the type of data, the category of user to whom the data relates, and the purposes for which we collected the data.
Following an account deletion request, Uber deletes the user’s account and data, unless they must be retained due to legal or regulatory requirements, for purposes of safety, security, and fraud prevention, or because of an issue relating to the user’s account such as an outstanding credit or an unresolved claim or dispute. Because we are subject to legal and regulatory requirements relating to drivers and delivery persons, this generally means that we retain their account and data for a minimum of 7 years after a deletion request. For riders and order recipients, their data is generally deleted within 90 days of a deletion request, except where retention is necessary for the above reasons.
Uber enables users to access and/or control data that Uber collects, including through:
Uber also enables users to request access to or copies of their data, changes or updates to their accounts, or deletion of their accounts, or that Uber restricts its processing of user personal data.
A. Privacy settings
The Settings > Privacy menu in the Uber app allows riders and order recipients to set or update their preferences regarding location data collection and sharing, emergency data sharing, and notifications.
Riders and order recipients can enable/disable Uber to collect location data from their mobile devices through their device settings, which can be accessed via the Settings > Privacy > Location menu.
Riders can enable/disable Uber to share their real-time location data from their mobile devices with their drivers through their device settings, which can be accessed via the Settings > Privacy > Location menu.
Riders may enable Uber to share real-time location data from their mobile devices with emergency police, fire, and ambulance services. Such data may include approximate location at the time the emergency call was placed; the car’s make, model, color, and license plate information; the rider’s name and phone number; pickup and dropoff locations; and the driver’s name.
Uber provides users with trip status notifications and updates related to activity on their account. These notifications are a necessary part of using the Uber app and cannot be disabled. However, users may choose the method by which they receive these notifications through the Settings > Privacy menu.
Users may enable Uber to send push notifications about discounts and news from Uber. Push notifications may be enabled or disabled through the Settings > Privacy menus in the Uber app.
Users may opt-in to receive communications from certain restaurants while placing an order in the Uber Eats app. Those who opt-in may choose to cease receiving such communications through the Settings > Account > Data Sharing menus in the Uber Eats app.
B. Device permissions
Most mobile device platforms (iOS, Android, etc.) have defined certain types of device data that apps cannot access without the device owner’s permission, and these platforms have different methods for how that permission can be obtained. Please check the available settings on your device or check with your provider.
C. In-app ratings pages
After every trip, drivers and riders are able to rate each other on a scale from 1 to 5. An average of those ratings is associated with a user’s account and is displayed to other users for whom they provide or receive services. For example, rider ratings are available to drivers from whom they request transportation, and driver ratings are available to their riders.
This 2-way system holds everyone accountable for their behavior. Accountability helps create a respectful, safe environment for drivers and riders.
Riders can see their average rating in the main menu of the Uber app.
Drivers can see their average rating after tapping their profile photo in the Uber Driver app.
Delivery persons may also be rated by order recipients, restaurants and merchants. Click here for more information.
D. Marketing choices
Users may opt out of certain marketing communications (including ads) and use of their data for marketing in the following ways:
E. User personal data requests
Uber provides users with a variety of ways to learn about, control, and submit questions and comments about Uber’s handling of their personal data.
Users may submit the above requests here.
We may occasionally update this notice.
We may occasionally update this notice. If we make significant changes, we will notify users in advance of the changes through the Uber apps or through other means, such as email. We encourage users to periodically review this notice for the latest information on our privacy practices.
Use of our services after an update constitutes consent to the updated notice to the extent permitted by law.