When you use Uber, you trust us with your personal data. We’re committed to keeping that trust. That starts with helping you understand our privacy practices.
This notice describes the personal data we collect, how it’s used and shared, and your choices regarding this data. We recommend that you read this along with our privacy overview, which highlights key points about our privacy practices.
Last modified: October 15, 2020
Effective date: October 15, 2020
This notice applies to users of Uber’s services anywhere in the world, including users of Uber’s apps, websites, features, or other services.
This notice also governs Uber’s other collections of personal data in connection with Uber’s services. For example, we may collect the contact information of individuals who use accounts owned by Uber for Business customers or of owners or employees of Uber Eats restaurant partners. We may also collect the personal data of those who start but do not complete applications to be drivers or delivery persons, those who rent bicycles, scooters, or other light electrical devices offered by other companies through an Uber app, or in connection with our mapping technology and features.
All those subject to this notice are referred to as “users” in this notice.
In addition, please note the following:
Our data practices are subject to applicable laws in the places in which we operate. This means that we engage in the practices described in this notice in a particular country or region only if permitted under the laws of those places. Please contact us here or through the addresses below with any questions regarding our practices in a particular country or region.
Uber B.V. and Uber Technologies Inc. are the data controllers for the personal data collected in connection with use of Uber’s services in the European Economic Area and the United Kingdom.
Uber Technologies Inc. is the data controller for the personal data collected in connection with use of Uber’s services anywhere else.
Uber B.V. (Mr. Treublaan 7, 1097 DP, Amsterdam, the Netherlands) and Uber Technologies Inc. (1455 Market Street, San Francisco, CA, 94103, USA) are the data controllers for the personal data collected in connection with use of Uber’s services in the European Economic Area, the United Kingdom and Switzerland. If you’re a driver in the UK, the Uber entity holding the relevant PHV operator license is a controller for complying with licensing requirements.
Uber Technologies Inc. is the data controller for the personal data collected in connection with use of Uber’s services anywhere else.
Questions, comments, and complaints about Uber’s data practices can be submitted here. You may also use this form to submit a question to Uber’s Data Protection Officer.
The following data is collected by or on behalf of Uber:
1- Data provided by users. This includes:
2- Data created during use of our services. This includes:
3- Data from other sources. This includes:
Uber may combine the data collected from these sources with other data in its possession.
Uber collects and uses data to enable reliable and convenient transportation, delivery, and other products and services. We also use the data we collect:
Uber does not sell or share user personal data with third parties for their direct marketing, except with users’ consent.
Uber uses the data it collects for purposes including:
1- Providing services and features. Uber uses the data we collect to provide, personalize, maintain, and improve our products and services.
2- Safety and security. We use personal data to help maintain the safety, security, and integrity of our services and users. This includes:
3- Customer support. Uber uses the information we collect (including recordings of customer support calls with notice to and the consent of the user) to provide customer support, including to:
4- Research and development. We may use the data we collect for testing, research, analysis, product development, and machine learning to improve the user experience. This helps us to improve and enhance the safety and security of our services, improve our ability to prevent the use of our services for illegal or improper purposes, develop new features and products, and facilitate insurance and finance solutions in connection with our services.
5- Enabling communications between users. For example, a driver may message or call a rider to confirm a pickup location, a rider may contact a driver to retrieve a lost item, or a restaurant or delivery persons may call a delivery recipient with information about their order.
6- Marketing. Uber may use the data we collect to market our services to our users. This includes sending users communications about Uber services, features, promotions, sweepstakes, studies, surveys, news, updates, and events.
We may also send communications to our users about products and services offered by Uber partners. For example, if a user has placed an Uber Eats order, we may provide recommendations, promotions, or ads about similar food offered by other Uber partners. Although we may send users communications about Uber partners’ products and services, we do not sell users’ personal data to, or share it with, such partners or others for purposes of their own direct marketing or advertising, except with users’ consent.
We may use the data we collect to personalize the marketing communications (including advertisements) that we send, including based on user location, past use of Uber’s services, and user preferences and settings.
We may also send users communications regarding elections, ballots, referenda, and other political and notice processes that relate to our services. For example, Uber has notified some users by email of ballot measures or pending legislation relating to the availability of Uber’s services in those users’ areas.
7- Non-marketing communications. Uber may use the data we collect to generate and provide users with receipts; inform them of changes to our terms, services, or policies; or send other communications that aren’t for the purpose of marketing the services or products of Uber or its partners.
8- Legal proceedings and requirements. We may use the personal data we collect to investigate or address claims or disputes relating to use of Uber’s services, or as otherwise allowed by applicable law, or as requested by regulators, government entities, and official inquiries.
9- Automated decision-making
We use personal data to make automated decisions relating to use of our services. This includes:
Click the links in this section for more information about these processes. To object to a deactivation resulting from these processes, please contact Uber customer support.
Some of Uber’s products, services, and features require that we share data with other users or at a user’s request. We may also share data with our affiliates, subsidiaries, and partners, for legal reasons or in connection with claims or disputes.
Uber may share the data we collect:
1- With other users
This includes sharing:
2- At the user’s request
This includes sharing data with:
3- With the general public
Questions or comments from users submitted through public forums such as Uber blogs and Uber social media pages may be viewable by the public, including any personal data included in the questions or comments submitted by a user.
4- With the Uber account owner
If a user requests transportation or places an order using an account owned by another party, we may share their order or trip information, including real-time location data, with the owner of that account. This occurs, for example, when:
5- With Uber subsidiaries and affiliates
We share data with our subsidiaries and affiliates to help us provide our services or conduct data processing on our behalf. For example, Uber processes and stores data in the United States on behalf of its international subsidiaries and affiliates.
6- With Uber service providers and business partners
Uber provides data to vendors, consultants, marketing partners, research firms, and other service providers or business partners. These include:
7- For legal reasons or in the event of a dispute
Uber may share users’ personal data if we believe it’s required by applicable law, regulation, operating license or agreement, legal process or governmental request, or where the disclosure is otherwise appropriate due to safety or similar concerns.
This includes sharing personal data with law enforcement officials, public health officials, other government authorities, airports (if required by the airport authorities as a condition of operating on airport property), or other third parties as necessary to enforce our Terms of Service, user agreements, or other policies; to protect Uber’s rights or property or the rights, safety, or property of others; or in the event of a claim or dispute relating to the use of our services. If you use another person’s credit card, we may be required by law to share your personal data, including trip or order information, with the owner of that credit card.
Please see Uber’s Guidelines for Law Enforcement Authorities for more information.
This also includes sharing personal data with others in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.
8- With consent
Uber may share a user’s personal data other than as described in this notice if we notify the user and they consent to the sharing.
Uber retains user data for as long as necessary for the purposes described above.
Users may request deletion of their accounts at any time. Uber may retain user data after a deletion request due to legal or regulatory requirements or for the reasons stated in this policy.
Uber retains user data for as long as necessary for the purposes described above. This means that we retain different categories of data for different periods of time depending on the category of user to whom the data relates, the type of data, and the purposes for which we collected the data.
Users may request deletion of their account at any time through the Settings > Privacy menus in the Uber app, or through Uber’s website (riders and delivery recipients here; drivers and delivery persons here).
Following an account deletion request, Uber deletes the user’s account and data, unless they must be retained due to legal or regulatory requirements, for purposes of safety, security, and fraud prevention, or because of an issue relating to the user’s account such as an outstanding credit or an unresolved claim or dispute. Because we are subject to legal and regulatory requirements relating to drivers and delivery persons, this generally means that we retain their account and data for a minimum of 7 years after a deletion request. For riders and delivery recipients, their data is generally deleted within 90 days of a deletion request, except where retention is necessary for the above reasons.
We only collect and use personal data where we have lawful grounds to do so. These include processing user personal data to provide requested services and features, for purposes of Uber’s legitimate interests or those of other parties, to fulfill our legal obligations, or based on consent.
We collect and use personal data only where we have one or more lawful grounds for doing so. Such grounds may vary depending on where our users are located, but generally include processing personal data:
A- To provide requested services and features
In order to provide our services, we must collect and use certain personal data. This includes:
B- For purposes of the legitimate interests of Uber or other parties
This includes using personal data to maintain and enhance our users’ safety and security. For example, we use personal data to prevent use of our services by users who have engaged in inappropriate or dangerous behavior, such as by retaining data of banned users to prevent their use of Uber’s apps. We also use usage data to prevent matching of riders and drivers for whom there is higher risk of conflict (for instance, because they have been the subject of prior complaints from other users).
This also includes purposes such as combating fraud; improving our services, direct marketing, research, and development; and enforcing Uber’s Terms of Service.
C- To fulfill Uber’s legal obligations
For example, Uber is subject to laws and regulations in many cities and countries that require it to collect and retain data about our users’ trips and deliveries, and to provide copies of such data to the government or other authorities. We collect and use personal data to comply with such laws.
Uber may also share data with law enforcement regarding criminal acts or threats to public safety, or requests by third parties pursuant to legal processes. Uber may also share information with public health authorities where required or permitted by law. For more information about such sharing, please see Uber’s Guidelines for Law Enforcement Authorities - United States, Guidelines for Law Enforcement Authorities - Outside the US, and Guidelines for Third Party Data Requests and Service of Legal Documents.
D- With consent
Uber may collect and use personal data based on the user’s consent. For example, we may collect personal data through voluntary surveys. Responses to such surveys are collected on the basis of consent and will be deleted once no longer necessary for the purposes collected.
Uber enables users to access and control the data that Uber collects, including through:
Uber also enables users to request access to or copies of their data, changes or updates to their accounts, deletion of their accounts, or that Uber restrict its processing of user personal data.
A- Privacy settings
Settings menus in the Uber app for riders give them the ability to set or update their location-sharing preferences and their preferences for receiving mobile notifications from Uber. Information about these settings, how to set or change these settings, and the effect of turning off these settings is described below.
Uber uses riders’ device location services to make it easier to get a ride whenever they need one. Location data helps improve our services, including pickups, navigation, and customer support.
Riders may enable or disallow Uber to collect location data from their mobile devices through the Settings > Privacy menus in the Uber app. Riders and delivery recipients can enable or disallow such collections through the settings on their mobile device.
Riders who have enabled Uber to collect location data from their mobile device may also enable Uber to share their location with their driver from the time the ride is requested to the start of the trip. This can help improve pickups for both drivers and riders, particularly in crowded areas.
Riders may enable or disable this feature through the Settings > Privacy menus in the Uber app.
Riders who have enabled Uber to collect location data from their mobile device may also enable the Emergency Data Sharing feature that shares data with emergency police, fire, and ambulance services. Such data includes approximate location at the time the emergency call was placed; the car’s make, model, color, and license plate information; the rider’s name and phone number; pickup and dropoff locations; and the driver’s name.
Uber provides users with trip status notifications and updates related to activity on their account. These notifications are a necessary part of using the Uber app and cannot be disabled. However, users may choose the method by which they receive these notifications through the Settings > Privacy menus in the Uber app.
Users may enable Uber to send push notifications about discounts and news from Uber. Push notifications may be enabled or disabled through the Settings > Privacy menus in the Uber app.
Delivery recipients who have opted in to communications from restaurant partners may stop sharing their data with each restaurant partner in their Uber Eats account settings.
B- Device permissions
Most mobile device platforms (iOS, Android, etc.) have defined certain types of device data that apps cannot access without the device owner’s permission, and these platforms have different methods for how that permission can be obtained. iOS devices notify users the first time the Uber app requests permission to access certain types of data and gives users the option to grant or refuse permission. Android devices notify users of the permissions that the Uber app seeks before their first use of the app, and use of the app constitutes a grant of such permission.
C- Ratings look-up
After every trip, drivers and riders are able to rate each other on a scale from 1 to 5. An average of those ratings is associated with a user’s account and is displayed to other users for whom they provide or receive services. For example, rider ratings are available to drivers from whom they request transportation, and driver ratings are available to their riders.
This 2-way system holds everyone accountable for their behavior. Accountability helps create a respectful, safe environment for drivers and riders.
Riders can see their average rating in the main menu of the Uber app.
Drivers can see their average rating after tapping their profile photo in the Uber Driver app.
Delivery persons are also rated by delivery recipients and restaurant partners. Click here for more information.
D- Marketing opt-outs
Users may opt out of receiving promotional emails from Uber here. Users may also opt out of receiving emails and other messages from Uber by following the unsubscribe instructions in those messages. We may still send users who have opted out non-promotional communications, such as receipts for rides or information about their account.
E- User data requests
Uber provides users with a variety of ways to learn about, control, and submit questions and comments about Uber’s handling of their data. To make a request, please go here.
We may occasionally update this notice. Use of our services after an update constitutes consent to the updated notice to the extent permitted by law.
We may occasionally update this notice. If we make significant changes, we will notify users in advance of the changes through the Uber apps or through other means, such as email. We encourage users to periodically review this notice for the latest information on our privacy practices.
After such notice, use of our services by users in countries outside the European Union will be understood as consent to the updates to the extent permitted by law.