Introduction When you use UR-Turn, you trust us with your personal data. We’re committed to keeping that trust. That starts with helping you understand our privacy practices. This notice describes the personal data (“data”) we collect, how it’s used and shared, and your choices regarding this data.
Last Updated: June 2026
This privacy notice describes how UR-Turn and its affiliates collect, use, store, and share personal data globally. This notice applies to all users of UR-Turn’s applications, websites, features, or other services anywhere in the world.
Data Controller: UR-Turn Technologies Inc. is the primary data controller for the data collected in connection with the use of UR-Turn's services everywhere the company operates.
Global Transfers: To provide a seamless global experience, personal data may be transferred to countries other than your home country (e.g., to process regional customer support requests or display cross-border trip history).
Legal Mechanisms: Data transfers are handled in compliance with applicable local laws, utilizing mechanisms such as the Standard Contractual Clauses (SCCs) or adequacy decisions.
Law Enforcement: Personal data is only disclosed to law enforcement agencies in a manner consistent with strict regulatory requirements, such as the EU GDPR. UR-Turn employs internal vetting to refuse unauthorized government access unless legally mandated or in cases of imminent risk of harm.
Data Security: Data is robustly protected using encryption and pseudonymization techniques both while in transit between UR-Turn apps and servers, and while stored on our servers.
UR-Turn collects data across three main categories:
User Profile Information: Name, email, phone number, login credentials, address, profile picture, payment or banking details, and government-issued documents (driver's licenses, passports, birth date, gender, and photos). For drivers, this also includes vehicle, insurance, and health/fitness documentation.
Background Check Information (Drivers/Delivery): Driver history, criminal records (where permitted by law), license status, known aliases, prior addresses, and right-to-work eligibility.
Identity Verification Photos: User-submitted selfies and ID cards used alongside facial verification technologies for safety and account security.
Demographic Data: Age, gender, or occupation collected via profiles or user surveys. Gender may also be inferred from first names to enable specialized safety features like the Women Rider Preference or personalized third-party ads.
User Content: Support chats, call recordings, feedback/ratings, photographs, and audio or video files submitted for safety incidents. (In-app trip recordings are encrypted on-device and only sent to UR-Turn if explicitly shared by the user).
Location Data (Drivers/Delivery): Precise or approximate location gathered continuously when the app is running in either the foreground or background.
Location Data (Riders/Recipients): Precise or approximate location gathered from the time a ride is requested until it finishes, provided foreground app tracking is enabled in device settings. Users can opt out, but must then enter pickup addresses manually. Driver location data is linked to the rider's account regardless of rider device settings for receipt generation and fraud prevention.
Transaction Information: Services requested, trip/order details (date, time, exact addresses, distance, items ordered), payment methods, and promotional code tracking.
Usage and Device Data: Access logs, features viewed, app crashes, browser types, unique hardware/device IDs, IP addresses, operating systems, advertising identifiers, device motion data, and mobile network details.
Communications Data: Date, time, and text content of phone calls, SMS, or in-app messaging facilitated between users through the platform.
Referrals from existing users and account configurations made on your behalf by friends, family, or employers.
Identity, background check, sanctions, and anti-money laundering verification vendors.
Insurance, financial, or partner transportation companies linked to driver accounts.
Publicly available sources, marketing service providers, data resellers, and public/governmental authorities.
UR-Turn utilizes your personal data for the following legitimate business purposes:
Account provisioning and payment processing.
Navigating pickups and drop-offs, tracking trip progress, calculating ETAs, and implementing dynamic pricing based on route metrics, traffic, and real-time user supply and demand.
Personalizing accounts with tailored food, restaurant, or trip recommendations.
Providing receipt documentation, invoice generation, and essential structural changes to terms and policies.
Vetting driver eligibility via background checks and managing continuous identification using Real-Time ID Checks (requiring an online selfie to match the profile photo on file).
Using facial recognition and object verification to prevent identity-borrowing and verify safety equipment compliance (e.g., masks or helmets).
Reviewing device sensors to detect unsafe driving habits (e.g., speeding, harsh braking).
Analyzing location data and user communications to capture and eliminate fraudulent activities, such as intentionally delayed pickups designed to induce client cancellation fees.
Deactivating users who breach our Community Guidelines, display consistently low ratings, or submit fraudulent paperwork (with automatic or human-reviewed deactivation depending on regional legal mandates).
Using behavioral history and ratings to proactively avoid pairing users with a history of conflict (such as a previous 1-star rating).
Customer Support: Utilizing user data and call logs to investigate support cases and optimize resolution paths.
User Communications: Enabling drivers, riders, and delivery partners to call or text each other safely to facilitate fulfillment.
Marketing & Advertising: Sending tailored emails, texts, and push notifications based on your location and trip history. This includes sharing hashed emails or unique device tokens with advertising networks (like Facebook and TikTok) and displaying "Sponsored Listings" or contextual ads matching your destination inside our apps.
Non-Marketing Notices: Sending surveys, municipal election alerts, ballots, or pending regional legislation notices that directly impact the operational landscape of UR-Turn services in your area.
UR-Turn utilizes small text blocks, script fragments, and local storage mechanisms to authenticate users, store preferences, analyze platform trends, and measure ad performance across the web.
Cookies: Uses both Session Cookies (erased when closing browsers) and Persistent Cookies (stored for a defined timeline) from both first-party and third-party origins.
Pixel Tags / Beacons: Mini code snippets built into our web properties and emails to track user engagement.
Software Development Kits (SDKs): Built into our mobile applications to pull device, network, and app interaction data.
Local Storage: Native application files that mimic cookie behavior directly on your operating system or browser.
UR-Turn shares data transparently within our network to execute transactions or comply with legal claims:
With Other Users: Riders share their first name, average rating, and pickup/drop-off locations with drivers. Drivers share their name, photo, vehicle specifics (make, model, color, license plate, vehicle photo), real-time location, average rating, account lifespan, and past user compliments with riders.
At the User's Request: Sharing your ETA or splitting fares with friends, integrating data with third-party apps via our API, or connecting your profile with police, fire, and ambulance networks during an emergency dashboard event.
With the Public: User feedback or comments published openly on UR-Turn social media profiles or blogs are viewable globally.
With Corporate/Profile Account Owners: If you use an account managed by an employer (UR-Turn for Business), a fleet company, or a family profile, your explicit ride metrics, route maps, and transactional costs are visible to that specific profile administrator.
With Subsidiaries and Affiliates: Data is seamlessly shared across UR-Turn internal networks for structural processing; international data, for example, is regularly stored and processed securely within centralized United States data infrastructure.
Data is kept only as long as required to fulfill the operational, financial, and safety purposes outlined above. Retention timelines vary based on the user type and data category:
Life of the Account: Core profile data, identification elements, and user credentials are held as long as the user account remains open and active to maintain services.
7 Years: Trip logs, locations, and financial transactions are retained for a rolling seven-year period to satisfy legal tax and accounting frameworks.
Defined Safety Windows: Incomplete partner driver profiles are wiped after 1 year, while systematically rejected or deactivated driver applications are blacklisted and archived for 7 years for ongoing safety and fraud containment.
Account Deletion Requests: Once an explicit account deletion request is received, data is removed unless structural anomalies exist (such as an unresolved insurance dispute, litigation, or an outstanding financial credit balance).
