Legal

Privacy policy.

What Urvo collects, why we collect it, how long we keep it and the control you have over it.

Effective 10 August 2026

Who is responsible for your data

[REGISTERED ENTITY — TO BE CONFIRMED] ("Urvo", "we") is the controller of the personal data described in this policy. Where local law requires a named representative or a data protection officer in your country, those details will be published here before the service becomes available in that market.

This policy covers the Urvo apps for riders and drivers, this website, and the support channels attached to them.

What we collect

Account detailsName, phone number, email address and, where required to use the service, a profile photo.

Trip informationPickup and drop-off locations, route, timing, the fare offered and agreed, and the status of the trip.

Location dataLocation from the app while a trip is being arranged or is in progress, to match riders with nearby drivers and to show trip progress. Drivers share location while they are available for requests.

Payment contextRecords of what was agreed and charged. Card and bank credentials are handled by our payment providers — Urvo does not store full card numbers.

Driver documentationIdentity, licence, vehicle and insurance documents required to confirm a driver is eligible to accept trips.

Device and app dataDevice model, operating system, app version, language, and diagnostic or crash information.

Support and safety recordsMessages you send to support, reports you make about a trip, and our responses.

Why we use it, and on what basis

We use personal data only where we have a lawful basis to do so. In practice that means one of the following.

To perform the serviceCreating your account, matching a request with a driver, carrying out the agreed trip, taking payment and providing receipts. Without this data the service cannot be delivered.

To meet legal obligationsVerifying driver eligibility, keeping records required by transport, tax or consumer law, and responding to lawful requests from authorities.

For legitimate interestsKeeping the marketplace safe, investigating reported incidents, preventing fraud and abuse, and improving reliability. We weigh these against your rights and interests.

With your consentOptional marketing messages and any non-essential analytics. You can withdraw consent at any time without affecting the service.

What other people can see

A ride involves two people, so some information is shared to make it work. Riders see the driver's first name, photo, vehicle and plate details, and rating. Drivers see the rider's first name, pickup and drop-off, and the offered fare.

Precise contact details are not shared between riders and drivers. Where in-app contact is available, it is designed to connect the two sides without exposing personal phone numbers.

How long we keep it

We keep personal data for as long as your account is active, and after that only for as long as we have a reason to — typically to meet a legal retention period, to resolve a dispute, or to investigate a safety report.

Trip and payment records are generally kept for the period required by tax and transport law in the relevant market. Support conversations are kept for a shorter period unless they relate to an unresolved matter. When a retention period ends, data is deleted or irreversibly anonymised.

Your rights

Subject to local law, you can exercise the following rights at any time. We will not charge you for doing so, and we will not treat you differently for asking.

AccessAsk for a copy of the personal data we hold about you.

CorrectionHave inaccurate or incomplete details corrected.

DeletionAsk us to delete data we no longer have a legal basis to keep.

PortabilityReceive the data you gave us in a portable, machine-readable format.

Objection and restrictionObject to processing based on legitimate interests, or ask us to limit it while a concern is reviewed.

Withdraw consentTurn off optional messages or analytics without losing access to the service.

ComplainRaise a concern with your local data protection authority. We would rather hear from you first so we can put it right.

Moving data between countries

Urvo is built to operate in more than one country, so personal data may be processed outside the country where it was collected — including by the service providers listed above.

Where that happens, we use a recognised transfer mechanism, such as standard contractual clauses or an adequacy decision, and apply the same protections described in this policy regardless of where the data is handled.

Keeping data secure

We describe our security practices, and how to report a vulnerability, on the security page.

Children

Urvo is not intended for children. Accounts require the minimum age set by local law in the market concerned, and we do not knowingly collect data from anyone below it. If you believe a child has created an account, contact us and we will remove it.

Changes to this policy

If we make a material change we will update the effective date above and, where the change affects how we use your data, tell you in the app or by email before it takes effect.