1. Introduction

Unanime Empire, Lda. owns and operates the UPrides App (the "App") and Platform. The App connects Riders, Drivers, and Fleet Partners to facilitate ride-hailing services in Portugal. We are committed to protecting the privacy and security of the personal data we process in connection with the App and Platform.

By using the App or Platform, you agree to the collection and use of your personal data as described herein.

2. Data We Collect

We collect various categories of personal and non-personal data to deliver and improve our services. The data we collect depends on your role (Passenger, Driver, Fleet Partner) and how you use the App.

2.1. Identity & Profile Data

• Passengers: Full name, date of birth (to verify age), profile photo (optional), gender (optional).
• Drivers: Full name, date of birth, national ID or passport number, TVDE license number, professional certifications, driver profile photo.
• Fleet Partners: Legal business name, registration number, authorized representative name, contact person details.

2.2. Contact Information

• Email address and mobile phone number (for account verification, notifications, and support).
• Secondary contact (emergency contact for Drivers).

2.3. Payment & Billing Data

• Credit or debit card information (card number, expiration date, security code) processed by our payment processors.
• Billing address, VAT number (for Fleet Partners).
• Transaction history including Trip Fare, surcharges, tips, refunds, and credits.

2.4. Location & Trip Data

• Real-time GPS coordinates during an active Trip or when running the Driver App in availability mode.
• Pick-up and drop-off addresses, routing information, distance traveled, duration, and Trip timestamps.
• Location history for completed Trips.

2.5. Device & Technical Data

• Device identifiers (e.g. device ID, advertising ID), model, operating system version, and unique App installation ID.
• IP address, browser type (for web), log files, crash reports, performance metrics.

2.6. Usage & Analytics Data

• Feature usage (e.g., button clicks, menu selections, search queries).
• App session data (start/stop times, errors encountered).
• Aggregated analytics such as number of Trips, acceptance rates, and satisfaction ratings.

2.7. Communications & Support Data

• Customer support chat transcripts, email correspondence, and call recordings (with consent).
• Feedback, ratings, and reviews submitted by users.

2.8. Sensitive Data

• Health data: In emergencies, we may collect health-related details (e.g., medical conditions) voluntarily provided by the user.
• Biometric data: Face verification images (for Driver identity verification) are stored securely and used exclusively for authentication.

3. How We Use Your Data

We process personal data for the following purposes:

3.1. Service Provision

• Matching Riders with Drivers and enabling Trips.
• Processing payments, cancellations, refunds, and promotional credits.

3.2. Safety and Security

• Verifying identities and licenses.
• Monitoring ongoing Trips for safety and responding to emergencies.
• Enforcing our Community Guidelines and Terms & Conditions.

3.3. Customer Support

• Responding to support inquiries, disputes, and feedback.

3.4. Product Improvement

• Analyzing usage patterns to improve App features and performance.
• Conducting research and development.

3.5. Marketing and Promotions

• Sending promotional offers, updates, and surveys (with your consent where required).
• Personalizing marketing content based on your preferences and trip history.

3.6. Compliance and Legal Obligations

• Complying with local laws (e.g., tax reporting, anti-money laundering, record retention).
• Responding to law enforcement requests, legal process, and regulatory investigations.

4. Legal Bases for Processing

Under the EU General Data Protection Regulation (GDPR), we rely on the following legal bases to process your personal data:

• Performance of a contract: to provide ride-hailing services you request.
• Legal compliance: to satisfy regulatory, tax, and safety obligations.
• Legitimate interests: to operate, improve, and secure our services, subject to your rights and freedoms.
• Consent: for marketing communications and certain optional features.

5. Data Sharing and Disclosure

We may share personal data with:

5.1. Service Providers

• Payment processors, mapping and navigation providers, cloud hosting and analytics vendors.
• Customer support and communications service partners.

5.2. Drivers and Fleet Partners

• Sharing Rider contact and trip details with the Driver or fleet operator fulfilling the ride.

5.3. Law Enforcement and Regulators

• When required by court order, subpoena, statute, or other legal processes.

5.4. Business Transfers

• In connection with any merger, acquisition, or sale of assets, subject to confidentiality obligations.

6. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this Policy, including:

• At least 5 years for trip, payment, and location data for tax, safety, and fraud-prevention.
• Until account deletion for account, identity, and communications data, subject to legal requirements.
• Marketing consents for as long as you remain subscribed.

7. Your Rights

Under GDPR, you have the right to:

• Access and receive a copy of your personal data.
• Rectify inaccurate or incomplete data.
• Erase data in certain circumstances ("right to be forgotten").
• Restrict or object to processing based on legitimate interests.
• Data portability: receive data in a structured, machine-readable format.
• Withdraw consent at any time for consent-based processing.

To exercise these rights, contact us at privacy@uprides.eu or use the in-app data requests feature.

8. Security

We implement technical and organizational measures to protect personal data against unauthorized access, loss, or misuse, including encryption, access controls, and regular security audits.

9. International Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure such transfers comply with GDPR transfer mechanisms (e.g., Standard Contractual Clauses).

10. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from minors without parental consent.

11. Changes to This Policy

We may update this Policy periodically. We will provide notice of material changes via in-app notification and update the "Last updated" date. Continued use after changes constitutes acceptance.

12. Contact Us

For privacy questions or to exercise your data rights, contact:

Unanime Empire, Lda.

Rua Mestre Mónica 2

3830-702 Gafanha da Nazaré, Aveiro, Portugal

Email: privacy@uprides.eu

By using our services, you consent to our collection and use of personal data as described in this Privacy Policy.