Allows unilateral updates to the privacy notice with advance notification via app/email, but relies on continued use for consent and lacks a specified notice period, version history, or explicit right to reject changes with a refund.
Exceptionally detailed and consumer-friendly, covering purpose-limited collection, granular opt-outs, GDPR/CCPA/LGPD compliance, data portability, and clear legal bases. Security commitments and cross-border transfer mechanisms (SCCs, DPF) are explicitly stated.
The document clearly defines its scope to riders, order recipients, and guest users, excluding certain subsidiaries and freight services. However, it relies on implied consent through continued use for policy updates rather than explicit clickwrap acceptance, which reduces consumer control over material changes.
Users can request account deletion, but Uber retains data broadly for safety, fraud, legal compliance, and unresolved disputes without specifying appeal processes or cure periods for suspensions. Termination mechanics remain vague and lack graduated enforcement.