YukTashish — Privacy Policy
1. Introduction
This Privacy Policy describes how the YukTashish mobile application (the "App") collects, uses, stores, and shares information when you use our on-demand cargo and delivery service in Uzbekistan. By installing or using the App, you agree to the practices described in this policy.
2. Information we collect
2.1 Account information
- Phone number, used as your primary identifier.
- One-time password (OTP) verification metadata.
- Profile details you choose to provide (name, preferred language).
2.2 Order information
- Pickup and drop-off addresses and coordinates.
- Cargo category, weight/volume, and notes you provide.
- Driver bids you receive and the driver you select.
- Order history and payment status.
2.3 Location data
When you grant location permission, we use your device location to show your position on the map, suggest pickup points, and display the live position of the assigned driver during an active order. Location is used in real time and is not continuously stored on our servers outside the context of an active order.
2.4 Communications
- In-app chat messages exchanged with the assigned driver.
- Notification preferences and delivery receipts.
2.5 Device and technical information
- Device model, OS version, app version, and language settings.
- Firebase Cloud Messaging (FCM) token, used to deliver push notifications.
- Crash reports and diagnostic logs (when enabled).
2.6 Payment information
Payments are processed by third-party payment providers. The App may receive transaction status (success/failure) and a reference id, but does not store full card numbers or banking credentials.
3. How we use your information
- Authenticate you and keep your session secure (JWT access and refresh tokens).
- Match your order with available drivers and route the assigned driver to you.
- Display real-time order status, chat, and driver location.
- Send transactional and operational push notifications via FCM.
- Provide customer support and resolve disputes.
- Improve service quality, debug issues, and prevent fraud and abuse.
- Comply with applicable Uzbek laws and lawful requests from authorities.
4. Sharing of information
We share information only as necessary to operate the service:
- Drivers: your name, phone number, pickup/drop-off and cargo details, so the order can be fulfilled.
- Service providers: Google Firebase (push notifications, crash reporting), Yandex MapKit (maps and geocoding), and payment processors.
- Legal authorities: when required by law or to protect rights, safety, and property.
We do not sell your personal data. We do not share your data with advertisers.
5. Data retention
We retain account and order information for as long as your account is active and for a reasonable period afterwards to comply with tax, accounting, dispute-resolution, and regulatory obligations. You can request deletion of your account at any time (see "Your rights" below).
6. Security
All network traffic between the App and our servers is encrypted in transit. Authentication tokens are stored in the device's secure storage (Keychain on iOS, Keystore-backed encrypted preferences on Android). WebSocket connections used for live order tracking and chat are authenticated using short-lived JWT tokens. We follow industry practices to protect data, but no system can be guaranteed 100% secure.
7. Permissions we request
- Location (foreground): map display, pickup selection, live tracking.
- Notifications: order status updates, chat messages, promotions you opt into.
- Internet and network state: required for all online functionality.
- Phone (optional, where applicable): to launch a call to your assigned driver.
8. Push notifications
The App uses Firebase Cloud Messaging to deliver order status updates and chat notifications. You can disable notifications at any time in your device settings. The FCM token is associated with your account on our backend so we can deliver targeted, transactional messages; tokens are removed when you log out.
9. Children's privacy
The App is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. International transfers
Some of our service providers (e.g., Google Firebase) may process data outside Uzbekistan. Where this is the case, we rely on contractual safeguards offered by those providers.
11. Your rights
- Access: request a copy of the personal data we hold about you.
- Correction: ask us to update inaccurate or incomplete data.
- Deletion: request deletion of your account and associated data.
- Withdraw consent: turn off optional permissions (location, notifications) at any time.
- Complaint: contact the relevant data-protection authority in Uzbekistan.
To exercise these rights, contact us at support@yuktashish.uz.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the App or by other reasonable means. The "Effective date" at the top indicates when the latest version became effective.
13. Contact us
Email: support@yuktashish.uz
Address: Tashkent, Uzbekistan