SAFARO PLATFORM — PRIVACY POLICY

Effective date: March 22, 2026

1. GENERAL PROVISIONS

1.1. This Privacy Policy (hereinafter referred to as the "Policy") applies to all personal data collected, processed, and stored through the Safaro mobile application (hereinafter referred to as the "Application" or "Platform").

1.2. The rights holder of the Application is "Wip Doer" LLC (hereinafter referred to as the "Company"), a legal entity established in accordance with the legislation of the Republic of Uzbekistan.

1.3. "Personal data" means any information directly or indirectly related to an identified or identifiable natural person.

1.4. "User" means any person using the Application as a passenger (client) or driver.

1.5. Safaro is an intermediary platform that connects drivers and passengers, providing intercity and interregional passenger transportation and postal/parcel delivery services. The Company is not a transport service provider but solely a technology platform that facilitates communication between drivers and passengers.

1.6. By starting to use the Application, the User is deemed to have fully accepted the terms of this Policy.

1.7. If the User does not agree with the terms of this Policy, they must stop using the Application.

2. TYPES OF DATA COLLECTED

2.1. Registration data

• Mobile phone number (required)
• First and last name (required)
• Profile photo (optional)
• User language preference

2.2. Geolocation data

• Real-time location coordinates via GPS
• Travel routes and destinations
• Selected district, city, and region information
• Location history (only during an active order)

2.3. Driver documents

• Driver's license (front side)
• Vehicle technical passport
• Vehicle license plate number
• Vehicle photos (from multiple angles)
• Driver selfie photo (for identity verification)
• Vehicle type, color, make, and capacity

2.4. Device and technical data

• Device model and operating system
• IP address
• Application version
• Device identifier (for push notifications)
• Network connection type

2.5. Order data

• Agreed price amount
• Order date and status

Note: Currently, all payments on the Platform are made directly between the passenger and the driver in cash. The Company does not participate in the payment process, does not receive funds, and does not redirect them.

2.6. Service activity data

• Order history (departure and arrival addresses, date, price)
• Driver and passenger ratings and reviews
• Complaints and support requests
• Chat messages (only during an active order)

2.7. Analytics data

• In-app activity statistics (in anonymized form)
• Error and crash logs
• Service usage frequency

3. PURPOSES OF DATA COLLECTION AND PROCESSING

3.1. Service provision — creating orders, finding drivers, calculating routes, displaying real-time location.

3.2. Ensuring security — identity verification, fraud detection and prevention, ensuring passenger and driver safety.

3.3. Recording order data — storing agreed prices and order history.

3.4. Platform improvement — conducting anonymized statistical analysis to improve service quality, enhancing user experience.

3.5. Support — providing technical assistance, reviewing complaints, resolving disputes.

3.6. Legal obligations — compliance with applicable legal requirements.

3.7. Notifications — sending notifications about order status, news, and service updates (the User may disable push notifications in settings).

4. LEGAL BASIS FOR DATA PROCESSING

4.1. User consent — granted by starting to use the Application.

4.2. Contractual obligations — processing of data necessary for service provision.

4.3. Legal requirements — in accordance with the Law of the Republic of Uzbekistan "On Personal Data" and other relevant regulatory documents.

4.4. Legitimate interests of the Company — ensuring the safe and stable operation of the platform.

5. DISCLOSURE OF DATA TO THIRD PARTIES

5.1. Service partners — SMS notification services (ESKIZ.uz), push notification services (Firebase), map services (Yandex MapKit). Only the minimum amount of data necessary to provide the service is transferred to partners.

5.2. Driver–passenger communication — during an order, the parties' phone numbers may be displayed in a limited (masked) format. After the order is completed, direct communication is restricted.

5.3. Law enforcement agencies — in cases directly provided for by law: by court order, prosecutor's request, or official request from the Ministry of Internal Affairs.

5.4. Anonymized data — aggregated statistical data that does not allow personal identification may be used for analytics and research purposes.

5.5. The Company does not sell or freely provide Users' personal data to third parties for advertising or marketing purposes.

6. DATA STORAGE

6.1. Storage periods

6.2. Profile deletion

When a User requests profile deletion, all personal data is irreversibly deleted within 60 days. Data that is required to be retained by law (order history) is exempt from this.

6.3. Inactive accounts

A warning is sent to Users whose accounts have been inactive for 12 months. If no response is received, the account is frozen, and data is deleted after an additional 90 days.

7. USER RIGHTS

7.1. Right of access — to review the data collected about them.

7.2. Right to rectification — to update incorrect or outdated data.

7.3. Right to deletion — to request deletion of their profile and associated data.

7.4. Right to restriction — to request the cessation of data processing.

7.5. Right to object — to object to the use of data for marketing purposes.

7.6. Right to data portability — to obtain a copy of their personal data (in a machine-readable format).

7.7. The Company reviews User requests within 10 business days. In complex cases, the period may be extended to 15 business days, and the User will be notified of this.

7.8. For requests: info@safaro.uz or through the support section within the Application.

8. DATA PROTECTION MEASURES

8.1. Encryption — all data is transmitted in encrypted form via the SSL/TLS protocol (HTTPS).

8.2. Server security — servers are protected by firewalls and access control systems.

8.3. Authentication — identity verification system via one-time SMS code (OTP).

8.5. Access control — only authorized personnel have limited access to personal data.

8.6. Monitoring — a system for detecting and preventing unauthorized access attempts is in operation.

8.7. Backup — regular backups of data are created and stored in encrypted form.

8.8. The Company takes all reasonable measures to ensure data security but acknowledges that it is technically impossible to guarantee 100% security of any data transmitted over the Internet.

9. DEVICE PERMISSIONS

The Application may request the following device permissions for proper operation:

The User may manage permissions at any time through device settings. Disabling certain permissions may result in some Application features not functioning.

10. COOKIES AND ANALYTICS TECHNOLOGIES

10.1. The Application uses analytics tools to improve service quality and enhance user experience.

10.2. The analytics data collected is anonymized and is not used to identify individual users.

10.3. The User may restrict analytics collection through device settings.

11. INTERNATIONAL DATA TRANSFER

11.1. Users' personal data is primarily stored on servers located within the Republic of Uzbekistan.

11.2. In cases where it is necessary to provide the service (for example, push notifications, map services), some data may be transferred to foreign servers.

11.3. In such cases, the Company takes appropriate technical and organizational measures to ensure data security.

12. CHILDREN'S PRIVACY

12.1. The Application is not intended for persons under the age of 16.

12.2. The Company does not intentionally collect data from minors.

12.3. If data of a person under the age of 16 is discovered, the relevant account will be immediately deleted and all data will be destroyed.

12.4. Parents or legal guardians may report such cases to info@safaro.uz.

13. FORCE MAJEURE

13.1. The Company shall not be liable for loss or corruption of data resulting from natural disasters, war, government decisions, power outages, Internet network failures, and other circumstances beyond the Company's control (force majeure).

13.2. After force majeure circumstances end, the Company will take all reasonable measures to restore data.

14. THIRD-PARTY SERVICES

14.1. The Application is integrated with third-party services (maps, analytics). These services have their own privacy policies, and the Company is not responsible for their practices.

14.2. Users are advised to independently review the privacy policies of third-party services.

15. PAYMENT RELATIONS AND LIMITATION OF LIABILITY

15.1. The Safaro platform is solely a technology intermediary connecting drivers and passengers. The Company is not a direct transport service provider.

15.2. All payments on the Platform are made directly between the passenger and the driver in cash. The Company does not participate in the payment process, does not receive, store, or redirect funds.

15.3. The Company is not liable for financial relations between the passenger and the driver, including price agreements, payment amounts, or payment-related disputes.

15.4. No refund service is provided through the Platform, as the Company does not participate in the payment process.

15.5. The Company is not liable for the quality, safety, or timeliness of the transport service provided by the driver. The driver is an independent service provider.

15.6. The Company assumes no liability for personal agreements, verbal contracts, or any relations between the passenger and the driver outside the Platform.

16. USER OBLIGATIONS

16.1. The User undertakes to ensure the security of their account and not to share their phone number and OTP code with third parties.

16.2. The User is solely responsible for all actions performed as a result of unauthorized use of their device.

16.3. If unauthorized access is suspected, the User must immediately notify the Company.

16.4. The User must not provide false or misleading information through the Application.

17. CHANGES TO THE POLICY

17.1. The Company reserves the right to update this Policy at any time.

17.2. Users will be notified of significant changes through in-app notifications.

17.3. The updated version takes effect from the moment it is published in the Application.

17.4. Continued use of the Application after changes are published constitutes acceptance of the updated Policy terms.

17.5. The latest version of the Policy is always available in the Application settings section.

18. APPLICABLE LAW

18.1. This Policy is governed by and interpreted in accordance with the legislation of the Republic of Uzbekistan.

18.2. Disputes related to the Policy shall be resolved through negotiation. If an agreement cannot be reached, the dispute shall be reviewed by the competent courts of the Republic of Uzbekistan.

19. CONTACT INFORMATION

"Wip Doer" LLC

• Address: 81 Beruniy Street, Samarkand City, Samarkand Region, Republic of Uzbekistan
• Email: info@safaro.uz
• Phone: +998 91 762 26 62
• Support: You can contact us through the "Help" section within the Application or via the contact details above.
• Working hours: Monday–Saturday, 09:00–18:00 (Uzbekistan time). For urgent cases — 24/7.

This Privacy Policy was last updated on March 22, 2026.