Yaku Driver Privacy Policy

This Privacy Policy explains how Yaku Labs (“Yaku,” “we,” “our,” or “us”) collects, uses, stores, shares, and protects personal information when delivery contractors (“Drivers,” “you”) use the Yaku Driver mobile application (the “Driver App”).

The Driver App is a tool for independent delivery contractors who have applied to and been approved by Yaku. It is not intended for use by end customers or by anyone under the age of 18.

Your use of the Driver App is also governed by the Yaku Driver Contractor Agreement.

1. Information We Collect

1.1 Account & identity information

When you apply to drive and create an account we collect:

• Name, email address, and phone number
• Vehicle type and license plate
• Preferred delivery areas
• Authentication identifiers issued by Amazon Cognito (your user ID, password hash, and session tokens)
• Acceptance records for the Driver Contractor Agreement

1.2 Precise & background location

After you accept a delivery, the Driver App collects your device’s precise geographic location using GPS, including while the app is running in the background as a foreground service. We use this location to:

• Show pick-up and drop-off addresses on a map and provide turn-by-turn navigation links
• Estimate arrival times for restaurants and customers
• Confirm completion of pick-ups and deliveries
• Improve dispatch and routing for future orders

Background location is used only while you are actively on a delivery or have indicated you are available to accept deliveries. You can revoke location permission at any time in your device settings; doing so will prevent you from accepting new deliveries until permission is restored.

1.3 Camera & delivery photos

The Driver App uses the device camera to capture delivery confirmation photos (for example, an image of the order at the drop-off location). These photos are uploaded to Yaku’s servers via a secure pre-signed URL and associated with the delivered order. They are visible to Yaku operations staff and may be shared with the customer or restaurant in the event of a dispute. We do not access your camera at any other time, and we do not scan your photo library.

1.4 Device & usage information

• Device model, OS version, app version, language, and time zone
• Push-notification tokens issued by Expo Push, Apple Push Notification service, and Firebase Cloud Messaging
• App diagnostic and crash logs
• Network status and timestamps of your interactions with deliveries

1.5 Optional information

If you contact us for support, we keep a record of that correspondence so we can respond and improve our service.

1.6 Information we do not collect

The Driver App does not collect: contacts, calendar entries, microphone input, photos from your device library, advertising identifiers, biometric data, financial account numbers, or government-issued identification documents. We do not sell your information.

2. How We Use Information

We use the information described above to:

• Operate the Yaku delivery network and dispatch deliveries to you
• Authenticate you and protect your account
• Communicate with you about deliveries, account changes, and service updates
• Calculate hours, payments, and tips owed under the Driver Contractor Agreement
• Investigate disputes, fraud, or safety incidents
• Improve the Driver App, our maps, our routing, and our customer experience
• Comply with legal obligations and enforce our agreements

We do not use your personal information to serve advertising, and we do not perform automated decision-making that produces legal effects without human review.

3. Legal Bases (EU/UK Drivers)

Where the GDPR or UK GDPR applies, we process your personal information on the following bases: (a) contract — to perform our agreement with you; (b) legitimate interests — to operate, secure, and improve the Driver App; (c) consent — for permissions you grant on the device (camera, location); and (d) legal obligation — where law requires us to retain or disclose information.

4. Sharing Information

We share information only as described below.

• Service providers. We use trusted vendors to host and operate the service, including Amazon Web Services (cloud hosting, authentication via Amazon Cognito, storage of delivery photos in S3), Expo (push notification delivery), and Radar (geocoding, when enabled). These providers process data on our behalf under contract and may not use it for their own purposes.
• Restaurants & customers. Your first name and approximate location may be shown to the customer for an active delivery so they can identify you on arrival. The restaurant may see the same information at pick-up.
• Legal & safety. We may disclose information to comply with subpoenas, court orders, or other legal process; to enforce our agreements; or to protect the rights, property, or safety of Yaku, our drivers, our customers, or the public.
• Business transfers. If Yaku is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.

5. Data Retention

• Account & identity information: kept for the life of your account and for up to seven (7) years after deactivation for tax, accounting, and legal-defence purposes.
• Delivery photos and location traces: kept for up to twelve (12) months after the related delivery, then deleted or anonymised.
• Diagnostic logs: kept for up to ninety (90) days.

We may retain information for longer where required by law or to resolve an open dispute.

6. Security

We use industry-standard safeguards to protect your information, including TLS in transit, encryption at rest for stored photos and database records, scoped IAM access controls, audit logging, and least-privilege service accounts. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a security breach affecting your information, we will notify you and the appropriate authorities as required by law.

7. Your Choices

• Permissions. You can revoke camera or location permission at any time in your device settings.
• Push notifications. You can disable push notifications in your device settings.
• Account access & deletion. You may request access to, correction of, or deletion of your account information by emailing support@yaku.co from the address associated with your account. We will respond within thirty (30) days. Note: we may need to retain certain records as described under “Data Retention.”

8. U.S. State Privacy Rights

Drivers residing in California, Colorado, Connecticut, Virginia, Utah, and other U.S. states with comprehensive privacy laws have the right to know what personal information we hold about them, to request a copy or correction, to request deletion, and to opt out of any “sale” or “sharing” for cross-context behavioural advertising. Yaku does not sell or share personal information for cross-context behavioural advertising. To exercise other rights, email support@yaku.co. We will not discriminate against you for exercising your rights.

9. International Transfers

Yaku is based in the United States and processes information on servers located in the United States. If you access the Driver App from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have different data-protection laws than your home country. Where required, we use Standard Contractual Clauses or other lawful transfer mechanisms.

10. Children

The Driver App is not directed to children. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided information to us, please contact us so we can delete it.

11. Third-Party Services

The Driver App may open external maps applications (Apple Maps, Google Maps) for navigation. Once you leave the app, the third party’s privacy policy applies. Yaku is not responsible for the practices of those third parties.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent change. If we make material changes, we will notify you in the Driver App or by email at least seven (7) days before they take effect.

13. Contact Us

Questions or requests under this Policy can be sent to: