Privacy Policy — ViumbiGo

Last updated: August 2, 2026

1. Data controller

Viumbi S.A.S. ("Viumbi" or "we") is responsible for the processing of personal data collected through the ViumbiGo platform.

Privacy contact: [email protected]

2. Scope

This policy explains what data we collect, what we use it for, who we share it with, and what rights you have. It applies to all ViumbiGo users: passengers, drivers and visitors to our website.

3. What data we collect

3.1 Data you provide to us

Account: name, email address, phone number, password, language, profile photo.
Profile: gender and date of birth, where you provide them.
Identity: identity document number and a photograph of the document.
Facial verification: a selfie-type photograph compared against your document.
Drivers, additionally: address, city, province, country, postal code, driver's license, vehicle registration and documents, and vehicle details (make, model, year, colour and license plate).
Communications: in-app chat messages and support enquiries.

3.2 Data generated through use of the service

Location: precise device location. For passengers, while using the application. For drivers, also in the background while they are online, as this is essential to assign nearby trips and to let the passenger follow the journey.
Trips: origin, destination, stops, route, times, distance, fare and trip status.
Payments: method chosen, amounts, wallet history, coupons applied. We never store your full card number or security code: that data is handled directly by our payment processor.
App usage: screens visited and actions taken (for example searches, bookings or cancellations), with date and time.
Technical and access data: IP address, device type and version, application version, operating system, and push notification identifiers.
Ratings: the scores and comments you give and receive.

3.3 Sensitive data

The photograph of your face used for facial verification constitutes biometric data. We process it solely to confirm that you are who you claim to be, based on your explicit consent and on our duty to ensure the safety of the platform. You may withdraw that consent by closing your account.

4. What we use your data for

Purpose	Legal basis
Create and manage your account	Performance of the contract
Connect passengers with drivers and carry out the trip	Performance of the contract
Calculate fares and process payments	Performance of the contract
Verify identity and prevent fraud	Legitimate interest and legal obligation
User safety and incident handling	Legitimate interest and vital interest
Customer support	Performance of the contract
Coupons, promotions and incentives	Consent and legitimate interest
Promotional communications	Consent (revocable)
Improve the service and produce statistics	Legitimate interest
Comply with legal, accounting and tax obligations	Legal obligation

5. Automated decisions and artificial intelligence

We use automated systems, including artificial intelligence, in the following cases:

Identity verification: automatic comparison between your selfie and your document photo.
Verification of vehicle documents submitted by drivers.
Fraud prevention: detection of unusual patterns in payments, top-ups and use of promotions.
Trip assignment: selection of nearby available drivers.

Some of these decisions may affect you, for example by rejecting a verification or blocking a transaction. You have the right to request human review of any of them by writing to [email protected].

We use external artificial intelligence providers for these functions. We send them only what is necessary for the verification, and we do not authorize them to use your data to train their models.

6. Who we share your data with

6.1 Between users

When a trip is confirmed we share the minimum necessary to carry it out:

The driver sees: your name, photo, rating, pickup point and destination.
The passenger sees: the driver's name, photo and rating, the vehicle details and their real-time location.

We do not share your real phone number between users where in-app contact mechanisms are available.

6.2 Service providers

We work with specialized companies that process data on our behalf, solely to make the service possible. The categories are:

Payment processing: to charge for trips and manage wallet top-ups.
Maps and geolocation: to display the map, calculate routes and estimate times.
Notifications and messaging: to keep you informed about your trip status.
Cloud infrastructure: hosting, file storage and encrypted backups.
Identity and document verification: including artificial intelligence services.
Email: to send you communications relating to your account and trips.

These providers may only process your data following our instructions and for the stated purposes. If you wish to know the specific identity of the providers processing your data, you may request it by writing to [email protected].

6.3 Authorities

We may disclose information to competent authorities where there is a legal obligation, a valid order, or where necessary to protect a person's life or physical integrity.

6.4 What we never do

We do not sell your personal data. Nor do we transfer it to third parties for their own advertising.

7. International transfers

Some of our providers are located outside Ecuador, mainly in the United States. In those cases we require appropriate contractual safeguards so that your data maintains a level of protection equivalent to that required by applicable law.

8. How long we keep your data

Account and profile: while the account is active.
Trips and billing: the period required by accounting and tax rules, typically 7 years.
Identity documents and facial verification: while the account is active and for as long as needed to handle claims.
Access and activity logs: up to 24 months.
Chat messages: up to 12 months from the trip.

When you close your account we delete or anonymize your data, except where we must retain it by legal obligation or to defend against claims.

9. Your rights

At any time you may:

Access the data we hold about you.
Rectify any inaccurate data.
Delete your account and data, subject to the legal limits described above.
Object to certain processing, such as promotional communications.
Restrict processing while a claim is resolved.
Port your data in a machine-readable format.
Withdraw your consent where processing is based on it.
Request human review of an automated decision.

To exercise these rights, write to [email protected]. We will respond within the periods set by applicable law. You can delete your account directly from the application settings.

If you believe we have not handled your request properly, you may lodge a complaint with the competent data protection authority in your country.

10. App permissions

The application requests permissions that you can grant or revoke from your device settings:

Location: essential for the service. For drivers, also in the background while online.
Camera and photos: for your profile photo, documents and facial verification.
Notifications: to keep you informed about your trip status.
Contacts: optional, only if you wish to book a trip for someone else.

Revoking the location permission will prevent the service from working.

11. Security

We apply technical and organizational measures to protect your data, including encryption in transit, encrypted backups, access controls and activity logging. No system is completely infallible, but we work to reduce risks and will notify you if a security breach significantly affecting your data occurs.

12. Minors

ViumbiGo is not directed at people under 18 and we do not knowingly collect their data. If we identify a minor's account, we will close it and delete their data. If you are a parent or guardian and believe a minor in your care has provided us with data, please contact us.

13. Changes to this policy

We may update this policy. We will publish the new version on this page with its date, and will notify you through the application or by email when changes are substantial.

14. Contact

Viumbi S.A.S.
Email: [email protected]
Website: go.viumbi.com