Yonko IT

Privacy Policy · Kettu

Last updated: May 2026

This Privacy Policy describes what data the Kettu mobile app collects, how we use it, who we share it with, and how you can control it. By using the app, you confirm that you have read this document.

1. Who processes your data

The data controller is Yonko IT (Tashkent, Uzbekistan) — the developer and operator of the Kettu app. For any questions related to the processing of personal data, you can contact us via the channels listed in Section 12.

2. Data we collect

We collect the minimum data required to operate the service:

  • Mobile phone number (+998 …) — used as the primary account identifier and verified via a one-time password (OTP).
  • First and last name — filled in after registration; visible to other users during shared trips.
  • Profile photo — optional, at your discretion.
  • For drivers: photo of the driver’s license, vehicle make and model, license plate, color, transmission type. This data is manually reviewed by a moderator.
  • Trip information: pickup and drop-off points (including GPS coordinates), date and time, number of seats, total price.
  • Technical device data: device model, Android version, OneSignal push-notification identifier — required for delivering notifications and diagnosing issues.

3. Location

The app requests access to your location only while you are actively using it (foreground): when you pick a pickup/drop-off point or view a driver’s position on the map. We do not collect location in the background and do not track your movement outside of trip-related scenarios. Precise coordinates are stored only in relation to the trips you create or book.

4. Android permissions

The app requests only the permissions it actually needs:

  • Location (precise) — to determine the pickup address and display the map. Requested only-while-using-app.
  • Notifications — to receive push messages about booking status, schedule changes, and new requests (for drivers).
  • Camera and gallery access — to upload profile photos and document photos (drivers only).
  • Internet — to exchange data with the server.

5. How we use your data

We use the collected data exclusively for the following purposes:

  • Registration and authentication (OTP, access recovery).
  • Trip search and booking, communication between passenger and driver.
  • Driver document verification and platform safety.
  • Sending notifications about the status of your trips and requests.
  • Diagnosing errors and improving service quality (aggregated technical telemetry).
  • Complying with the laws of the Republic of Uzbekistan, including financial-transaction requirements.

6. Sharing data with third parties

We share data with third parties only when it is genuinely needed for the app to function. List of recipients:

  • Google LLC (Google Maps Platform) — coordinates and addresses you search for or view are sent for map display and geocoding. Details: policies.google.com/privacy.
  • OneSignal Inc. — the device push token is transmitted to deliver notifications. OneSignal does not have access to the content of your trips.
  • Functional Software, Inc. (Sentry) — technical error reports (stack traces, app version, device identifier). Personal data is deliberately excluded from these reports.
  • Payment providers (Click, Payme) — when online-payment integration is enabled in the future, the payment amount and trip identifier will be transmitted. We do not store card details — they are handled by the payment gateway.
  • Government authorities — only upon official request and within the limits of the laws of the Republic of Uzbekistan.

7. Where and how data is stored

The app’s servers are hosted in data centers of a cloud provider located in the European region. Only Yonko IT staff who have completed the relevant onboarding have access to the data. Connections between the app and the server are encrypted with TLS 1.2+. Passwords are not stored — authentication uses SMS-based OTP.

8. Retention periods

Active account data is stored for the entire period of use. After an account-deletion request, personal data is removed within 30 calendar days. Data related to completed financial transactions may be retained longer in anonymized form, as required by the tax and accounting laws of the Republic of Uzbekistan (up to 5 years).

9. Your rights

In line with the laws of the Republic of Uzbekistan and common data-protection practice, you have the right to:

  • Receive a copy of the personal data we hold about you.
  • Correct inaccurate or outdated profile data.
  • Request account deletion — available in the app (Settings → Delete account) or via yonko.uz/kettu/delete-account.
  • Withdraw consent for data processing (this means you will no longer be able to use the service).
  • File a complaint about the operator with the authorized government body.

10. Age restrictions

Kettu is intended for users 18 years of age or older. Registration of persons under 18 is not allowed. If we become aware that an account was created by a minor, we will remove it without prior notice.

11. Changes to this policy

We may update this policy from time to time — for example, when adding new features or changing partners. We will notify you of any material changes in the app at least 14 days before they take effect. The date of the last update is shown at the top of this document.

12. Contact

For any questions related to the processing of your data, account deletion, or this policy:

  • Telegram: t.me/yonko_it
  • Email: privacy@yonko.uz
  • Address: Yonko IT, Tashkent, Republic of Uzbekistan