Privacy policy

What we collect, why, for how long, and how to take control. Last updated: 17 September 2026.

Who processes your data

Ucci is the controller of the data collected through its website and app. For any request: hello@ucci.io.

What we collect

  • Account: first name, surname, email, phone number, hashed password.
  • Location: your collection or delivery address, plus an approximate position to show nearby dishes. Precise location is used only while you are using the app.
  • Orders: dishes ordered, time slots, messages with the cook, reviews you publish.
  • Cooks: ID document, legal status, bank details for payouts, invoicing records.
  • Technical: device type, app version, error logs.

Why

  • Performance of the contract: creating the account, connecting people, collecting and paying out, handling disputes.
  • Legal obligation: invoicing, accounting, fraud prevention, identity checks.
  • Legitimate interest: service security, product improvement, aggregated audience measurement.
  • Consent: marketing notifications and non-essential trackers, withdrawable at any time.

For how long

For the life of your account. After deletion: erased within thirty days, except accounting records kept for ten years as required by law and dispute records kept for five years.

Who else sees it

We sell no data. Our processors cover hosting (European Union), payment (a licensed provider, the only recipient of card data), email and push notifications, and audience measurement. Each is contractually bound and sees only what it needs.

Your rights

Access, correction, erasure, restriction, objection and portability. Write to hello@ucci.io and we answer within one month. You may also lodge a complaint with your data protection authority.

Minors

Ucci is not intended for people under 16, and we do not knowingly collect their data.

Changes

Any change to this policy is announced in the app at least fifteen days before it takes effect.