Last Updated: May 27th, 2026

Effective Date: May 27th, 2026

Welcome to WeRide Go.

WeRide Go (the “App”) is provided by WeRide and its affiliates/cooperating operators in various operational regions to offer users autonomous vehicles services in the Middle East. This policy applies to the processing of personal data generated when you use this App, our official website, in-vehicle systems, and service-related offline equipment (such as in-vehicle cameras, sensors, and roadside perception units).

For the purpose of this policy, “we,” “us,” or “WeRide” refers to WeRide and its affiliated companies/authorized local operating entities in the respective location of operation; “you” refers to the natural person (passenger, account holder, legal guardian) who registers, accesses, or uses any function of this App.

This policy aims to explain how we collect, use, share, store, and protect your personal data in accordance with applicable laws and the rights you are entitled to. This policy does not constitute a contractual term, unless otherwise mandatorily required by applicable law.

This policy will help you understand the following:

1. Introduction and Scope

2. What Information We Collect

3. How We Use Your Information

4. Special Note On In-Vehicle Imagery/Audio And Sensor Data

5. Cookies, SDKs, And Similar Technologies

6. Protection of Minors

7. How We Share Your Information

8. Data Security

9. Data Retention and Deletion

10. Your Rights and Choices

11. Updates to This Policy

12. Contact Information and Local Representatives

We collect data related to our services based on the principles of necessity, transparency, and minimization. This primarily includes:

• Account Data: Full name, phone number, email, password, profile photo.
• Ride Data: Pickup and drop-off locations, ride history, fare details, payment method.
• Location Data: Real-time GPS location (for autonomous vehicles) to match rides and ensure safety.
• Device Data: Device ID, app version, operating system, IP address, and language settings.
• Payment Data: Card details (processed securely by our payment provider - we do not store full card information).
• Communications Data: Messages between service centre and riders (via in-app chat), support tickets, feedback.
• Optional Data: Referral codes, promotional participation, preferences, or saved locations.
• Image: Recording of image via in-vehicle cameras. For safety and regulatory compliance with the Integrated Transport Centre, the autonomous vehicles use internal cameras to monitor passenger status. Data may be recorded for safety assurance and incident investigation, and will be handled in line with UAE data-protection laws.

Note that if you refuse to or have withdrawn your consent to the processing of your personal data, you shall not have the ability to use our services.

We process your personal data for the following purposes and under the corresponding legal bases:

• Providing and Fulfilling Services: To create and maintain your account, process orders and dispatch vehicles, provide routing and navigation, manage rides and arrivals, process payments and reconciliations, issue invoices, and provide customer and technical support.
• Legal Basis: Performance of a contract; taking steps at your request prior to entering into a contract.
• Safety and Compliance: To monitor trip safety, handle accidents and disputes, prevent fraud and abuse, assess account and transaction risks, and fulfill regulatory compliance and reporting obligations.
• Legal Basis: Compliance with a legal obligation; public interest/safety; legitimate interests within permissible limits.
• Improvement and R&D: To train and simulate algorithms, iterate on features, optimize performance, and conduct statistics and analysis (usually in a de-identified/anonymized form).
• Legal Basis: Legitimate interests within permissible limits; consent (where required by law).
• Marketing and Communications: To send you service-related notifications, offers, and event information with your consent; you may unsubscribe at any time.
• Legal Basis: Consent or legitimate interests within permissible limits (respecting your choices).
• Legal Claims and Compliance Retention: To process and retain data necessary for establishing, exercising, or defending legal claims.
• Legal Basis: Compliance with a legal obligation, legitimate interests, or rights established by law.

• Purpose of Use: To enhance trip safety, provide evidence for accident investigation and insurance claims, respond to disputes and complaints, meet regulatory retention requirements, verify service quality, and improve autonomous driving perception and decision-making systems.
• Transparency Notice: Prominently placed notices regarding audio/video recording will be displayed in the vehicle (with additional notice if audio recording is enabled); explanations and toggle switches (if applicable) will also be available within the App.
• Minimization of Processing: We implement measures such as tiered access controls, encryption, and retention period limits; we strive to de-identify or delete data as soon as the purpose is fulfilled.
• Your Choices: Without compromising safety and compliance, we will provide reasonable choices and objection channels; situations where retention is mandated by law are not affected.

• We and our authorized partners may use cookies, SDKs, pixel tags, and other similar technologies for purposes such as identity authentication, session maintenance, preference memorization, statistical analysis, fault diagnosis, and advertising conversion measurement.
• You can manage related permissions within your device or App settings; however, disabling them may render some functions unavailable.
• When third-party tools are involved, we will assess and require them to fulfill corresponding privacy and security obligations.

• This service is intended for users with full legal capacity. If ride services are provided for minors/children, their legal guardian must create and manage the account on their behalf and exercise their rights.
• We do not knowingly collect personal data from children unless we have obtained the explicit consent of a guardian and it is necessary for providing the relevant service.

We only share your information in the following circumstances and on a need-to-know basis:

• Service and Operational Partners: Local vehicle operation and maintenance providers, remote assistance and roadside rescue services, map navigation and location services, payment and settlement processors, customer service outsourcers, and cloud and security vendors.
• Regulatory and Public Authorities: Submissions, inspections, or law enforcement assistance as required by regulatory bodies in the UAE and its Emirates (such as the RTA Dubai Roads & Transport Authority, Abu Dhabi ITC Integrated Transport Centre) and the Saudi Arabian TGA Transport General Authority.
• Accidents and Insurance: Insurance companies, claims and assessment agencies, legal advisors, and auditors for accident investigation and claims processing.
• Corporate Transactions: In the event of a merger, acquisition, reorganization, or asset transfer, necessary information disclosure and handover will be conducted in compliance with the law and with appropriate safeguards in place.
• Based on Your Instruction or Consent: Sharing with third parties you authorize (e.g., integration with your corporate account/benefits platform).
• Legal Necessity: When required by law, court order, or necessary for establishing, exercising, or defending legal claims.

We do not disclose your information to third parties for the purpose of selling your personal data.

• We implement technical and organizational security measures comparable to industry standards, including but not limited to: data classification and grading, encryption at rest and in transit, access control and the principle of least privilege, log auditing, vulnerability management, employee need-to-know access, supply chain security assessments, and disaster recovery and business continuity plans.
• In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will report it to the regulatory authority within a reasonable timeframe as required by applicable law, and, where legally required, notify you. This notification will include an overview of the incident, its potential impact, the measures we have taken, and recommendations for self-protection.

• We retain data for the minimum period necessary to achieve the purposes of processing, taking into account factors such as: the period required to provide the services, the status of your authorization, statutes of limitation for disputes and litigation, regulatory and tax retention requirements, and public safety and accident handling needs.
• When the retention purpose is fulfilled or the period expires, we will delete or anonymize the data, unless otherwise required by law.

Depending on the data protection laws in your jurisdiction, you may have one or more of the following rights:

• Request correction or deletion of inaccurate or unnecessary data.
• Restrict or object to processing.
• Withdraw consent at any time.
• Request a copy of your data (data portability).

To exercise these rights, you can use the "Privacy Settings/Contact Us" feature in the App or send an email to: PersonalInformationOfficer@weride.ai (please include necessary identity verification information). We will respond within the statutory time limits. If we cannot fulfill your entire request due to security, the rights of others, or legal confidentiality obligations, we will explain the reasons.

We may update this policy from time to time to reflect changes in our business model, laws and regulations, or regulatory guidance. For material changes, we will notify you through a prominent notice within the App, a pop-up window, or by email, and we will seek your consent again where necessary. Your continued use of the service constitutes your acknowledgment and agreement to the updated policy.

Global Data Protection Contact: PersonalInformationOfficer@weride.ai