Appendix No. 1 to the Privacy Policy — List of Personal Data Recipients
Version: v1 Last updated: September 24, 2026
The English text is a translation provided for information. In case of any discrepancy, the Russian version prevails as the legally authoritative one.
List of personal data recipients
This Appendix No. 1 is an integral part of UBASE LLC’s Privacy Policy (clause 11.2 of the Policy) and is published by the Platform separately from its text — so that adding a new recipient or changing the composition of the existing ones does not require a change to the Policy itself. The general rules on data transfers — that UBASE does not sell personal data, transfers it only for the purposes listed here, and that some services may process data outside the Republic of Uzbekistan — are set out in section 5 of the Policy and continue to apply to every row below.
| Recipient | Data | Purpose |
|---|---|---|
| MyID | Phone number and PINFL for the session; full name, PINFL, passport data, date of birth and address from the verification result | Identity confirmation |
| Uzum, Payme, Click | Checkout/payment identifiers, amount, order/cart and fiscal data; token and last four digits where returned | Package payments |
| Agora | Real-time call audio and channel/session technical data; UBASE does not record calls | In-app voice calls |
| Cloudflare | Photos and media files | Cloud storage |
| Eskiz, Playmobile | Phone number and the one-time SMS message text | SMS with a login code |
| Firebase (Google) | Device token; notification/call payload (name, ID/role, channel and Agora fields); analytics events with order/category IDs and role | Notifications, calls and analytics |
| Sentry | Errors, performance, device information and a pseudonymous user ID with role | Fault diagnostics |
| State bodies | Upon request of a court / law-enforcement bodies | Legal requirement |