LulaRoost Law Enforcement Request Procedures

LulaRoost releases rider and driver information to law enforcement only with valid legal process, except in an emergency involving danger of death or serious injury. Every request goes to one contact and is logged. These procedures are posted at lularoost.com/law-enforcement.

1. How to reach LulaRoost

2. What every request should include

• the agency's name, and the requesting officer's name, badge number, phone and official email address

• the legal process, attached and signed

• the accounts it covers, identified by the rider's or driver's name, phone number or email, and the trips or dates involved

• a description of the information requested

3. How LulaRoost verifies a request

Before releasing anything, LulaRoost confirms that:

• The officer is real. LulaRoost calls back the agency's published phone number, or confirms that the email comes from an official government address.

• The request is complete. It includes everything in Section 2.

• The request is specific. It names the accounts, trips or dates it covers.

4. What each type of request requires

LulaRoost releases only what the legal process covers.

5. Emergency requests

An emergency request should explain:

• the emergency, and who is in danger

• the information needed, and why it's needed right away to prevent death or serious injury

• the requesting officer's name, badge number and callback number

LulaRoost responds to emergency requests within 1 hour, any time of day. The agency should follow up with legal process.

6. Response times

• Emergencies. Within 1 hour, any time of day.

• Other requests. By the date in the legal process, or within 10 business days if it gives none.

• Preservation requests. LulaRoost preserves the named records for 90 days, and for another 90 days on request, while the agency obtains legal process.

7. Telling the rider or driver

LulaRoost tells a rider or driver before releasing their information. It does not do so when a court order or the law forbids it, when notice would put someone in danger, or in an emergency. After an emergency release, LulaRoost notifies the person once doing so is safe.

8. Information LulaRoost doesn't have

• Medical information. On Health rides, LulaRoost stores only the medical equipment listed and the pickup and drop-off times. It never collects a diagnosis or the reason for a visit.

• Card numbers. Stripe stores riders' cards. LulaRoost sees only the card type and last 4 digits.

• Background reports and Social Security numbers. Checkr prepares drivers' background reports and collects Social Security numbers directly. LulaRoost never collects Social Security numbers.

• Dash camera footage. Drivers own their dash cameras. LulaRoost has only the recordings a driver has shared with it about a safety or insurance matter.

9. When LulaRoost contacts police itself

LulaRoost may contact police on its own when:

• a rider or driver uses the app's safety button

• someone appears to be in danger

• a crime is reported on a ride

It then shares the trip's location, vehicle and driver details.

10. Certifying records

LulaRoost's records custodian can certify the records it produces as business records, on request.

11. Other requests

• Alabama Public Service Commission. Requests from the PSC to inspect records are handled under the PSC's rules, not these procedures.

• Private lawsuits. Subpoenas from private parties aren't law enforcement requests. Serve them on LulaRoost's registered agent. LulaRoost may tell the rider or driver involved and give them time to object.

12. Records

Each request is logged with:

• the date, agency and officer

• the type of legal process

• what was released, and who at LulaRoost handled it

The log and copies of each request are kept for 2 years after the response.

These procedures are effective October 13, 2026.