GDPR & Your Rights

YOUGO? AB, Stockholm, Sweden, is the data controller for the personal data you provide when using our app and website. Our privacy contact is legal@you-go.se.

• Access (Art. 15) — receive a copy of the personal data we hold about you.
• Rectification (Art. 16) — correct inaccurate or incomplete data.
• Erasure (Art. 17) — "right to be forgotten", subject to legal retention (e.g. Swedish accounting law, 7 years).
• Restriction (Art. 18) — pause processing while a dispute is resolved.
• Portability (Art. 20) — receive your data in a structured, machine-readable format (JSON).
• Object (Art. 21) — object to processing based on legitimate interest, including profiling.
• Withdraw consent (Art. 7) — at any time, without affecting past processing.

1. Email legal@you-go.se from the account address, or use the in-app "Download my data" and "Delete account" actions in your Profile.
2. We reply within 30 days (extendable by 60 days for complex requests, with notice).
3. Identity verification may be required to protect your data — usually a signed-in session is enough.

• Account & profile — while active + 12 months.
• Ride history & receipts — 7 years (Bokföringslagen).
• Payment metadata — 7 years; card data never stored (Stripe).
• Support conversations — 24 months.
• Analytics — pseudonymised, aggregated after 14 months.

Data is primarily processed within the EU/EEA. Where a subprocessor (e.g. certain Stripe or Google services) processes data outside the EEA, we rely on the European Commission's Standard Contractual Clauses and additional safeguards where required.

You can complain to the Swedish supervisory authority Integritetsskyddsmyndigheten (IMY) — imy.se — or the authority in your EU country of residence. We'd appreciate the chance to resolve it first at legal@you-go.se.