Privacy Policy

YOUGO? AB, Stockholm, Sweden is the data controller for personal data processed through the YOUGO? apps and website. You can reach our privacy team at legal@you-go.se.

• Account data: name, email, phone, language, role (passenger, driver, fleet, venue partner).
• Ride data: pickup and drop-off addresses, route, timestamps, fare, category, ratings.
• Location: approximate location to suggest pickup, and precise location during an active ride (passenger and driver).
• Payment data: handled by Stripe; we store only the last 4 digits, brand and a token — never full card numbers.
• Driver & partner KYC: Personnummer, taxi permit, IBAN, company Org-nr/VAT (where applicable) for legal compliance.
• Device & diagnostics: device model, OS, app version, crash logs, anonymised performance metrics.

• Provide rides, match drivers, calculate prices, process payments.
• Safety: identify drivers, prevent fraud, respond to incidents.
• Customer support and dispute resolution.
• Legal obligations (tax, accounting, transport regulation, AML).
• Product improvement and aggregated analytics (no individual profiling).
• Marketing only with your consent — you can opt out at any time in your profile.

• Contract — to deliver rides you book.
• Legal obligation — tax, transport licensing, AML.
• Legitimate interest — security, fraud prevention, service reliability.
• Consent — marketing communications and optional analytics cookies.

We share the minimum data needed with vetted processors under EU Standard Contractual Clauses where required:

• Lovable Cloud (managed backend, EU region) — database, auth and storage.
• Stripe — card, Apple Pay, Google Pay processing.
• Google Maps Platform — geocoding, routing and live tracking.
• Fleet partners — only the data drivers need to complete your trip.
• Authorities — only when legally required.

We never sell your personal data.

• Account data: while your account is active + 12 months.
• Ride history and receipts: 7 years (Swedish bookkeeping law).
• Driver KYC: duration of activity + 5 years.
• Marketing consent records: until you withdraw consent.
• Crash logs and diagnostics: up to 90 days.

Under GDPR you can ask us to:

• Access a copy of your data.
• Correct inaccurate information.
• Delete data we no longer need to keep.
• Restrict or object to certain processing.
• Export your data in a portable format.
• Withdraw consent for marketing at any time.

Email legal@you-go.se. You can also lodge a complaint with Integritetsskyddsmyndigheten (IMY).

• Encryption in transit (TLS 1.2+) and at rest.
• Row-level security and strict role-based access in our backend.
• Card data isolated within Stripe (PCI-DSS Level 1) — never stored on our servers.
• Continuous monitoring, audit logs, and incident response within 72 hours where notification is required.

We use a small set of strictly necessary cookies for authentication and session continuity. Optional analytics cookies require your consent and can be disabled at any time in the cookie banner.

YOUGO? is not intended for children under 16. Minors may ride only when accompanied by an adult account holder.

Your data is stored within the European Economic Area. Where a processor (e.g. payment partners) needs to transfer data outside the EEA, we rely on EU Standard Contractual Clauses and additional safeguards.

We will notify you of material changes in-app at least 14 days before they apply. The latest version is always available on this page.