Privacy Policy

Last updated: March 2026

We may update this policy from time to time. We will notify you of significant changes via the app or email. Please check this page periodically for updates.

1. Introduction

At GeGo, we take your privacy seriously. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our carpooling application.

2. Information We Collect

Account Information:

• Name and email address
• Phone number (for verification)
• Profile photo (optional)
• Authentication data from social sign-in

Driver Information:

• Vehicle details (make, model, registration)
• Driver's licence verification status

Usage Information:

• Ride history (routes, dates, times)
• Pickup and destination locations
• Device information and app usage data

Location Data:

• Precise location (only when app is in use and you enable it)
• Current location for ride creation and search
• Saved addresses and frequent destinations

We collect precise location data solely for matching rides and do not track you outside the app without your consent. You control location access via your device settings (iOS Settings → Privacy → Location Services → GeGo Ride).

3. How We Use Your Information

We use your information to:

• Provide and improve the GeGo service
• Match you with suitable rides and passengers
• Send ride notifications and updates
• Verify user identities and prevent fraud
• Provide customer support
• Analyse usage to improve our service
• Comply with legal obligations

3.1. Lawful Basis for Processing

We process your personal data based on the following legal grounds:

• Performance of a contract: To provide ride services, notifications, and matching. This is necessary to deliver the core service you request.
• Legitimate interests: For fraud prevention, service improvement, and safety matching. We assess the necessity of this processing and balance it against your rights. You can object to processing based on legitimate interests by contacting us.
• Consent: For optional features such as sharing your profile photo or preferences. You can withdraw consent at any time in app settings or by contacting us.

If you would like to see our Legitimate Interests Assessment, please contact us at support@gego.app.

4. Information Sharing

We share limited information with other users to facilitate rides:

• Drivers see passenger names and pickup locations
• Passengers see driver names and vehicle details
• Your profile photo is visible to ride participants

We do NOT:

• Sell your personal data to third parties
• Share your email or phone without consent
• Use your data for targeted advertising

5. Data Storage & Security

Your data is stored securely using:

• Google Firebase cloud infrastructure
• Encryption in transit and at rest
• Secure authentication protocols
• Regular security audits

Data is stored in servers located in the European Union.

6. Your Rights (GDPR)

Under UK and EU data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (right to be forgotten)
• Object: Object to processing based on legitimate interests
• Data portability: Receive your data in a machine-readable format (e.g., JSON)
• Withdraw consent: Withdraw consent for optional features at any time
• Restrict processing: Request we limit how we use your data in certain circumstances

Exercising Your Rights:

To exercise these rights, contact us at support@gego.app. Requests are free and we will respond within 1 month (this may be extended by 2 months for complex cases, as permitted by UK law). We may pause the response clock if we need to verify your identity, as required by the Data (Use and Access) Act 2025.

7. Data Retention

We retain your account data while your account is active. Inactive accounts (no activity for 2 years) will be deleted automatically.

Ride History: We keep ride history for 2 years after the ride date for safety, dispute resolution, and legal compliance purposes.

Anonymised Data: After deletion, anonymised ride data (with all personal identifiers removed) may be retained longer for service improvement and environmental impact statistics. This data cannot be linked back to you.

You can request account deletion at any time, and we will remove your personal data within 30 days, except where we're required by law to retain it (e.g., for tax records or legal disputes).

8. Third-Party Services

GeGo uses the following third-party services:

• Google Firebase (authentication, database, storage, analytics)
• Apple Sign In, Google Sign In, Facebook Login
• Apple Maps / Google Maps (location services)

These services have their own privacy policies. We ensure all third-party processors have appropriate data processing agreements in place.

8.1. International Data Transfers

Your data may be transferred and stored outside the UK/EU (for example, to the United States via Google Firebase servers). When we transfer your data internationally, we use appropriate safeguards to protect it, including:

• Standard Contractual Clauses (SCCs) approved by the UK and EU
• Data processing agreements with third-party processors
• Encryption in transit and at rest

By using GeGo, you consent to these international transfers. If you have concerns, please contact us.

9. Cookies & Tracking

GeGo is a mobile app and does not use cookies. We use anonymised analytics (via Firebase Analytics) to understand app usage and improve our service. This data is aggregated and cannot identify you personally.

You can opt out of analytics in your device settings (iOS Settings → Privacy → Analytics) or in the app preferences. We do not use your data for targeted advertising or cross-app tracking.

10. Children's Privacy

GeGo is not directed at children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal data from a child under 18, we will delete it immediately.

For users under 13, we would require verifiable parental consent if we were to offer features specifically designed for children (we currently do not offer such features).

If you believe a child under 18 has provided us with personal data, please contact us immediately at support@gego.app and we will take appropriate action.

11. Automated Decision-Making

We do not make solely automated decisions that have legal effects or significantly affect you. Our ride matching algorithm assists in connecting drivers and passengers, but all bookings require human confirmation and interaction. You always have the right to request human review of any automated processing.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes via the app or email. Continued use of GeGo after changes constitutes acceptance of the updated policy. The "Last updated" date at the top of this policy indicates when it was last revised.

13. Contact Us

14. Compliance

This Privacy Policy complies with UK GDPR (General Data Protection Regulation) and the Data Protection Act 2018, including updates from the Data (Use and Access) Act 2025. We are committed to protecting your privacy and handling your personal data in accordance with these laws.