Effective date: 17 October 2025
Controller: PICK2MOOV, UNIPESSOAL, LDA (NIPC/VAT: PT518989763)
Address: Avenida Dr. António Martins 13 C/V Dtª, 1070-091 Lisboa, Portugal
Contact (privacy): info@pick2moov.com

1. Scope

This Policy explains how we collect, use, share, and protect personal data when you use the Pick2Moov iOS and Android apps and related services in Portugal.

2. Data We Collect

Account & Profile: name, email, password hash, profile photo.
Driver Data: vehicle details and documentation you provide (e.g., registration/permit where applicable).
Ride & Transaction: pickup/dropoff, route, timestamps, fare amounts, receipt details, and payment tokens from Stripe (we don’t store full card numbers).
Device & App: device model, OS/version, app version, diagnostics/crash logs, and push notification token.
Location: precise location for pickup, routing, safety, and ETA while using the app; for Drivers, in-trip and on-duty background location (when enabled).
Communications: in-app messages with support, ratings/reviews.

We do not intentionally collect special category data. Please avoid sharing sensitive information.

3. How We Collect It

• Directly from you (account setup, Driver onboarding, support).

• Via your device permissions (location, notifications, camera for photos).

• Automatically through app SDKs and logs.

• From payment processing by Stripe.

4. Why We Use Data (Purposes) & Legal Bases

• Provide the Service (create account, match riders/Drivers, navigation/ETA, payments) — Contract.

• Safety & fraud prevention (verify activity, detect misuse) — Legitimate interests / Legal obligation.

• Customer support & communications — Contract / Legitimate interests.

• Analytics and service improvement (e.g., Google Analytics) — Legitimate interests; where required, consent.

• Compliance (tax, accounting, legal requests) — Legal obligation.

• Notifications (ride status, receipts) — Contract; marketing notifications (if any) — consent with opt-out at any time.

If you do not provide required data (e.g., location, payment), core features may not function.

5. Sharing & Processors

We share data with:

• Stripe (payment processing).

• Hosting: DigitalOcean, EU region (Amsterdam AMS3).

• Analytics: Google Analytics (app analytics).

• Professional advisors and authorities where legally required.

• In corporate transactions (merger, acquisition) subject to safeguards.

We do not sell personal data. We do not run third-party targeted advertising in the app.

6. International Data Transfers

We aim to store and process data in the EU/EEA. Some providers (e.g., Google) may process data in other countries. Where transfers occur, we rely on European Commission Standard Contractual Clauses and implement appropriate safeguards, plus supplementary measures where necessary.

7. Cookies & Mobile Identifiers

The app does not use web cookies. It uses mobile identifiers and SDK telemetry for functionality and analytics. You can manage permissions and ad/analytics settings in your device OS.

8. Data Retention

• Account data: retained while your account is active and for a reasonable period afterward for record-keeping, dispute resolution, and legal compliance.

• Transaction and financial records: retained as required by law (e.g., up to 10 years for tax/accounting in Portugal).

• Safety/fraud logs: retained for a limited period proportionate to risk and legal requirements.

9. Security

We use administrative, technical, and organizational measures, including encryption in transit and at rest, access controls, least-privilege practices, monitoring, and vendor due diligence. No system is 100% secure.

10. Your Rights (GDPR/Portugal)

You can request: access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests, and you can withdraw consent at any time (where processing relies on consent).

• Submit requests to info@pick2moov.com. We may verify identity and respond within statutory timelines.

• You may lodge a complaint with the Portuguese Data Protection Authority (CNPD).

11. Children

The Service is for 18+. We do not knowingly collect data from minors. If you believe a minor used the Service, contact us to delete the account.

12. Communications

Transactional emails and push notifications are necessary to provide the Service (e.g., ride status, receipts). Marketing messages (if any) require your prior consent and always include an opt-out.

13. Third-Party Links & Services

Third-party services used within the app have their own privacy notices and terms (e.g., Stripe, Google). We are not responsible for their practices.

14. Changes to this Policy

We’ll notify you of material changes via in-app notice and/or email and update the effective date.

15. Contact

Questions or requests: info@pick2moov.com
PICK2MOOV, UNIPESSOAL, LDA — Avenida Dr. António Martins 13 C/V Dtª, 1070-091 Lisboa, Portugal