Draft text — to be reviewed by a lawyer before launch. Placeholders are in [brackets].
Privacy policy
Last updated: 21 October 2026
Controller
PFA BRATU COSMIN ALEXANDRU, EUID ROONRC.F2026014445008, tax ID 54272691, registered office in Alexandria, Teleorman county, email [email protected], phone 0766 222 233. Data protection contact: [email protected].
What we collect
- Account: email, phone number (verified by SMS), first and last name, birth date (to check you are 18+), optional photo, bio and travel preferences.
- Identity check: the photo of your document (identity card, driving licence or passport). The text on it is read on your phone; the server receives only that text and the photo, compares the name and birth date with your account, and keeps neither the text nor your personal numeric code. The photo is deleted right after the automatic confirmation or the manual check. Exception: for a share of automatic confirmations, picked at random, the photo is kept for at most 7 days so that a person on the HopaHop team can check the document matches the account (a spot check, to prevent fraud); it is deleted right after that check or, at the latest, when the time is up. If a verification is withdrawn, we also keep the reason. We keep only the outcome: verified, the document type, the date and what matched. An automatic check can only confirm an account; when the details do not match, a person on the HopaHop team decides.
- Cars: catalog model, year and colour. We do not ask for the licence plate.
- Trips: rides you publish (stops, times, price), bookings (seats, bags), messages, reviews and reports.
- Payments: handled by Adyen; we store payment identifiers and amounts, never card numbers.
- Location: only when you tap "near me"; never in the background.
- Diagnostics: crash reports without personal data (Sentry, EU region).
Who sees what
Other members see your first name, the initial of your last name, your photo, badges, ratings and reviews. Your email and birth date are never shown. Your phone number is seen only by the other person on a trip (the driver or the passenger), once the booking is paid, so you can call or message each other on WhatsApp. Confirmed passengers see the make, model and colour of your car, so they can recognise it at pickup.
Why (legal bases)
- Contract: account, bookings, payments, messaging.
- Legitimate interest: safety, fraud prevention, moderation.
- Legal obligation: accounting and tax records.
- Consent: marketing messages and non-essential analytics (if any).
Processors
The HopaHop server (database and files) is hosted by the operator in Romania. Cloudflare (network and protection; connections to the server pass through it), SendSMS.ro (SMS codes, Romania), Adyen N.V. (payments, Netherlands), Google (maps and routes), Expo/Google Firebase (push notifications), Resend (email), Sentry (error reports, EU). [To check with a lawyer: transfer mechanisms for providers outside the EU.]
How long
Messages: 12 months after the trip. Rides and bookings: 3 years. Payment and accounting records: as required by law. Deleted accounts are anonymised immediately, except records we must keep.
Your rights
Access, rectification, deletion, restriction, portability and objection. Write to [email protected]; we answer within one month. You can delete your account in the app (Profile → Settings → Delete account) or as described on this page. You may complain to ANSPDCP.