Hoplift Privacy Policy

Introduction and Data We Collect

Introduction

Welcome to Hoplift. This Privacy Policy explains how Hoplift LLC, a company incorporated under the laws of USA, with its registered office at 30 N Gould St Ste N Sheridan, WY 82801, USA, ('we', 'us', or 'our'), collects, uses, and protects your personal data when you use the Service. We are the **data controller** for the purposes of the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (GDPR).

1. The Information We Collect

We are committed to the principle of **data minimisation** and collect only the data that is necessary to provide our Service.

1.1. Information You Provide Directly to Us

• **Account Information:** Full name, email address, phone number, secure password, and date of birth (to verify eligibility).
• **User Profile Information (Optional):** Profile picture and a short biography.
• **Communications with Us:** Information included when you contact customer support, provide feedback, or respond to surveys.

1.2. Information We Collect Automatically

• **Location Information:** Precise location data via GPS when the app is open ("in the foreground") to determine pickup and identify matches, plus trip history (origins, destinations, routes).
• **Usage Information:** Data on features used, route searches, access date/time, app crashes, and other system activity.
• **Device Information:** Hardware model, operating system/version, IP address, unique device identifiers, and mobile network information.

1.3. Information We Collect from Third Parties

If you use Google or Apple to log in, we receive your name, email address, and profile picture as authorized by the provider.

2. How and Why We Use Your Information (Legal Bases)

We are required by law to have a valid legal basis for each of our data processing activities.

Processing Activity (Example)	Purpose	Lawful Basis
Account setup, location/destination collection, sending booking confirmations.	To provide the core ride-sharing Service and facilitate ride execution.	Performance of a Contract
Sharing name, picture, and rating with co-riders.	To build trust and safety between users before a shared ride.	Legitimate Interest
Analyzing aggregated/anonymized trip data.	To improve and optimize our Service and understand user trends.	Legitimate Interest
Sending promotional emails.	To market our services.	Consent (withdrawable at any time)
Responding to customer support inquiries.	To provide assistance and resolve issues.	Performance of a Contract and Legitimate Interest

Sharing, Security, Retention, and Transfers

3. How We Share and Disclose Your Information

We **do not sell your personal information**.

3.1. Sharing Between Users

• **During Matching:** General intended route, first name, profile picture, and user rating.
• **After Match Confirmation:** Precise pickup location and chat access.

3.2. Sharing with Service Providers

We share with third parties (e.g., Cloud Hosting, Google Maps Platform, Analytics Providers) who are contractually obligated to protect your data.

3.3. Sharing for Advertising

We **do not share** your personal information with third parties for their own advertising or marketing purposes.

4. Data Retention and Deletion

• **Trip History:** Retained for **3 years** for safety, dispute resolution, and insurance purposes.
• **Account Deletion:** All remaining personal data is permanently deleted or anonymized within **90 days** of an account deletion request.

5. Security of Your Information

We implement technical and organizational security measures, including **encryption of data in transit (TLS 1.2 or higher) and at rest**, strict access controls, and regular security audits.

7. International Data Transfers

Your information may be processed in countries including **Ireland and the United States**. Transfers outside the EEA/UK rely on the European Commission's **Standard Contractual Clauses** or the **EU-US Data Privacy Framework**.

8. Children's Privacy

Our Service is **not directed to individuals under the age of 18 years**. We will delete data collected from a minor without verified parental consent immediately.

Your Rights and How to Contact Us

Your Rights and Choices (GDPR)

Under UK and EU data protection laws, you have specific rights, including the:

• **Right to Access:** Request a copy of your personal data.
• **Right to Rectification:** Request correction of inaccurate or incomplete information.
• **Right to Erasure ('Right to be Forgotten'):** Request the deletion of your personal information.
• **Right to Object:** Object to processing based on our legitimate interest.
• **Right to Withdraw Consent:** Withdraw consent for processing (e.g., marketing) at any time.
• **Right to Lodge a Complaint:** Lodge a complaint with a supervisory authority (e.g., the ICO in the UK).

You can exercise most of these rights directly through the **'Privacy Settings'** section within the Hoplift app.

10. How to Contact Us

For any questions or requests you cannot fulfill through the app, please contact us:

• **Email:** social@hopliftapp.com
• **Registered Address:** Hoplift LLC, 30 N Gould St Ste N Sheridan, WY 82801, USA
• **UK Representative:** We have appointed a UK representative in accordance with Article 27 of the UK GDPR.

9. Changes to This Privacy Policy

We may update this policy. We will notify you of material changes by posting the new policy in the app and/or sending an email or in-app notification.