Privacy Policy

1.1. Localio Labs s.r.o., with its registered office at Štefánikova 100, 664 53 Újezd u Brna, ID: 24338770 (“Controller”), fulfils its personal-data protection obligations in accordance with EU Regulation 2016/679 (GDPR).

1.2. This policy explains what data we collect in connection with your use of the TwoUp! application, our website and related services.

We process only the minimum data necessary to run TwoUp!:

• Account data - email, phone, date of birth, gender, name/nickname, password (hashed).
• Rider profile - photos, bio, riding style, bikes in your garage, licence type, preferred routes and terrain.
• Verification data - identity document and licence images, submitted for age and rider verification and deleted after verification is complete.
• Location data - approximate location used to show nearby Riders. Precise location is only shared with matches you explicitly authorise (e.g. live-share during a ride).
• Interaction data - matches, chats, likes, reports and community activity.
• Billing information - data necessary to issue tax documents for paid subscriptions.
• Technical logs - IP address, device type, OS version, crash reports, to keep the app secure and stable.
• Analytics (optional) - anonymised usage data, only with your consent.

3.1. Contract performance - account data, rider profile, chats and billing are processed to deliver the Services you request.

3.2. Legitimate interest - security, fraud prevention, community safety and protection.

3.3. Consent - analytics, marketing communications and non-essential cookies.

3.4. Legal obligation - retention of accounting and tax documents under Czech law.

4.1. Data in transit is protected by TLS 1.3 encryption. Data at rest in Google Cloud / Firebase storage is automatically encrypted with AES-256. Passwords are hashed and never stored in plain text.

4.2. Access to the production database is restricted to authorised personnel with multi-factor authentication and full audit logging.

5.1. We do not sell your personal data. We share it with third parties only where strictly necessary to operate TwoUp!:

• Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland) - cloud infrastructure, database, authentication and file storage via Google Firebase / Google Cloud Platform; primary region europe-west3 (Frankfurt, Germany).
• Payment gateways - Apple, Google, Stripe - process payments under their own security standards. The Controller never sees full card numbers.
• Identity verification providers - used only during rider verification, with data deleted after the check is complete.
• Transactional email providers - for system, security and invoice emails.

5.2. The current list of sub-processors is available on request at support@twoup.eu.

6.1. Primary processing takes place within the European Union (Frankfurt, Germany).

6.2. Because the parent company of Google Ireland Ltd. is Google LLC (USA), some data may be transferred outside the EU to a limited extent. Such transfers are secured by EU Standard Contractual Clauses (Commission Implementing Decision 2021/914) and recipient certification under the EU - US Data Privacy Framework.

Under the GDPR you have the right to:

• access your personal data,
• rectify or erase it (right to be forgotten),
• restrict processing,
• object to processing,
• data portability,
• lodge a complaint with the Czech Office for Personal Data Protection (uoou.cz).

Please address requests to support@twoup.eu.

8.1. Rider profile and interaction data are kept while your account is active. On deletion, production data is erased within 30 days and from Google Cloud / Firebase backups within 90 days.

8.2. Accounting and tax documents are retained for the period required by Czech law.

Our website uses essential cookies to function. Analytical and marketing cookies are used only with your consent, which you can withdraw at any time. See the Cookies Policy for details.

This policy is effective from July 1, 2026. The Controller reserves the right to update it in line with legislative and product changes. Users will be informed of significant changes in advance.

Localio Labs s.r.o.
Štefánikova 100, 664 53 Újezd u Brna, Czech Republic, EU
ID: 24338770 · VAT: CZ24338770
Email: support@twoup.eu