popgostp

Privacy Policy Privacy

Last updated: July 9, 2026

This Privacy Policy explains how YUPOPCAR UNIPESSOAL LDA.the entity responsible for the brand and platform PopgoSTP, collects, uses, retains, and protects the personal data of users of the application PopgoSTP, intended for passengers, and the application PopgoSTP Driver, intended for drivers.

PopgoSTP is a digital mobility platform created for São Tomé and Príncipe. Through the app, passengers can request rides and independent drivers can receive trip requests, depending on availability, location, service category, and active settings on the platform.

YUPOPCAR acts as a technological intermediary between passengers and drivers. Unless expressly stated otherwise, YUPOPCAR does not directly provide the transportation service, does not employ the drivers, and does not replace the legal, tax, professional, or operational responsibilities that belong to independent drivers.

1. Entity responsible for data processing

Responsible entity: YUPOPCAR UNIPESSOAL LDA.

Address: Bobo Forro 145, São Tomé City, São Tomé and Príncipe

Tax ID: 517220523

Contact email: info@popgostp.com

Phone: +239 9842021

For any questions related to this Privacy Policy or the processing of your personal data, you may contact YUPOPCAR via email info@popgostp.com.

2. Who this Privacy Policy applies to

This Privacy Policy applies to all users of the PopgoSTP platform, including:

passengers who use the PopgoSTP app to request rides;
drivers who use the PopgoSTP Driver app to receive and complete trip requests;
visitors to the popgostp.com website;
people who contact PopgoSTP by email, phone, form, support, or other communication channels;
customers, visitors, tourists, residents, local partners, and entities that interact with the platform.

3. Personal data we may collect

PopgoSTP collects only the data necessary to provide, manage, improve, and protect its services. The data collected may vary depending on the type of user, the features used, and the settings active in the app.

Identification and contact data:

name;
email;
phone number;
profile photo, where applicable;
data associated with the user account.

Passenger data:

current or approximate location;
departure location;
indicated destination;
selected service category;
trip history;
estimated or calculated trip fare;
applicable fees, where they exist;
ratings given to drivers;
messages exchanged through the internal chat, where applicable;
support contacts and complaints.

Driver data:

name;
email;
phone number;
driver photo;
driving license;
identification document, when configured;
vehicle documents, when configured;
vehicle insurance, when configured;
vehicle photos, when configured;
criminal record, when configured and legally permissible;
vehicle data, including category, license plate, make, model, color, or other elements necessary to identify the vehicle;
profile approval status;
history of completed trips;
ratings received from passengers;
ratings given to passengers;
driver wallet balance;
wallet top-ups;
commissions, fees, or transactions associated with use of the platform;
data necessary for issuing an invoice or receipt related to wallet top-ups.

Technical and usage data:

IP address;
device type;
operating system;
device identifiers;
app access and usage data;
error logs;
interactions with notifications;
account preferences and settings;
data necessary for security, fraud prevention, and service improvement.

Mandatory and optional data

Some personal data is necessary to create an account, request rides, receive ride requests, verify drivers, calculate or estimate prices, enable contact between passenger and driver, ensure platform security, and comply with legal or operational obligations.

When data is necessary for the provision of the service, failure to provide it may prevent account creation, use of certain features, ride requests, driver approval, or continued use of the platform.

Other data may be optional, such as certain photos, preferences, comments, ratings, or additional information entered by the user. Failure to provide this data may limit some features, but will not necessarily prevent general use of the platform, unless it is essential for safety, identification, support, or legal compliance.

4. Location Data

PopgoSTP uses location data to enable the essential operation of the platform. This data is necessary so that passengers can request rides, drivers can receive requests near their location, and the app can display relevant information during the trip.

Location data may be used to:

identify the pickup location indicated by the passenger;
allow the driver to locate the passenger;
allow the passenger to track the driver's approach on the map;
calculate or estimate the trip price, when that feature is active;
track the trip route;
record trip history;
support support requests, complaints, or incident verification;
improve the safety, availability, and quality of the platform.

When real-time location is active, the passenger may see the driver's location on the map and the driver may see the passenger's location, as needed to complete the trip.

The user can manage location permissions in their device settings. However, limiting or disabling location may prevent or impair the normal functioning of the app.

5. How we collect personal data

Personal data may be collected directly from the user, automatically through the app, or through third parties necessary for the operation of the platform.

We collect data directly when the user:

creates an account;
fills out the passenger or driver profile;
requests a ride;
accepts or completes a ride;
uploads documents in the app;
makes driver wallet top-ups;
contact support;
send messages through the chat;
rate or comment;
submit complaints, requests or communications.

We automatically collect data when the user:

uses the app;
enables location;
receives or accepts trip requests;
starts, tracks, or ends a trip;
interacts with notifications;
uses technical features of the platform.

We may also receive data from third parties:

technical app providers;
mapping and location services;
payment providers, where applicable;
hosting, email, notification, and support services;
public authorities, where there is a legal obligation or a legitimate request.

6. What we use personal data for

PopgoSTP uses personal data for purposes related to the provision, management, security, and improvement of the platform.

We use the data to:

create and manage passenger and driver accounts;
verify and approve drivers before they become active on the platform;
allow passengers to request rides;
allow drivers to receive, accept, and carry out ride requests;
show the passenger information about the driver and the vehicle;
show the driver the necessary information about the passenger, pickup point and destination;
calculate or present price estimates;
apply cancellation fees, where applicable;
manage travel categories, including Tricar, Regular, Superior, Executive or other configured categories;
manage special services, such as pet-friendly trips, when available;
manage the driver wallet, top-ups, balances, commissions or platform usage fees;
issue invoices or receipts relating to driver wallet top-ups, where applicable;
send trip summaries by email to the passenger, the driver and the company;
store trip history in the app;
allow ratings between passengers and drivers;
allow comments on low ratings, where applicable;
respond to support requests, complaints or incidents;
prevent fraud, misuse, abuse or violations of the Terms of Use;
ensure technical, operational and administrative security;
comply with legal, tax, accounting or regulatory obligations;
improve the user experience, app performance and service quality.

7. Grounds for data processing

We process personal data on the basis of legally applicable grounds, including, as the case may be:

performance of a contract or pre-contractual steps, when processing is necessary to provide the account, process trip requests, enable the connection between passenger and driver or manage use of the platform;
compliance with legal obligations, when the data is necessary for tax, accounting, legal, regulatory purposes or to respond to competent authorities;
legitimate interest, when processing is necessary to protect the platform, prevent fraud, ensure security, respond to complaints, improve the service or manage relationships with users and partners;
consent, when this is necessary, for example for certain device permissions, optional communications or features that depend on user authorization.

When processing depends on consent, the user may withdraw that consent at any time, without affecting the validity of processing carried out previously.

Business transfer or corporate reorganization

In the event of a merger, acquisition, reorganization, sale of assets, transfer of business, change in corporate structure or similar operation involving YUPOPCAR or the PopgoSTP platform, users' personal data may be transferred to the successor entity or to third parties involved in the operation.

In that situation, YUPOPCAR will seek to ensure that the data continues to be processed in accordance with this Privacy Policy or with another policy that offers adequate protection, informing users when this is legally required.

8. Data sharing between passengers and drivers

In order for a trip to take place, certain data must be shared between the passenger and the driver.

The driver may have access to passenger data necessary for the trip, including:

name or identification shown in the app;
pickup location;
indicated destination;
real-time location, where applicable;
phone number, when necessary for external contact;
messages sent through the internal chat;
ratings or information relevant to the provision of the service, where applicable.

The passenger may have access to driver data necessary for the trip, including:

name;
driver photo, when available;
vehicle photo or details, when available;
vehicle category;
license plate or other vehicle identification element, when available;
driver's real-time location;
phone number, when necessary for external contact;
driver rating, when available.

This sharing is necessary to allow the identification of the parties, facilitate the meeting point, track the trip, provide support and increase trust in the use of the platform.

9. Prices, payments and driver wallet

Trip prices are shown in the app in São Tomé and Príncipe dobras, STN, unless otherwise indicated in the app itself.

The app may calculate the trip price based on factors such as base fare, distance traveled, service category, applicable fees, surcharges and other commercial settings defined by YUPOPCAR.

At the time of drafting this Policy, it is expected that the passenger will pay for the trip in cash directly to the driver. YUPOPCAR may make available or configure other payment methods in the future, if this is communicated in the app or in the respective Terms of Use.

Drivers may have a wallet associated with their account in the app. This wallet may be topped up through payment methods made available by the platform, including bank transfer or card, depending on the active configuration.

The driver wallet may be used to manage balances, top-ups, commissions, platform usage fees or other movements related to the use of PopgoSTP Driver.

YUPOPCAR may issue an invoice or receipt for driver wallet top-ups, where applicable. Trip summaries sent by the app do not necessarily replace tax documents, unless expressly indicated.

If the app shows reference amounts in other currencies, those amounts are for information purposes only and may be subject to exchange rate variations. PopgoSTP does not guarantee automatic conversion to euros or other currencies, unless this feature is expressly available in the app.

10. Cancellations

The app allows passengers and drivers to cancel trips, according to the rules and settings active on the platform.

There may be an initial period during which the passenger can cancel the trip at no cost. After this period, a cancellation fee may apply, as shown or provided for in the app.

Cancellation rules may vary depending on the service category, the time of cancellation, the trip status, location, operational availability or other conditions defined by YUPOPCAR.

Data related to cancellations may be processed to calculate applicable fees, prevent abuse, resolve complaints, support drivers and passengers, and improve service quality.

11. Ratings, comments and service quality

PopgoSTP may allow passengers to rate drivers and drivers to rate passengers.

Ratings may include star ratings and, in certain situations, written comments. When a low rating is given, the app may request a comment to better understand the reason for the rating.

Ratings and comments may be used to:

promote trust between passengers and drivers;
improve service quality;
analyze complaints or incidents;
detect inappropriate behavior;
apply measures provided for in the Terms of Use, including warnings, restrictions or account suspension.

Users must ensure that comments are truthful, respectful, and related to the experience of using the platform or the trip taken.

12. Chat, communications and support

PopgoSTP may provide internal chat between passenger and driver to facilitate trip coordination.

The app does not provide internal calls, but may allow external phone contact between passenger and driver, when necessary for the trip to be carried out.

Communications sent through the app, email, phone, forms, or support may be processed to:

respond to user requests;
resolve technical issues;
analyze complaints or incidents;
provide support to passengers and drivers;
protect the security of the platform;
comply with legal obligations.

Users must not share sensitive data or unnecessary information through chat or support channels.

13. Driver documents

To ensure driver validation before activation on the platform, PopgoSTP Driver may request documents and information necessary for the registration and approval process.

According to the platform's default technical configuration, a driver's license may be requested. YUPOPCAR may also request additional documents, depending on active configurations, operational requirements, and applicable law.

Additional documents may include:

identification document;
vehicle documents;
vehicle insurance;
vehicle photos;
driver photo;
criminal record certificate, where legally permissible and necessary for validation purposes.

Driver documents will be used to verify identity, validate authorization to drive, identify the vehicle, support platform security, and comply with legal, contractual, or operational requirements.

Driver approval may depend on manual validation. Submitting documents does not guarantee automatic acceptance on the platform.

Identity and biometric data verification

PopgoSTP may use identity verification features for drivers or users, when these are active in the app and necessary to prevent misuse, protect the platform, or validate profiles.

When identity verification is enabled, the app may request a photo, selfie, or facial image to confirm the user’s identity. In certain situations, technical liveness detection mechanisms may be used to confirm that the verification is being carried out by a real person.

The data collected for identity verification will be used only for that purpose, fraud prevention, platform security, and account validation. This data will not be used for advertising, marketing, or the creation of commercial profiles.

If biometric data or equivalent technologies are used, processing must comply with applicable law and may depend on consent, an appropriate legal basis, or specific legal validation.

14. Data of minors

PopgoSTP is intended for users with a minimum age of 16 years, unless the app, applicable law, or the Terms of Use set a higher age.

Users under 16 years of age must not create an account or use the app.

Users between 16 and 18 years of age must use the platform with the knowledge, authorization, or responsibility of their respective legal representative, whenever required by applicable law.

PopgoSTP does not intend to intentionally collect data from minors who do not meet the applicable age requirements. If YUPOPCAR becomes aware that data from a minor has been collected in violation of this Policy, it may take steps to restrict, suspend, or delete the account and associated data, where legally possible.

15. Sharing data with suppliers and third parties

YUPOPCAR may share personal data with third parties only when this is necessary to provide the platform, comply with legal obligations, protect rights, or provide support to users.

Data may be shared with:

technical providers of the app and management platform;
mapping, geolocation, and routing services;
hosting, infrastructure, maintenance, and IT security providers;
email, notification, and communications service providers;
payment providers, where applicable;
technical analysis and app performance services;
legal, accounting, tax, or administrative consultants;
public authorities, courts, regulatory bodies, or law enforcement agencies, where there is a legal obligation, lawful order, or need to protect rights.

YUPOPCAR does not sell users’ personal data to third parties.

16. International data transfers

PopgoSTP operates in São Tomé and Príncipe, but some technical providers used to make the app available, host data, send notifications, manage payments, provide support, or supply maps and location services may be located in other countries.

When personal data is transferred outside São Tomé and Príncipe, YUPOPCAR will seek to adopt appropriate measures to protect the data, including contractual obligations, technical measures, and procedures compatible with applicable law.

If data of users residing in the European Union or subject to international data protection regimes are processed, additional requirements may apply, including appropriate safeguards for international data transfers, in accordance with applicable law.

17. Data retention

YUPOPCAR will retain personal data only for the period necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted for legal, tax, accounting, contractual, regulatory, or rights-defense reasons.

In general terms:

account data will be retained while the account is active;
trip data will be retained for the period necessary for history, support, security, claims, billing, or legal compliance;
location data associated with trips may be retained in the trip history;
driver documents will be retained for the period necessary for validation, platform relationship, legal compliance, and rights defense;
wallet data, top-ups, invoices, and receipts will be retained for the periods legally required for accounting and tax purposes;
support communications will be retained for the period necessary to resolve the request and protect the rights of YUPOPCAR, passengers, or drivers.

When data is no longer needed, it will be deleted, anonymized, or securely archived, as applicable.

18. Data security

YUPOPCAR adopts technical, administrative, and organizational measures designed to protect personal data against unauthorized access, loss, destruction, alteration, improper disclosure, or misuse.

These measures may include access controls, account protection, technical logs, internal procedures, restriction of access to data, security monitoring, and the use of technology providers with their own protection measures.

Despite security efforts, no digital system is completely immune to risks. Users must also protect their devices, passwords, email accounts, and access to the app.

19. Automated decisions and app operation

The app may use automated processes to support the normal functioning of the platform, including price estimates, distance calculations, assignment or display of trip requests, application of configured fees, wallet balance management, ratings, anomaly detection, and account security.

These processes are used to enable efficient operation of the platform and are not intended to make unfair or discriminatory decisions about users.

If you believe that a decision, calculation, block, fee, or limitation applied by the platform is incorrect, you may contact YUPOPCAR through info@popgostp.com.

20. User rights

Under applicable law, users may have the right to:

request access to their personal data;
request correction of inaccurate or incomplete data;
request deletion of their data, where legally possible;
to object to certain processing activities;
to request restriction of processing;
to withdraw consent, where processing is based on consent;
to request information about the origin, purpose and recipients of the data;
to lodge a complaint with the competent data protection authority.

The exercise of these rights may be subject to legal limitations, in particular where the data are necessary to comply with tax, accounting, contractual or regulatory obligations, platform security, incident investigation or the defense of rights.

21. How to exercise your rights

To exercise your rights or submit a question related to personal data, send a request to:

Email: info@popgostp.com

YUPOPCAR will seek to respond to requests for access, correction, deletion, objection, restriction or transfer of personal data within one month from receipt of the request, whenever possible and in accordance with applicable law.

Where the request is especially complex, involves a large volume of information or requires additional checks, this period may be extended to the extent legally permitted. In that case, the user will be informed of the extension and the respective reasons.

The request must clearly identify the user and the right they wish to exercise. When necessary, YUPOPCAR may request additional information to confirm the identity of the requester and protect the security of personal data.

YUPOPCAR will seek to respond to requests within a reasonable time and in accordance with applicable law.

22. Cookies and similar technologies

The PopgoSTP website and app may use cookies, digital identifiers, local storage, pixels, tags, scripts, web beacons, analytics tools, technical logs or similar technologies.

These technologies may be used to:

ensure the website and app function properly;
keep sessions logged in;
save preferences;
analyze technical performance;
detect errors;
measure usage and interaction with pages, emails or notifications;
verify the integrity and security of the platform;
improve the user experience.

When legally required, consent will be requested for cookies or non-essential technologies.

The user may configure their browser or device to refuse cookies or limit certain tracking technologies. However, some website or app features may not function properly if these technologies are disabled.

23. Notifications and communications

PopgoSTP may send notifications related to the use of the platform, including trip confirmations, driver arrival, trip status changes, cancellations, trip summaries, safety notices, support communications, account information, and operational messages.

Some notifications are necessary for the service to function. Other communications, such as promotional or informational messages, may depend on consent or another applicable legal basis.

The user may manage notifications in the device or app settings, when that feature is available.

24. Links to third parties

The website or app may contain links to websites, maps, payment services, external pages, or third-party platforms.

YUPOPCAR is not responsible for the privacy policies, security practices, content, or services of those third parties. We recommend that you read their respective policies before providing personal data to external entities.

25. Changes to this Privacy Policy

YUPOPCAR may update this Privacy Policy whenever necessary, particularly to reflect legal, technical, operational, commercial, or platform functionality changes.

The updated version will be published on the website or made available through the app. When the changes are significant, YUPOPCAR may communicate the update through appropriate means, including email, an in-app notification, or a notice on the website.

Continued use of the platform after the publication of changes means that the user has become aware of the updated version, without prejudice to any consents that must be requested under applicable law.

26. Contact

For any questions about this Privacy Policy, personal data processing, exercise of rights, or information requests, contact:

YUPOPCAR UNIPESSOAL LDA.