Contents


Data Protection

How does TwoGo protect my privacy?

Refer to the TwoGo Privacy Statement for more details on how we protect your privacy.

How do I avoid other people seeing my shared rides in my calendar?

The TwoGo calendar entries are standard meeting requests in your calendar. Use the standard calendar functionality to decide for yourself who has access to your calendar. TwoGo responses to your ride intents will automatically be set as private.

Why is information about some users hidden?

These are anonymized values. When there is a small sample size during reporting, for data protection reasons we have to make sure anonymity is maintained even if someone has additional knowledge of the user. For example, when you see statistics about an anonymous user with a home address in Town X, if you know that there is only one colleague who lives in Town X, you can instantly work out the identity of the anonymous user. Therefore, whenever a report contains data about fewer than 5 users, some values are anonymized and either replaced with a series of asterisks or left blank.

Mobile app access rights

Which access rights do the mobile apps require and why?

TwoGo only requests access to those interfaces it strictly requires. For example, those that enable you to upload a photo if you want, or those that enable the app to function - such as determining whether a mobile Internet connection is available as the app needs to communicate with our servers to create a ride intent. The privacy guidelines clearly define exactly how we deal with user data: We neither process data nor pass it on. If we did not adhere to these guidelines, this would be a breach of contract – which is exactly what these directives are to guard against. Furthermore, as government employees also use TwoGo by SAP, the application was subjected to and passed stringent tests from the data protection officers of the federal states of Baden-Württemberg and Hesse.

Which access rights does the Android App require?

If you own an Android phone version 6 or later, you can set the access rights for the app yourself. In the app, for example, if you want to upload a photo of yourself, you can set whether the app is allowed to access the photos at that moment. Once you have granted access rights, you can also withdraw them later in the App Manager. During the installation process TwoGo asks you about each access right individually, instead of forcing you to agree to them automatically by default. We have adapted the Android version of TwoGo to the new features in Android 6, in order to give you the best possible control over your data. The following list explains the access authorizations and for which functions they are required.

Camera

  1. Take pictures and videos:

Needed to retrieve a picture of yourself or your car and upload it to your profile or car details.

Contacts

  1. Find accounts on the device / Read your contacts:

Needed to read in your user data during registration via the app to pre-fill as many fields as possible.

Location

  1. Access precise location (GPS and network):

Needed to access the GPS module if you have activated the "Share my location" function.

Phone

  1. Read phone status and identity / Directly call phone numbers:

Required to call the driver / passenger of a shared ride from within the TwoGo app.

SMS

  1. Receive text messages (SMS):

Required to automate the verification of the telephone number in your user profile (the PIN is read from the SMS and entered directly into the confirmation field of the app).

  1. Send text messages (SMS):

Required to send a text message to a driver / passenger of a given journey (for example "I'll be 5 minutes late", etc.)

Storage

  1. Read the contents of your USB storage:

Used for phones that cannot edit images in memory, but have to temporarily store them on the SD card after saving them. These images are deleted from the card after processing.

Notifications

  1. Push notification or data update if your user objects change in the TwoGo system (for example, if you use the calendar or the web UI in addition to the app), or a ride is matched, updated or canceled
  2. Optional notifications in the following situations:
    • X minutes before driving
    • Updating the app
    • Checking for updates to devices that do not have Google Cloud Messaging (such as Amazon Kindle)

Other app capabilities

  1. Control vibration:

Optional vibration alarm when creating, changing or deleting a trip.

  1. Prevent phone from sleeping:

Disable sleep mode when you open the map to track the driver / passenger's position.

  1. Receive data from the Internet:

Needed by TwoGo to read or write the data from www.twogo.com.

  1. View network connections:

Needed to determine if the phone or tablet has an Internet connection. So, whether actions that require server communication can be performed.

  1. View Wi-Fi connections:

Required to determine if the phone or tablet has a Wi-Fi connection. So, whether actions that require server communication can be performed.

  1. Change network state / Change Wi-Fi state:

Only used for automatic tests.

  1. Read logs:

Required by the SAP Performance Library, which we must implement as part of the Performance product standard. That is, The TwoGo app does not use this access in live mode.

Which access rights does the iOS app require?

If you have an iPhone or iPad, these access rights are optional and can be managed at any time in the settings of your mobile device.

Contacts Needed to store rider data in the iOS address book. The iOS app never reads data from the Address Book. There are two situations where the app accesses the address book:

  1. If after the shared ride you want to explicitly use, save or store the contact data of the driver / passenger in the address book. Before this access however there is an additional request asking whether you would like to allow TwoGo access to the address book.
  2. When selecting an address, you can call up the address book explicitly and select the address of contacts from it. Before this action there is also a request asking whether you want TwoGo to be allowed this access.

Photos Required to upload an image from the iOS photo gallery to your profile or car details.

Camera Required to retrieve a picture of yourself or your car and upload it to your profile or car details.

Location Services Required if you want to share your current location just before the scheduled meeting with your driver / passenger via GPS. Also required if you want to select Current Location when creating a ride or a favorite location.

Notifications Required if you want to receive push notifications as a red symbol on the app icon.