Tachora / TachoPlus ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable EU law.

1. Who We Are

Tachora (tachora.app) and TachoPlus are operated by Dmytro Beyrukov, an independent developer providing a tachograph compliance application and fleet management platform for professional drivers and fleet operators across the European Union. Contact: support@tachora.app

2. What Data We Collect

Driver App (Android / iOS)

Driving data: shift start/end times, driving mode, break and rest periods — stored locally on your device.
Location data: GPS coordinates used only for country detection (cabotage tracker). Not sent to our servers unless you connect to a fleet.
No account required for standalone use. All data stays on your device.

Fleet Platform (Web)

Account data: email address, company name, password hash.
Driver data: driving status, remaining times, GPS location — only when a driver has explicitly connected to your fleet by scanning your QR code.
Usage data: anonymised logs for debugging (no personal identifiers).
Billing data: handled entirely by Stripe. We do not store card numbers.

3. Legal Basis for Processing

Contract performance (Art. 6(1)(b) GDPR): processing your account and fleet data to provide the service.
Legitimate interest (Art. 6(1)(f) GDPR): anonymised analytics to improve the product.
Consent (Art. 6(1)(a) GDPR): location data on the driver app (you can disable GPS at any time).

4. How We Use Your Data

Provide and maintain the TachoPlus service.
Send compliance alerts and notifications you have opted into.
Process subscription payments through Stripe.
Improve the app based on anonymised usage patterns.
Respond to support requests.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Data Retention

Driver app data: stored locally until you uninstall the app or manually delete it.
Fleet account data: retained for the duration of your subscription plus 90 days after cancellation, then permanently deleted.
Driver connection data: deleted immediately when a driver disconnects from your fleet.

6. Third-Party Services

Supabase (EU data centres) — database and authentication.
Stripe — payment processing. Stripe Privacy Policy.
Apple / Google — push notifications delivery only.

7. Your Rights (GDPR)

Under GDPR you have the right to:

Access — request a copy of your personal data.
Rectification — correct inaccurate data.
Erasure — request deletion of your data ("right to be forgotten").
Portability — receive your data in a structured, machine-readable format.
Objection — object to processing based on legitimate interest.
Withdraw consent — at any time, for consent-based processing.

To exercise any of these rights, contact us at support@tachora.app. We will respond within 30 days.

8. Cookies

The Tachora website uses only technically necessary session cookies for authentication. We do not use tracking, advertising, or analytics cookies.

9. Security

All data in transit is encrypted via TLS. Passwords are hashed using industry-standard algorithms. We perform regular security reviews and apply the principle of least-privilege access.

10. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email at least 14 days before material changes take effect. Continued use of the service after that date constitutes acceptance of the updated policy.

11. Contact & Complaints

For privacy-related enquiries: support@tachora.app

If you are not satisfied with our response, you have the right to lodge a complaint with the supervisory authority in your EU member state.