Privacy Policy

Privacy Policy

Privacy Policy

Last updated: 17 July 2026

Last updated: 17 July 2026

Last updated: 17 July 2026

1. Who we are
Data controller: CAPSILON BROTHERS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, operator of the TachoAngel app, with registered office at ul. Mikołaja Reja 18 / 34, 43-300 Bielsko-Biała, Poland
Email: support@tachoangel.app
This policy explains how TachoAngel (“App”, “we”) processes information when you use our Android application to work with smart tachographs, driver cards, and related driving-time data.

2. Summary
TachoAngel requires Google Sign-In (Firebase Authentication) to use the App. It processes tachograph and driver-related data primarily on your device, connects to tachographs via Bluetooth, optionally reads driver cards via USB, uses optional Google Play Activity Recognition to detect entering a vehicle and attempt auto-connect, shows local notifications for driving-time alerts when permitted. The current App version does not include ads, Firebase Analytics, or Crashlytics, does not send tachograph or driver card data to a developer-operated backend, and has Android backup disabled.

2. Summary
TachoAngel requires Google Sign-In (Firebase Authentication) to use the App. It processes tachograph and driver-related data primarily on your device, connects to tachographs via Bluetooth, optionally reads driver cards via USB, uses optional Google Play Activity Recognition to detect entering a vehicle and attempt auto-connect, shows local notifications for driving-time alerts when permitted. The current App version does not include ads, Firebase Analytics, or Crashlytics, does not send tachograph or driver card data to a developer-operated backend, and has Android backup disabled.

3. Account and identity data (Firebase / Google Sign-In)
When you sign in with Google, we process via Firebase Authentication: email address for account identification, Firebase UID for account identification, display name for optional profile display, and profile photo URL for optional profile display. Legal basis (EEA): contract / legitimate interest for providing the App. Retention: until you delete your account or contact us for deletion. Deletion: Settings → Delete account, or https://tachoangel.app/account-deletion

3. Account and identity data (Firebase / Google Sign-In)
When you sign in with Google, we process via Firebase Authentication: email address for account identification, Firebase UID for account identification, display name for optional profile display, and profile photo URL for optional profile display. Legal basis (EEA): contract / legitimate interest for providing the App. Retention: until you delete your account or contact us for deletion. Deletion: Settings → Delete account, or https://tachoangel.app/account-deletion

4. Tachograph and driving data (on-device)
The App may process driving/rest times and activity state from BLE tachograph reads, Bluetooth device name and MAC for pairing and reconnect, driver name, card number, licence, and country from USB card parser / DDD, DDD driver card files from USB or BLE download, CMR photos / OCR text from camera and ML Kit, and alert / message history from local notifications. Most of this data does not leave your device unless you choose to share or export it, such as through the Android share sheet for a .ddd file.

4. Tachograph and driving data (on-device)
The App may process driving/rest times and activity state from BLE tachograph reads, Bluetooth device name and MAC for pairing and reconnect, driver name, card number, licence, and country from USB card parser / DDD, DDD driver card files from USB or BLE download, CMR photos / OCR text from camera and ML Kit, and alert / message history from local notifications. Most of this data does not leave your device unless you choose to share or export it, such as through the Android share sheet for a .ddd file.

5. Physical activity (Activity Recognition)
With your permission, the App uses Google Play services Activity Recognition to detect IN_VEHICLE entry and start a short Bluetooth scan to connect to your saved tachograph. Data involved: activity transition signals processed by Google Play services on the device. You can revoke permission in Android system settings.

5. Physical activity (Activity Recognition)
With your permission, the App uses Google Play services Activity Recognition to detect IN_VEHICLE entry and start a short Bluetooth scan to connect to your saved tachograph. Data involved: activity transition signals processed by Google Play services on the device. You can revoke permission in Android system settings.

6. Third-party services
Google / Firebase Authentication processes email, UID, name, and profile photo URL. Google Play services Activity Recognition processes physical activity transitions. Google ML Kit Text recognition (OCR) processes image pixels on device. We do not use third-party analytics or advertising SDKs in the current release.

6. Third-party services
Google / Firebase Authentication processes email, UID, name, and profile photo URL. Google Play services Activity Recognition processes physical activity transitions. Google ML Kit Text recognition (OCR) processes image pixels on device. We do not use third-party analytics or advertising SDKs in the current release.

7. Security
In transit: Firebase/Google APIs use HTTPS/TLS. Bluetooth uses the platform BLE stack. At rest: the App does not implement additional app-level encryption for local tachograph or card files. Backup: system backup is disabled for the App.

7. Security
In transit: Firebase/Google APIs use HTTPS/TLS. Bluetooth uses the platform BLE stack. At rest: the App does not implement additional app-level encryption for local tachograph or card files. Backup: system backup is disabled for the App.

7a. Data retention


We retain data only for as long as necessary for the purposes described in this policy:


Account and identity data (email, Firebase UID, display name, profile photo URL): retained until you delete your account in the App (Settings → Delete account) or request deletion by email. Upon deletion, this data is permanently and irreversibly erased.

Tachograph and driving data (DDD files, card read history, CMR photos, alert history): stored exclusively on your device and never transmitted to our servers. This data is deleted when you delete your account in the App, clear the App's storage, or uninstall the App. You can also delete individual card history entries in the App.

Support correspondence (emails to support@tachoangel.app): retained until your request is resolved and thereafter for the limitation period of potential legal claims.


We do not operate our own backend server and do not retain user data outside the scope described above.

8. Your rights
Depending on your location, such as EEA/UK GDPR, you may have rights to access, rectify, erase, or restrict processing. In-app, you can delete your account in Settings and delete card history entries. Without the app, visit https://tachoangel.app/account-deletion or email support@tachoangel.app. Uninstalling or clearing storage removes local data.

8. Your rights
Depending on your location, such as EEA/UK GDPR, you may have rights to access, rectify, erase, or restrict processing. In-app, you can delete your account in Settings and delete card history entries. Without the app, visit https://tachoangel.app/account-deletion or email support@tachoangel.app. Uninstalling or clearing storage removes local data.

8a. How to request data deletion


You can request deletion of your account and associated data at any time:


In the App: Settings → Delete account → Delete permanently. Your Firebase account and associated data are deleted immediately.

Without the App: follow the instructions at https://tachoangel.app/en/account-deletion or email support@tachoangel.app (subject: "TachoAngel — account deletion request") from the email address linked to your Google account. We process such requests without undue delay, no later than within 30 days.


To remove all locally stored data, uninstall the App or use Android Settings → Apps → TachoAngel → Storage → Clear data.

9. Children
The App is intended for professional drivers and fleet compliance use. It is not directed at children under 16.

9. Children
The App is intended for professional drivers and fleet compliance use. It is not directed at children under 16.

10. Changes
We will update this policy when the App or legal requirements change. The URL in Google Play will always point to the current version.

10. Changes
We will update this policy when the App or legal requirements change. The URL in Google Play will always point to the current version.

11. Play Console cross-reference
Account deletion URL: https://tachoangel.app/en/account-deletion.

Android Auto: not offered in current Play release.