Privacy Policy
Last updated: 13/09/2026
Tachyfy's Commitment
At Tachyfy, we take your privacy very seriously. As a tool designed by an independent developer for truck drivers, our philosophy is simple: your data belongs to you.
This policy details how we handle your sensitive information related to your professional activity and identity.
Data controller
The processing described here is carried out under the responsibility of TACHYFY, publisher of the app and the service.
- Publisher
- TACHYFY
- SIRET
- 522 736 446 00041
- Address
- 20 rue de la Merlatière, 85280 La Ferrière, France
- Contact
- contact@tachyfy.app
Any question or request about your data can be sent to contact@tachyfy.app.
Data Collected
Driver Card Data
When you read your card (USB, NFC, or a CCID reader through an adapter on iPhone), the app extracts your first and last name, your card number, your driving and rest activities, the registration plates of the vehicles driven, odometer readings, and the start and end places of each day together with the GNSS positions recorded by the tachograph. This processing happens on your device.
Account Data
Email address, first and last name, password stored as a hash. For a business account: company name, registration number, address and VAT number. Your email also acts as the technical salt used to derive your end-to-end encryption key.
Device and support
An installation identifier generated randomly on your device, the push notification token and the platform (iOS or Android). If you open a support conversation, the name you enter, your messages, your system and app versions, and your driver card number are sent so that the issue can be diagnosed.
Store and invoicing
If you place an order: name, email, phone number, delivery address, order contents and invoicing records. Payment is handled by the payment provider, which does not share your card details with us.
Security & Encryption (E2EE)
If you enable cloud synchronization, your files are encrypted on your device BEFORE being sent to our servers. We use robust algorithms (AES-GCM 256). Tachyfy does not possess your decryption key and technically cannot read your activities on the server.
Legal bases and retention periods
Each type of processing has its own legal basis and retention period.
Account and profile
Purpose ·Give you access to the app and to sync
Legal basis ·Performance of the contract
Retention ·Until the account is deleted
Synced activity files
Purpose ·Let you find your data across devices
Legal basis ·Performance of the contract
Retention ·Until the account is deleted or sync is turned off
Push token and installation identifier
Purpose ·Notify you of a support reply or a completed sync
Legal basis ·Legitimate interest
Retention ·Until the account is deleted or the app is removed
Support conversations
Purpose ·Handle and follow up on your requests
Legal basis ·Legitimate interest
Retention ·3 years after the last message
Orders and invoices
Purpose ·Ship your order and keep the accounts
Legal basis ·Legal obligation
Retention ·10 years (French commercial code, article L123-22)
Consent to informational emails
Purpose ·Write to you only if you agreed to it
Legal basis ·Consent
Retention ·Until you unsubscribe
Recipients and processors
Your data is never sold, rented, or passed to third parties for advertising. It is shared only with the providers needed to run the service:
- Application server hostHosts the API and the encrypted synced files
- Google Firebase Cloud MessagingDelivers push notifications
- PayPalProcesses payments
- BrevoSends service emails and the messages you consented to
- La Poste (Colissimo)Ships and tracks orders
Delivering notifications through Google may involve a transfer outside the European Union, covered by the European Commission's standard contractual clauses. Your activity data is never part of it: a notification carries only a title and a short message.
Device Permissions
On Android, the app requests access to the USB port (OTG) and the NFC reader. On iPhone and iPad, it talks to a CCID card reader connected through an adapter. These are used solely to read your driver card. The optional notification permission is used to tell you about a support reply or a completed sync.
Deleting your account
You can delete your account without writing to us: in the mobile app, Settings then “Delete my account”; on the website, from your personal area. Your password is requested again, then deletion is immediate and permanent.
What is erased
- Your account, your credentials and your encryption key
- Your activity files synced to the server
- Your activities, infringements and places stored on the device
- Your support conversations and their attachments
- Your notification tokens and your email consent
What is kept
Invoices and past orders are kept for the period required by accounting law: keeping them is a legal obligation (GDPR article 17.3.b). They are no longer linked to your account.
If you created a company in Tachyfy Check and it still has other members, deletion is refused until the company is transferred or emptied: deleting your account would cut those people off from their own data.
Your rights
The General Data Protection Regulation grants you the following rights, which you can exercise at any time:
- Access your data and obtain a copy
- Correct inaccurate information
- Erase your account and the associated data
- Export your activities from the app in a readable format
- Object to a processing activity or ask for it to be restricted
- Withdraw your consent to informational emails
A request sent to contact@tachyfy.app is answered within one month.
If an answer does not satisfy you, you may lodge a complaint with the CNIL, 3 place de Fontenoy, 75007 Paris, France, or at cnil.fr.
Privacy Contact
For any questions regarding your personal data: contact@tachyfy.app
contact@tachyfy.app