Privacy Policy

DriverTakings ("we", "us") provides income and expense tracking tools for taxi, private-hire, rideshare, courier and delivery drivers, including an optional pathway to HMRC's Making Tax Digital for Income Tax Self Assessment (MTD ITSA) service. This page explains what data we collect, why, and how it is handled.

Who we are

DriverTakings is operated as a personal software project. If you have questions about this policy or your data, contact us at drivertakings@gmail.com.

What we collect

When you create an account we collect your email address and the profile details you choose to add (name, address, vehicle details, National Insurance number if you connect HMRC). As you use DriverTakings we store the daily takings and expense records you enter. If you subscribe to a paid plan, our payment processor Stripe handles your card details directly — we never see or store your card number. If you connect your HMRC account, we store the OAuth connection HMRC issues us (an access token and refresh token) so we can act on your behalf when you ask us to; we never see your Government Gateway password. If you look up your vehicle's MOT status, we send your vehicle registration to DVSA's MOT history service and show you the result; we do not store your MOT history beyond what you ask us to save to your profile.

Who we share data with

• Supabase hosts our database and handles account login (authentication). Your account and records are stored on Supabase's infrastructure.
• Stripe processes subscription payments. Stripe's own privacy policy governs the payment details you give them directly.
• HMRC receives the income and expense figures you explicitly review and confirm before each submission, if and when you choose to use the MTD submission feature. We currently connect to HMRC's sandbox (test) environment while our production access is under review; no real submissions reach HMRC's live tax systems yet. We never submit anything to HMRC automatically — every submission requires your explicit confirmation on a review screen showing exactly what will be sent. You can disconnect your HMRC account at any time from the MTD page.
• DVSA receives the vehicle registration you enter when you check an MOT status.
• Brevo sends the marketing emails you've opted into (product updates and offers). We only share your name and email with Brevo if you've given marketing consent, and withdrawing that consent removes you from the list immediately.

We do not sell your data. The only marketing-related sharing we do is with Brevo, and only for drivers who have opted in, as described above.

Marketing emails and the MTD waitlist

If you tick the marketing consent box when you join, or opt in later from your Account page, we add your name and email address to our mailing list (hosted by Brevo, see above) to send you occasional DriverTakings product updates and offers, and we record when you gave that consent. You can withdraw consent at any time from your Account page, or via the unsubscribe link in any marketing email — either removes you from the list immediately. If you join the MTD waitlist, we store your email address and the date you joined so we can tell you once MTD is open for purchase; this is separate from marketing consent and used only to notify you about MTD availability.

How long we keep data

We keep your account data for as long as your account is active. If you close your account, contact us and we will delete your personal data except where we're required to keep records (for example, financial records HMRC or UK law requires us to retain for a set period).

Your rights

Under UK GDPR you can ask to see the personal data we hold about you, ask us to correct it, ask us to delete it (subject to the record-keeping exception above), or withdraw consent you've previously given — for example, marketing emails, which you can also manage directly from your Account page or via any marketing email's unsubscribe link. Contact us at drivertakings@gmail.com to make a request.

Security

We use industry-standard measures (encrypted connections, access controls, and reputable infrastructure providers) to protect your data, but no system is completely secure — if you believe your account has been compromised, contact us immediately.

Changes to this policy

We may update this policy as DriverTakings changes. We'll update the "last updated" date above when we do.