Privacy Policy
Last updated: August 2026
This policy explains what we collect, why, where it is stored, and the rights you have under the UK GDPR and the Data Protection Act 2018.
Who is the data controller
DriverProfit is the data controller for the personal data described in this policy. Contact: sanctuaryapps00@gmail.com.
What we collect
Account data: your email address, display name, authentication credentials (stored only as salted hashes by our authentication provider), and account status such as trial end date and subscription state.
Financial records you enter: dates, platform, hours worked, gross income, tips, bonuses, expense categories, amounts and notes.
Preferences: tax region preset, currency and any manual tax percentage you set.
Technical diagnostics: error messages and timestamps captured when something fails in the app, used only to fix faults.
Lawful basis
Contract: to provide the account, calculations and reports you signed up for.
Legitimate interests: to keep the service secure, prevent abuse, and diagnose technical faults.
Legal obligation: to keep billing records where tax law requires it.
Consent: for any optional communications, which you can withdraw at any time.
Storage, encryption and security
Data is stored in a managed Supabase Postgres database. All traffic between your device and our servers is encrypted in transit using TLS (HTTPS), and data is encrypted at rest by the hosting platform.
Access to your rows is enforced at database level with row-level security policies, so one driver's earnings and expenses cannot be read by another driver.
Payment card details are never seen or stored by DriverProfit. Card processing is handled entirely by Stripe as an independent processor.
Passwords are never stored in readable form and cannot be retrieved by us or by an administrator.
Sharing and international transfers
We do not sell your data and we do not share individual driver records with ride-hailing platforms, operators, insurers or advertisers.
We use a small number of processors to run the service: our database and authentication host, our payment processor, and our transactional email provider. Where data is processed outside the UK, it is protected by appropriate safeguards such as the UK International Data Transfer Addendum or equivalent standard contractual clauses.
Retention
We keep your account data and financial records while your account is open, and for up to 30 days after deletion to allow recovery from accidental deletion, after which they are permanently removed. Billing records may be retained for up to 6 years where tax law requires it. Technical error logs are retained for up to 12 months.
Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing, the right to data portability, and the right to withdraw consent. You may also complain to the Information Commissioner's Office (ico.org.uk).
To exercise a right, email us from the address on your account. We respond within one month.
Cookies and local storage
Driver Profit Pal does not set any cookies of its own. We use a small amount of browser storage on your device, all of it needed to run the app you asked for.
Local storage: your authentication/session token (provided by our database and authentication host) keeps you signed in and maintains your authenticated session; "expense_memory_v1" powers the optional autocomplete for recurring expenses and stays on your device, and is never used for advertising or tracking; "last_entry_date" remembers the date you last used on an entry form so the next entry is pre-filled; "install_ribbon_dismissed_at" remembers that you dismissed the add-to-home-screen prompt so it is not shown again for the relevant period.
Session storage (cleared when you close the browser): "terms_accepted" and the equivalent per-account key record that you accepted the in-app legal disclaimer for the current session, and our router stores scroll positions so pages restore where you left them during normal navigation.
Service worker cache: a first-party cache stores static app assets such as the web app manifest and icons so the app loads quickly and works as a home-screen app. This cache does not store personal or financial data.
We do not use advertising cookies, analytics cookies, tracking pixels, session replay, heatmaps or any cross-site tracking, and we do not load third-party advertising or tracking scripts.
Payments are taken on Stripe's hosted checkout pages. Stripe may use cookies or similar technologies on its own pages under Stripe's privacy and cookie policies; those technologies are set and controlled by Stripe, not by us.
Limitation of liability
To the maximum extent permitted by law, including the laws of England and Wales, DriverProfit, its owners, directors, operators, contractors and associated entities accept absolutely no liability for any direct, indirect, incidental, consequential or special loss of any kind arising out of your use of, or inability to use, this platform.
This exclusion expressly includes, without limitation: tax penalties, interest, surcharges, fines or assessments issued by HMRC, the IRS or any other tax authority anywhere in the world; loss of earnings, profit, business, goodwill, savings or opportunity; losses caused by system downtime, outages, delayed synchronisation, data discrepancies, corrupted or missing records, or software calculation variances; and losses caused by figures you entered incorrectly, incompletely or not at all.
DriverProfit is an algorithmic cash-flow estimation tool. It is not certified financial, accounting, tax or legal advice, and it does not replace a qualified accountant or tax adviser in your jurisdiction. Every percentage, preset and projection shown is an estimate only. You remain solely and exclusively responsible for your own filings, payments, records and their accuracy.
Nothing in these terms excludes or limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot lawfully be excluded under UK law. Where liability cannot be excluded, it is limited to the total subscription fees you paid to DriverProfit in the three months immediately before the event giving rise to the claim.