Taxio Back to home

Privacy Policy

Last updated: July 29, 2026

This page is a translation for reference only. The Spanish version of this policy is the legally binding one.

At Taxio we take your privacy seriously. This policy explains what data we process when you use the Taxio app, for what purpose, on what legal basis, for how long, and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Spain's Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD). Your work records are yours: we do not share them with transport platforms, we do not sell them to third parties, and we do not use them for advertising.

1. Data controller

The controller responsible for processing your data is the owner of Taxio:

  • Owner: David Martín
  • Tax ID (NIF): 05457811A
  • Address: Calle Ferrocarril 20, 28045 Madrid, España
  • Contact email: info@taxio.es

For any question related to your privacy or to exercise your rights, you can write to us at that email address.

2. Data we process

  • Account data: email address and password, used for authentication. Your password is always stored encrypted; we never store it in plain text.
  • Profile data: your name and the type of profile you choose (driver or fleet owner).
  • Activity data: the information you enter in the app to keep your accounts: rides or services, amounts, tips, expenses, shifts and the platforms you work with.
  • Fleet data: if you are a fleet owner, the activity logged by the drivers linked to your account.
  • Push notifications: if you enable them, your device's notification token (Apple APNs), needed to send them to you.
  • Technical data: minimal technical logs, needed for the security and diagnostics of the service.
  • Subscription data: the status of your subscription is managed by Apple through the App Store. Taxio does not have access to your card or payment details. To keep track of our own subscriptions we use RevenueCat, which receives an internal identifier for your profile (a random code, not your email or your name), the App Store purchase receipt (plan purchased, amount, sign-up, renewal or cancellation dates) and basic technical data about the device and the app. It does not receive any of your work records: no rides, no shifts, no expenses, no billing information.

3. Purposes

  • To provide you with the service: recording and syncing your bookkeeping across your devices and our infrastructure.
  • To send you push notifications, only if you enable them.
  • To send you transactional emails: account verification and password reset.
  • To manage your subscription and keep an aggregate record of sign-ups, renewals and cancellations of the service.
  • To handle your support requests.
  • To maintain the security of the service and prevent fraudulent use.

4. Legal basis

  • Performance of a contract (Art. 6.1.b GDPR): to provide the service you accept when you register, including transactional emails, support and subscription management.
  • Consent (Art. 6.1.a GDPR): for push notifications, which are only sent if you enable them. You can withdraw your consent at any time by disabling them in your iPhone settings or in the app.
  • Legitimate interest (Art. 6.1.f GDPR): for the security of the service and fraud prevention.

5. Data processors

To provide the service we rely on providers that act as data processors, acting solely on our instructions, under the processing agreements required by Article 28 GDPR and offering equivalent guarantees for the protection of your data:

  • Supabase: database and authentication. Your data is hosted in the European Union.
  • Apple: distribution of the app through the App Store and delivery of push notifications (APNs).
  • Resend: delivery of transactional emails (account verification and password reset).
  • RevenueCat: tracking the status of our subscriptions (sign-ups, renewals and cancellations). It only receives the internal identifier for your profile, the App Store purchase receipt and basic technical data, as detailed in section 2.

We do not sell your data or use it for advertising, and we do not disclose it to third parties except where legally required.

International transfers

Supabase (database) hosts your data in the European Union. RevenueCat is a US-based company, so the subscription data described above is processed outside the European Economic Area. That transfer is covered by the Standard Contractual Clauses approved by the European Commission (Arts. 44 et seq. GDPR), which you can review at revenuecat.com/dpa.

6. Where your data is stored and security

Your data is stored encrypted on our back-end infrastructure (Supabase, hosted in the European Union). The app also keeps a local copy on your device so you can use it offline. We apply appropriate technical and organizational measures to protect your information. The only exception to European hosting is the subscription data described in section 5.

7. Retention and deletion

We keep your data for as long as your account is active. You can delete your account at any time from within the app (Profile → delete account) and your data will be deleted, except for anything we must retain for legal reasons. If you don't have access to the app, our guide on how to delete your account without the app explains the alternative procedure.

You don't need to delete your entire account to remove a single record: from within the app you can, at any time, permanently delete individually a ride or service, an expense, a vehicle or a driver from your fleet — by swiping the corresponding row or from its detail screen. Deletion is immediate and doesn't require contacting us.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time by writing to us at info@taxio.es. In addition, from within the app you can export your data (PDF and Excel) and permanently delete your account and all your data.

If you believe we have not processed your data in accordance with the regulations, you have the right to file a complaint with the AEPD (Spain's data protection authority, the Agencia Española de Protección de Datos): www.aepd.es.

9. Cookies, analytics and advertising

The Taxio website uses technical cookies necessary for it to function and, only with your consent, third-party cookies: Google Analytics (Google Ireland Ltd.) to measure, in aggregate, how the website is used and to improve it, and the Meta pixel (Meta Platforms Ireland Ltd.) to measure the performance of our ads on Instagram and Facebook. We tell the Meta pixel that you have visited the website and, where applicable, that you have clicked the button that leads to the App Store; we do not send it your name, your email or any data from your Taxio account. Meta may also process that data for its own purposes, in accordance with its privacy policy.

The first time you visit, we show you a notice to accept or reject them; if you reject them, neither of the two is loaded and those cookies are not installed. You can change your choice at any time from the "Cookies" link in the footer.

10. Minors

Taxio is a professional tool and is not directed at anyone under 18 years of age. We do not knowingly create accounts for minors; if we detect one, we will delete it.

11. Changes

We may update this policy. We will publish any changes on this page along with the date of the update.