Privacy Policy — Elitra Driver App

This policy applies exclusively to the Elitra Driver mobile application, used by drivers of the companies subscribing to the Elitra platform. Use of the platform itself is covered by the platform privacy policy.

The data controller is Lopes e Gago, Lda., reachable at [email protected].

• Account data — the driver's name, email and phone number, provided by the employing company at registration.
• Precise location (GPS) — including in the background, with the screen locked, while an active job is assigned to the driver.
• Photographs — receipt images captured with the camera or picked from the gallery, for expense and reimbursement records.
• Job data — mileage, odometer readings, submitted expenses and the status of completed jobs.
• Technical identifiers — push notification token and basic device information, required to deliver new job notifications.

The app collects the driver's location in the background. This collection is essential in order to:

• Allow dispatch to follow the job in progress and keep the client informed;
• Record the route taken, for billing and dispute resolution purposes;
• Assign new jobs to the driver closest to the pickup location.

Collection happens only during active jobs. Outside working hours, or once the driver ends the job in the app, location collection stops. While tracking is active, a persistent notification is shown on the device so the driver always knows their location is being recorded. The driver may revoke the location permission at any time in the operating system settings, understanding that the app will then be unable to record jobs.

Data is processed to perform the contractual relationship between the driver and the employing company, and to comply with tax and employment law obligations. Data is not used for advertising, is not sold or rented to third parties, and is not subject to automated decisions producing legal effects on the driver.

Data may be accessed by:

• The driver's employing company, through the platform backoffice. Each company accesses only its own drivers' data;
• Technical providers hosting the infrastructure (servers and database in the European Union, and Google's notification service);
• Competent authorities, where legally required.

Location records are kept for 12 months. Expense documents are kept for the legally applicable tax period. Account data is kept for as long as the driver remains linked to the company.

Under the GDPR, the driver has the right to access, rectify, erase, restrict and object to the processing of their data, as well as the right to data portability.

To request deletion of the account and associated data, send a request to [email protected]. The request is processed within a maximum of 30 days; only information whose retention is legally mandatory, namely tax supporting documents, is kept.

All communication between the app and the servers is encrypted in transit via HTTPS. Access to data is limited to authorised staff of the employing company.

Any material change to this policy will be communicated through the app and reflected in the last-updated date shown at the top of this page.