Privacy Policy

1. Overview

EVLataa ("we", "us", "our") operates a mobile app and website that connect EV drivers with hosts who share their private chargers. This policy covers the driver and host mobile apps, the admin panel, and evlataa.com. It applies to anyone who creates an account, browses chargers, or otherwise uses our services.

2. Information we collect

We collect the following categories of information:

Category	Examples	Why we collect it
Account information	Name, email address, password (stored as a salted hash, never in plain text), phone number (optional), profile photo (optional)	To create and secure your account, identify you to other users in a booking, and contact you about your account
Google Sign-In	Google account ID and email, if you choose to sign in with Google	To authenticate you without you needing a separate password
Location data	Your device's approximate or precise location; charger addresses and coordinates	To show nearby chargers on the map, calculate distance, and provide navigation to a booked charger
Vehicle information	Connector type, make, and model (optional)	To filter charger search results to chargers compatible with your vehicle
Payment information	Card details, billing information	To charge drivers for charging sessions and pay hosts. Card details are collected and stored by our payment processor, Stripe, not by us directly — see Section 4
Booking and session data	Booking times, charging session duration, energy used (kWh), cost, ratings and reviews left for the other party	To operate bookings and charging sessions, calculate charges and payouts, and maintain trust between drivers and hosts
Charger photos	Photos hosts upload of their charger	To help drivers recognize a charger before arriving
Messages and support requests	In-app messages between a driver and host about a specific booking; messages sent through our Contact Us form	To let drivers and hosts coordinate a booking, and to respond to your questions or issues
Device and usage data	Push notification token, device type, app version, general usage logs	To deliver push notifications you've opted into, and to diagnose and fix technical problems

3. How we share your information

We do not sell your personal data. We share it only as needed to operate the service:

• Other users: when you make or receive a booking, the other party sees your name, and (if you message them) your messages. Hosts and drivers do not see each other's full contact details, email, or payment information.
• Service providers: we use trusted third parties to run the service, including Stripe (payments and payouts), Cloudinary (photo storage), Firebase/Google (push notifications and Google Sign-In), and our database and hosting providers. Each only receives the data it needs to perform its function.
• Legal reasons: if required to comply with a legal obligation, or to protect the rights, safety, or property of EVLataa, our users, or the public.
• With your consent: in any other case where you've explicitly agreed to the sharing.

4. Payments

All card payments are processed by Stripe. When you add a card, your card details go directly to Stripe and are never stored on our own servers — we only store a reference token Stripe gives us, which lets us charge your card for future sessions without ever seeing the card number ourselves. Stripe's own privacy policy governs how they handle your payment data.

5. Data retention

We keep your account and booking data for as long as your account is active, and for a reasonable period afterward to meet legal, tax, and accounting obligations (such as retaining payment records). You can request deletion of your account at any time from the app's Profile screen or by emailing us — see Section 7.

6. Your rights

If you're in the European Economic Area or the UK, data protection law (GDPR) gives you the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Withdraw consent at any time, where processing is based on consent

Wherever you're located, you can exercise most of these rights yourself directly in the app: update your profile and vehicle details, manage which push notification categories you receive, or delete your account entirely from Profile → Delete account. For anything else, contact us at info@evlataa.online.

7. Account deletion

Deleting your account from the app removes your profile and personal information from active use. Some records — such as completed payment and payout history — may be retained as required by financial and tax regulations, but are no longer linked to your active use of the service.

8. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS) between the app and our servers, hashed passwords, and access controls on our systems. No method of transmission or storage is 100% secure, so we can't guarantee absolute security, but we work to protect your information appropriately.

9. Children's privacy

EVLataa is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we'll delete it.

10. International data transfers

Some of our service providers (including Stripe, Google/Firebase, and Cloudinary) are based outside Finland and the EU. Where we transfer personal data internationally, we rely on the safeguards those providers offer, such as standard contractual clauses.

11. Changes to this policy

We may update this policy as our service evolves. If we make material changes, we'll update the "Last updated" date at the top of this page and, where appropriate, notify you in the app.

12. Contact us

Questions about this policy or how we handle your data? Reach us at info@evlataa.online.