Privacy Policy

1. Preamble

TruckerMaster (hereinafter “the Application”) is a web and mobile application intended for professional truck drivers. It is published in a non-professional capacity by a working truck driver (cf. legal notices). This policy describes how your data is collected, processed and stored in compliance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679).

2. Data processed

The Application processes the following data when you use it:

Driver card data (chronotachygraph): surname, first name, card number, validity dates, issuing authority, vehicle identifiers, places of service, driving/working/rest hours.
Payslip data (extracted by OCR from your scans): hourly rate, hours paid, allowances, bonuses, gross salary.
Manual entries : company name, permit number, full name, collective agreement parameters.

3. Data storage — “local first”

By default, 100% of your work data stays stored locally on your device (web browser or phone), through LocalStorage / IndexedDB technology. Your driver card data, payslips and manual entries only leave your device if you ask them to: no automatic sending, no collection on our initiative. If you turn on cloud backup (see below), they leave end-to-end encrypted — the server cannot read them.

Three limited and optional flows may nonetheless leave the device. They never contain your card data, your pay data or any identifying information:

Anonymous audience measurement — the application uses Vercel Analytics and Speed Insights, without cookies and without any advertising identifier, to count page views and measure technical performance. No identifying data, no profiling.
Technical diagnostics (optional, off by default) — if you explicitly turn it on in the settings, the application may send pseudonymised error reports (error type, version, browser, ephemeral session identifier). Any potentially identifying data is removed before sending. This flow can be turned off at any time.
Encrypted cloud backup (optional) — if you turn on synchronisation, your data is end-to-end encrypted on your device before sending: the server only stores unreadable data, and you alone hold the key. Strictly optional, subject to your explicit consent.

4. Reading the tachograph (card + Bluetooth)

Reading your driver card goes through a local software bridge (pcsclite) installed on your computer. This bridge only communicates with your browser, on the address localhost. No card data passes over the internet.

The application can also read your smart tachograph live over Bluetooth (remaining driving/rest time, current activity…). This communication is strictly local between your phone and the vehicle's tachograph: no data travels over the internet. The Bluetooth/location permission is used only to detect and pair the device; no GPS position is collected or stored for tracking purposes.

5. Optical recognition (OCR) of pay slips

The OCR of the files uses Tesseract.js, an open source library that runs entirely in your browser. Your pay slip images are not never uploaded to a third-party server.

Exception — improving the OCR dictionary (optional, on explicit action): if you have enabled diagnostics and you confirm the sending, a cropped and anonymised extract of a payslip may be transmitted to enrich the recognition dictionary. Identifying fields (name, employer, company number, address) are removed before sending. This flow travels through Discord (Discord Inc., United States) — a transfer outside the European Union based on your consent. Nothing is sent without your explicit confirmation, and you can disable diagnostics at any time in the Settings.

6. Cookies and trackers

The Application uses no advertising cookie and no third-party tracker (Google Analytics, Facebook Pixel, etc.) and carries out no profiling. Audience measurement (Vercel Analytics / Speed Insights) works without cookies and without any advertising identifier. The only local storage used is what the app needs to work (preferences, history).

7. Your rights (GDPR)

In accordance with the GDPR, you have the following rights over your data:

Right of access — you can export all your data from Settings → Tools → “Export my data” (readable JSON format).
Right of rectification — all values can be edited manually in the app.
Right to erasure — Settings → Tools → “Clear entire cache” deletes all your data from your device.
Right to portability — JSON export includes all of your data in an open and standard format.

8. Security

Since your data is stored locally on your device, its security depends mainly on the security of this device (screen lock, antivirus). We recommend:

Do not share your device without precautions.
To use a password/biometric lock on your phone.
To purge the app via Settings → Tools in the event of resale of the device.

9. Preservation

Your work data stays on your device until you delete it yourself or uninstall the application. If you turn on the encrypted cloud backup, the encrypted data is kept until you delete it through the application; you can turn synchronisation off at any time. Optional diagnostic reports and anonymous audience measurement are not tied to your identity and cannot be used to re-identify you.

10. Deleting your account and your data

You can delete your data at any time:

Local data — Settings → Tools → “Clear the full cache” erases all data stored on your device.
Account and cloud backup — if you have turned on cloud backup, the “Delete my account and my cloud data” button (Settings → Cloud backup) permanently deletes your account and your encrypted backup from our servers.
On request — you can also ask for your account and data to be deleted by emailing contact@truckermaster.fr; we act on it as soon as we can.

11. Contact

For any questions relating to your data or this policy:
Email: contact@truckermaster.fr

You can also exercise a right of complaint to the CNIL if you feel that your rights are not respected.

12. Developments

This policy may change. Major changes will be announced in the app and on this page (updated date above).