DRAFT — not approved

Privacy notice (for review)

This text is prepared for legal review and for a future public HTTPS URL required by Google Play / Apple. It is not in force, not legal advice and not a guarantee. Do not enter real personal or tax data. Open points: PONTOS-REVISAO-JURIDICA.txt. Companies House public search for “EMOTAX” on 25/10/2026 returned 0 results — company number remains UNKNOWN.

Identity still unknown

• Legal identity: UNKNOWN. Intended name: EMOTAX UK LTD (formation order 6204487 In Review — not a company number).
• Registered address: UNKNOWN.
• Support contact: UNKNOWN.
• Company number, VAT number and ICO registration: UNKNOWN.

What the private beta processes

• Account email and an authentication session for an invited account. The session lasts 15 minutes.
• Income, expense and CIS records typed by the signed-in owner.
• A private receipt original, when remote Pro is active, saved for that owner and recovered only by that owner. There is no public file address.
• Mileage notes kept on the device until the owner deletes them.
• Technical logs needed to keep the private service safe.

Processors used by this preparation

• Supabase Auth and Postgres, for the invited private-beta accounts and records.
• A DigitalOcean droplet in London, for the private HTTPS host.
• Caddy with a certificate from Let’s Encrypt, in front of that private host.
• Stripe Sandbox, for test billing only. Stripe Live is not connected. Card numbers are not stored by EMOTAX.

What stays off

• Public registration and commercial collection of real customer data.
• HMRC production filing. This is not HMRC-recognised software.
• Sale of personal data and advertising trackers.
• The interest form, until this notice is approved.

Rights

UK GDPR rights will be stated again after a controller is named. Until then, an invited test account may ask the founder to erase its test data. There is no public deletion channel.

Back to the app · Terms · Cancellation and billing · Retention and deletion · Support