Legal

Privacy policy

Last updated: 18 October 2026

This policy explains what data MOUTOUKA collects, why, how it is protected and what your rights are. It only mentions the providers actually used by the service. This English text is a translation provided for convenience: in the event of any discrepancy, the French version prevails.

Data collected Purposes Third-party data Providers Security Retention Your rights Contact

1. Data we collect

Account data

email address and/or phone number (sign-in identifier);
first name and, where applicable, surname (display name);
your company name (your organisation);
password, stored in a protected form, never in clear text;
preferred language and role within your organisation.

Data entered in the service

data relating to vehicles (registration, type, purchase cost, etc.);
data relating to the drivers and controllers linked to your vehicles;
revenue and expenses, commissions, pay, mileage;
maintenance data, documents and due dates;
parts catalogue, targets, reminders and activity log.

Subscription and messages

your organisation's plan and subscription status, and recorded payments (amount, means, reference, period covered);
log of messages sent about your account or your subscription (date, channel, recipient).

Notifications

If you enable notifications on a device, we keep, linked to your account, the address that your browser's or your phone's notification service (Google, Apple, Mozilla or Microsoft depending on the device) assigns to that device. It is used only to notify you: a driver's report, a critical alert, a reminder of the day's revenue, a subscription due date. The content of notifications is encrypted all the way to your device. The address stops being used as soon as you disable notifications or sign out, and it is erased with your account.

Technical data

connection and session data (authentication tokens);
the minimal technical information needed for operation (device type, timestamps);
in the event of an application error, a technical report, without any recording of your screen or personal identifier;
when signing up by phone, the number and IP address, kept for 24 hours with the verification code sent by SMS — never in clear text — to limit abuse;
a cookie-free audience measurement, on the site and in the application: pages viewed and loading times, counted in aggregate.

On your device

The application keeps on your device what it needs to work: your session, a copy of the data displayed and, in the driver space, entries waiting to be sent when the network is unavailable. It uses no advertising or tracking cookies.

MOUTOUKA does not collect geolocation data in its current version. If such a feature were added, this policy would be updated accordingly.

2. Why we process it

to provide the service: management of your vehicles, drivers, revenue, expenses, maintenance and documents;
to authenticate you and secure your account;
to calculate your indicators, your balance and payroll, and to generate your alerts;
to synchronise your data between your devices;
to manage your organisation's subscription and notify you of its due dates;
to ensure the proper operation, security and improvement of the service, in particular through aggregate audience measurement.

3. Data you enter about other people

When you record information about other people — your drivers and controllers, for example — it is your organisation that decides how it is used: we process it on its behalf, solely to provide it with the service. It is your responsibility to inform those people and to comply with the regulations that protect them, as provided in the terms of use.

4. Providers

To provide the service, we use technical providers: hosting of the site and the data, sending of emails, SMS messages and notifications, audience measurement, error tracking. They act only for the purposes described above.

Some of them are established outside the Republic of the Congo: your data may therefore be hosted or processed abroad. We use no advertising tools and we do not sell your data.

5. Security

Exchanges are encrypted in transit (HTTPS). Passwords are stored in a protected form. Access to data is controlled by authentication, partitioned by organisation and limited according to each user's role. Data is backed up every night, and each backup is kept for 30 days. Despite our measures, no system offers absolute security.

6. Retention period

Your data is kept as long as your organisation exists. An organisation switched to read-only — trial ended or subscription expired — keeps its data: nothing is deleted as a result of expiry.

The administrator may request deletion of the organisation by writing to [email protected]. A copy of the data can be provided to them before deletion. The organisation is then deactivated and its access closed; for 30 days, it can be restored at their request. After that, its data may be permanently erased; this erasure is never automatic. Some data may be kept longer where the law requires it.

7. Your rights

You have rights over your personal data, in particular access, rectification, erasure and objection, under the conditions laid down by the applicable regulations, in particular Law No. 29-2019 on the protection of personal data in the Republic of the Congo. To exercise them, write to us (see below). A member of an organisation may also ask their administrator to deactivate their account. The procedure for having an account or an organisation deleted, and what remains afterwards, is detailed on the Delete your account page.

8. Contact

For any question about your data or this policy: [email protected].

Data controller: the publisher of MOUTOUKA, identified in the legal notice.