Privacy Policy

This Privacy Policy explains how Filo collects, uses, and protects your personal information when you use our website, mobile application, and related services.

Filo is designed for self-employed drivers who need to keep digital records and manage tax reporting. Because our service handles financial information, we take data protection and privacy seriously.

This policy explains what information we collect, how it is used, and the choices you have regarding your data.

Information we collect

We may collect the following types of information:

• Account information such as your name, email address, and login details.
• Financial transaction data imported through Open Banking connections.
• Vehicle and mileage information recorded when you use mileage tracking features.
• Tax reporting data required for HMRC submissions.
• Technical information such as device type, browser, and usage data when visiting our website.

Open Banking connections

Filo connects to bank accounts using Open Banking through TrueLayer, a regulated Open Banking provider.

This connection provides read-only access to transaction data so that income and expenses can be organised automatically.

Filo cannot move money, initiate payments, or access your banking password. Access is controlled by your bank and can be revoked at any time.

HMRC integrations

When you choose to connect your HMRC account, Filo uses HMRC’s official APIs and authentication systems.

This allows the service to retrieve tax obligations and assist with submitting updates or tax return information where supported.

How we use your information

Your information is used to:

• Provide and operate the Filo service.
• Import and organise financial records.
• Generate summaries of income, expenses, and mileage.
• Prepare tax-related information for HMRC reporting.
• Improve the reliability and security of the platform.

Data security

Sensitive data is encrypted in transit and at rest. We follow industry best practices to protect financial and tax information.

Access to systems is restricted and monitored, and we use secure infrastructure to protect personal and financial records.

Data sharing

We do not sell personal data. Information may be shared only when necessary to operate the service, such as with:

• Open Banking providers such as TrueLayer
• HMRC systems when authorised by the user
• Technical service providers supporting the platform

Data retention

We retain personal data only for as long as necessary to provide the service and comply with legal or regulatory obligations.

Users may request deletion of their account and associated data, subject to any legal requirements for record retention.

Your rights

Under UK data protection law, you may have the right to access, correct, or request deletion of your personal information.

You may also have the right to restrict or object to certain types of data processing.

Cookies

Our website may use cookies or similar technologies to improve user experience and understand how visitors use the site.