Last updated 17 September 2026
Privacy Policy
TaxPilot (“we”, “us”, or “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the TaxPilot mobile application and website (together, the “Services”).
TaxPilot is based in the United Kingdom and complies with the UK General Data Protection Regulation (UK GDPR) and applicable data protection laws.
01
Personal data we collect
We collect only the data necessary to provide our Services. Data you provide directly:
Full name
Email address
Home country
Current location (entered manually by you)
We do not collect
Government-issued identification numbers
Financial account or payment details
02
How we use your data
We use your personal data to:
Create and manage your account
Provide country-specific tax information
Improve app content and performance
Communicate important service updates
Respond to support enquiries
Maintain security and prevent misuse
03
Legal basis for processing
We process your data under the following lawful bases:
Consent — when you create an account or opt in
Contractual necessity — to provide the Services
Legal obligations — where required by law
04
Data storage & infrastructure
TaxPilot uses Firebase, a Google product, for data storage and infrastructure. Firebase provides:
Secure cloud hosting
Authentication services
Encrypted data storage
Performance monitoring
International transfers
Your data may be stored on servers located outside the UK, but appropriate safeguards are in place to ensure compliance with UK GDPR.
05
Data sharing
We do not sell your personal data. We may share data only:
With trusted service providers (e.g. hosting, analytics)
With tax partners only if you choose to engage them
Where legally required
All third parties are contractually required to protect your data.
06
Data security
We use appropriate technical and organisational measures to protect your data, including:
Encryption in transit and at rest
Restricted access controls
Secure infrastructure
07
Data retention
We retain personal data only for as long as:
Your account remains active
Required to meet legal obligations
You may request deletion at any time.
08
Your rights
Under UK GDPR, you have the right to:
Access your data
Correct inaccurate data
Request deletion
Restrict or object to processing
Withdraw consent
Requests can be sent to
09
Updates
We may update this Privacy Policy periodically. Changes will be published in the App and on our Website.