Privacy policy

01Who we are

By Trends LTD (“By Trends”, “we”, “us”) is a company registered in Bulgaria and a registered administrator of personal data. We build and operate free online projects, currently taxi-exam.online, vehxia.com and thetheme.store.

For the purposes of the EU General Data Protection Regulation (GDPR), By Trends LTD is the data controller of the personal data described here. This policy applies to bytrendsltd.com and to the projects we operate.

02What we collect

We keep collection to what a project actually needs to work. Depending on which one you use and how, this may include:

• Account details — an email address and a password (stored hashed), if the project offers accounts and you choose to create one. Accounts are always optional.
• Content you create — for example your practice results and weak points on taxi-exam.online, or the vehicles, service history and reminders you add in Vehxia.
• Contact details you give us — when you email us for support, feedback or about a donation.
• Technical and usage data — device and browser type, general location inferred from your IP address, and basic server logs that keep the service running and secure.
• Communication preferences — such as which email reminders you've asked to receive and how often.

We do not intentionally collect special categories of data (health, political, biometric and similar), and we ask that you don't enter them into our projects.

03Why we use it

We use personal data to:

• provide the project and its features, and keep your content saved between sessions;
• send the reminders and service messages you've asked for;
• respond to your support requests and feedback;
• keep our services secure, prevent abuse and fix problems;
• understand, in aggregate, how our projects are used so we can improve them.

We do not sell your personal data, and we do not use it to build advertising profiles.

04Legal basis for using your data

Under the GDPR, we rely on the following legal bases:

• Performance of a contract — to provide the features you signed up for.
• Legitimate interests — to keep our services secure, functioning and improving, in a way that doesn't override your rights.
• Consent — where we ask for it, for example for non-essential cookies or optional communications. You can withdraw consent at any time.
• Legal obligation — where we're required to keep or disclose data by law.

05Advertising & donations

Our projects are free to use and funded by advertising and voluntary donations. That has direct privacy consequences, so here is exactly what it does and doesn't mean.

• We don't sell your data to advertisers, and we don't build profiles of you from the content you create in our apps.
• Where we display third-party advertising, the ad provider may set its own cookies or similar technologies and may collect data about your visit under its own privacy policy. Where consent is required, we ask for it before non-essential advertising cookies are set.
• Blocking ads never blocks the content. Using an ad blocker will not restrict anything on our sites.
• Some projects carry no advertising at all. See per-project differences below.
• Donations are voluntary and give no additional access, because nothing is withheld. If you donate, we process only what's needed to receive and account for the contribution, and any payment provider involved handles payment details under its own policy — we never see or store full payment card details.

06Cookies & analytics

We use a small number of cookies and similar technologies to keep you signed in where you've chosen to have an account, to remember your preferences, and to understand overall usage so we can improve things. Where required, we ask for your consent to non-essential cookies, including advertising cookies. You can control cookies through your browser settings, though turning some off may affect how a project works.

07Per-project differences

Our projects don't all handle data the same way, and the differences matter more than a single blanket statement would suggest.

08Who we share it with

We share personal data only where needed to run the service, and only with providers bound to protect it. These may include:

• hosting and infrastructure providers that store and serve the projects;
• email providers that deliver reminders and support replies;
• advertising providers, on the projects that display advertising;
• payment providers, if you choose to make a donation;
• analytics providers that help us understand aggregate usage.

We may also disclose data if required by law, or to protect the rights, safety and security of our users and our service. Some providers may process data outside the European Economic Area; where they do, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

09How long we keep it

We keep personal data only for as long as we need it for the purposes above — typically for as long as you have an account or actively use a project, plus a reasonable period afterwards. When data is no longer needed, we delete or anonymise it. You can ask us to delete it sooner (see Your rights), and in Vehxia you can delete your account yourself from within the app.

10Your rights

Subject to the GDPR and applicable law, you have the right to:

• access the personal data we hold about you;
• correct data that's inaccurate or incomplete;
• delete your data (“right to be forgotten”);
• export your data in a portable format;
• object to or restrict certain processing;
• withdraw consent at any time, where we rely on it.

To exercise any of these, email hello@bytrendsltd.com. You also have the right to lodge a complaint with your local data protection authority — in Bulgaria, the Commission for Personal Data Protection (CPDP).

11How we protect it

We use reasonable technical and organisational measures to protect your data, including encryption in transit, hashed passwords and access controls. No system is ever perfectly secure, but we work to keep the risk low and to respond quickly if something goes wrong.

12Children

Our projects are intended for adults and are not directed at children. We don't knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we'll delete it.

13Changes to this policy

We may update this policy from time to time, for example as our projects evolve. When we make material changes we'll update the date at the top and, where appropriate, notify you directly. Continuing to use our projects after an update means you accept the revised policy.

14Contact us

Questions about this policy or your data? They reach the person who wrote the code.