Thervise Thervise
Terms of Service ← Back
Law 18-07

Personal Data Protection Policy

Version 18-07/2026-10-21  ·  Last updated: 21 October 2026  ·  Applies to thervise.com, the Thervise web app and mobile app

In short: Thervise locates the vehicles fitted with the Thervise-GPS trackers you register. We use your data only to give you the service: the map, the history, the alerts and help when a vehicle is stolen. We never sell your data and never use it for advertising. You can download a copy of it at any time from Settings, or delete your account: what is deleted is kept 12 months in a closed archive, then erased.

1 Who is responsible for your data

The controller of your personal data is Thervise — Systems & Technology Infrastructure, based in Saïda, Algeria. For anything about your personal data, write to [email protected].

This policy explains which data we collect when you use thervise.com, the web app and the mobile app, why we collect it, who receives it, how we protect it and what your rights are.

2 Legal framework and basis

We process your personal data in accordance with Law No. 18-07 of 10 June 2018 on the protection of natural persons in the processing of personal data.

We process your data on the basis of your express consent, which you give when you create your account (or at your first sign-in, if our team created the account for you). Some processing is also necessary to perform our contract with you (providing the service you subscribed to) and to meet our legal obligations (for example, keeping accounting records).

3 The data we collect

CategoryDataSource
Account Full name, username, email address, phone number, password (kept only as a one-way hash), profile picture (optional), two-factor secret (if you turn it on) You, at sign-up and in Settings
Vehicle and Thervise-GPS Tracker ID, SIM card number (ICCID), vehicle name, type, make, model, colour, plate number, vehicle photo (optional), stolen-vehicle declaration You, and the tracker at activation
Location Position (latitude, longitude), speed, heading and time, and the trips, stops, zones and alerts built from them The tracker in your vehicle
Thervise-GPS technical data Power supply voltage, mobile signal strength, diagnostic logs The tracker
Payments Chosen plan, amounts, dates, payment reference. We never see or keep card numbers. You and the payment provider
Optional features Your Telegram chat identifier (if you connect Telegram), the links you create to share a vehicle's live position, your car papers dates and odometer reading, your parking spots and parking-guard settings, who invited you, whom you invited, and your gifts You, when you use these features
Support requests What you write to our support team and the photos you attach (made smaller and cleaned of hidden details such as where they were taken, on your device, before sending); from the sign-in page, also the name, email or phone number you give so we can answer You, when you contact us
Security and logs Sign-in times, IP address, browser type, important actions on your account, record of your consent Collected automatically

4 Why we use your data

  • Show your vehicles' live position, history, trips and reports.
  • Send the alerts you choose (zones, speed, power cut, movement) by email, on Telegram or in the app.
  • Help recover your vehicle when you declare it stolen.
  • Remind you of your car papers and maintenance, send you a weekly summary of your trips, and watch your parked car with the parking guard — each can be turned off.
  • Show your vehicle's live position to the people you send a share link to, until it ends or you stop it.
  • Give the gifts of the invitation programme (a month of Starter, used on the device you choose).
  • Manage your account, subscription and payments.
  • Protect the service and your account (prevent fraud and unauthorised access).
  • Answer your support requests.
  • Meet our legal obligations (accounting, lawful requests from the authorities).

We do not sell your data, do not use it for advertising and do not send you marketing messages without your separate, prior consent.

5 Who receives your data

  • Authorised Thervise staff, only as far as their tasks require (support, billing, technical maintenance). They are bound by confidentiality.
  • Police and Gendarmerie: only for a vehicle that you have declared stolen, and only while the declaration is active, through a dedicated account with restricted access: the vehicle's position and description, and your contact details so they can reach you.
  • Judicial or administrative authorities, when the law requires it.
  • The people you send a share link to: they see the live position and the name of that vehicle — nothing else — until the link ends or you stop it.
  • Service providers who act only on our instructions:
    • Hetzner Online GmbH (Germany): hosting of our servers;
    • Cloudflare, Inc.: network protection, delivery of the website and privacy-friendly visit statistics;
    • Google: sending our emails through the Gmail API, and the fonts of the website;
    • Chargily (Algeria): online payments;
    • OpenStreetMap-based services (map images, address lookup, route drawing): they receive coordinates or map areas, never your name or account;
    • the mobile network operator of the tracker's SIM card: carries the tracker's data and the SMS commands sent to the tracker;
    • Telegram (Telegram FZ-LLC): only if you connect Telegram, it carries the messages Thervise sends you there.

6 Transfers outside Algeria

Our servers are in Germany (European Union, which applies a high level of data protection), and some of the providers above (Cloudflare, Google) may process data in other countries. Your data is transferred outside Algeria only under the conditions set by Law 18-07, including the authorisation of the National Authority for the Protection of Personal Data (ANPDP).

7 How long we keep your data

  • Location history (positions and stops): 12 months, then deleted automatically.
  • Account and vehicle details: as long as your account exists. When you delete it, they leave the service at once and go to the closed archive (below).
  • Payment and invoice records: for the period required by Algerian commercial and tax law (up to 10 years), even after the account is closed.
  • Security logs, alerts, vehicle commands, the change history of vehicle details, and your previous email addresses and phone numbers (when you change them): 12 months, then deleted automatically.
  • When a tracker leaves your account (you remove it, or Thervise releases it), its history is either removed or kept with the tracker, as chosen at that moment. Removed, it goes to the closed archive. Kept, you find it again if you activate the tracker again; if someone else activates it, it goes to the closed archive first. Either way, a later owner of the tracker sees nothing of yours.
  • Share links: deleted 30 days after they end or are stopped. Car papers, parking spots, Telegram link, invitations: while your account exists, or until you remove them.
  • Support requests and their photos: deleted 12 months after the last message on them, and at once when your account is deleted.
  • Closed archive: what is deleted from the service (an account, a tracker's history) is kept 12 months in a separate, encrypted archive that only Thervise administrators can open - every opening and every download is recorded - to answer requests from the judicial authorities, settle disputes and meet our legal obligations. It is then erased automatically. Photos are not archived: they are erased at once.
  • Backups: encrypted copies replaced on a rolling basis; data erased from the service and from the archive disappears from them within 30 days at most.

8 How we protect your data

  • HTTPS encryption for all traffic between your browser or the app and our servers.
  • Names, usernames, email addresses, phone numbers and plate numbers are encrypted in our database (AES-256-GCM).
  • Passwords are kept as bcrypt hashes that nobody, including us, can read.
  • Two-factor authentication is available.
  • Firewall, protection against intrusion attempts, restricted administrator access and a log of sensitive actions.
  • Encrypted backups.

9 Your rights

Law 18-07 gives you the following rights. Using them is free.

  • Information: this page.
  • Access: get a copy of your data — your trips at once in Settings → Account → Download my trips; a full copy of everything we hold about you on request, through Help & support in the app or by email.
  • Rectification: correct your data — edit your profile and your vehicle details in the app, or ask us.
  • Erasure: Settings → Account → Delete my account. Your account and history leave the service at once; they are kept 12 months in the closed archive, then erased (section 7). Payment records are kept as the law requires.
  • Objection: object, for legitimate reasons, to the processing of your data; and refuse at any time, free of charge, any use of it for marketing.
  • Withdrawal of consent at any time (see section 10).
  • Complaint to the National Authority for the Protection of Personal Data (ANPDP).

To use your rights: directly in the app, or by writing to [email protected] from the email address of your account. We answer within one month at most and may ask you to confirm your identity.

10 Withdrawing your consent

You can withdraw your consent at any time. Because a vehicle cannot be located without processing its positions, withdrawing consent means closing your account: use Settings → Account → Delete my account, or write to us. Withdrawal does not affect the processing carried out before it.

11 Tracking other people: your obligations

You may only track vehicles that you own or that the law entitles you to track. If someone else drives the vehicle (a family member, an employee, a borrower), you must tell them beforehand that the vehicle is fitted with a Thervise-GPS. Tracking a person without their knowledge can be a criminal offence under Algerian law (violation of private life). You are responsible for using the service lawfully.

12 Minors

Thervise is for adults. You must be at least 19 years old (the age of majority in Algeria) to open an account. We do not knowingly collect data about minors.

13 Cookies and browser storage

NameTypePurposeDuration
app_gateCookie (httpOnly)Keeps you signed in to the appSession (8 hours)
wt_tokensessionStorageYour sign-in tokenUntil the tab is closed
wt_lang, wt_themelocalStorageLanguage and light/dark preferencePersistent
wt_consentlocalStorageRemembers that you saw this notice on the welcome page1 year
thv_reflocalStorageThe invitation code of the friend who sent you a link30 days

Cloudflare may set a technical security cookie. We use no advertising or tracking cookies.

14 Google services (Gmail API)

Gmail API disclosure (Google API Services User Data Policy): Thervise uses the Gmail API with the gmail.send scope only, to send transactional emails to registered Thervise users from the platform's own sender address: email verification codes and confirmation links, password-reset codes, and account security notifications. Thervise does not read, access, modify, index or store any Gmail inbox messages or any other Google account data, and does not send marketing or promotional emails. No Gmail or Google user data is collected, retained or shared with third parties. Our use of Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

15 Security incidents

If a security incident affects your personal data, we take the necessary measures at once, inform the ANPDP and, when the incident may put you at risk, inform you without delay.

16 Changes to this policy

When we change this policy in substance, we publish the new version here with its date and ask for your consent again at your next sign-in.

17 Contact and complaints

  • Thervise — Systems & Technology Infrastructure, Saïda, Algeria
  • Email: [email protected]

If you believe your rights have not been respected, you can lodge a complaint with the National Authority for the Protection of Personal Data (ANPDP).