Last updated: 8 August 2026
Who we are
Mekena is a tool for keeping the records of a vehicle: daily rent, days off, services, documents and their expiry dates.
It is operated by Ashot Pahlevanyan IE, registered at Grigor Hasratsyan str, 15/3 apt 1, 0031, Yerevan, Armenia. For anything in this policy, write to info@mekena.org.
Two different relationships, and this matters
Mekena is used in two ways, and our responsibility for your data differs.
If you signed up yourself — an individual with their own car, or a fleet owner creating an account — we decide how your account data is handled. We are the controller of it.
If a fleet added you as a driver, the fleet decides what to record about you and why. They are the controller; we hold and process that data on their instructions. Questions about why your licence number is on file, or requests to change or remove it, go to the fleet first. We will help them act on it, and we will act ourselves where the law requires us to.
Fleet customers who need a written data-processing agreement should ask at info@mekena.org. If you are established in the EU, one is required rather than optional.
What we hold
Everyone with an account
- Email address, used to sign in and to send you the link that signs you in.
- Your name.
- Language preference, and time zone.
- A record of notifications sent to you, and whether you have read them.
Drivers, and individuals recording their own details
Recorded by a fleet, or by you about yourself:
- Phone number, date of birth, home address.
- Identity document numbers: national ID, passport, driving licence, and the licence’s categories and expiry dates.
- Photographs of documents, stored privately.
- Emergency contacts you add: their name, relationship to you, phone number. Please only add someone who is content to be listed.
- Employment terms held by the fleet: daily rate, currency, payment deadline, start and end dates, deposit.
- Days off requested and their outcome, rent payments declared, charges, driving-licence points where the fleet records them.
Vehicles and their history
Registration plate, make, model, year, VIN, insurance and inspection dates, odometer readings, services, parts, and photographs taken at handovers, inspections and incidents — which may show a vehicle, its damage, and occasionally a person.
If an accident is recorded, the fleet may also note details of the other party: their name, registration plate, insurer and contact details. That person is not a Mekena user and has no account with us. We hold this only because the fleet recorded it; if it concerns you, contact the fleet, or us at info@mekena.org and we will help.
Partner discounts
If you ask for a discount voucher, we record which vehicle it was issued for, the VIN as it stood at that moment, and — if a partner honours it — which partner did so and when. The partner sees the vehicle’s plate, make, model and VIN. They are not told whose car it is, and they get no access to your name, your contact details or anything else about you.
If you use the mobile app
- A push notification token identifying the app installation on your device. Not your location.
- We do not collect location. A tracker device identifier recorded against a car is a reference number typed in by the fleet, not a live feed, and the app never asks for location permission.
If you connect Telegram
The identifier of your private chat with our bot, so reminders can be sent there. Optional, and disconnecting stops it.
Not collected
No advertising identifiers. No analytics or tracking SDK of any kind — there is no Google Analytics, no Sentry, no product analytics in the app at all. No behavioural profiling. Nothing is sold or shared for advertising, ever.
Why we hold it
| What | Why | Lawful basis |
|---|---|---|
| Email, name, password | To sign you in and identify your account | Performance of a contract |
| Vehicle records, services, documents | The service you asked for | Performance of a contract |
| Driver details and terms | The fleet’s employment and rental records | The fleet’s contract with you, and its legal obligations |
| Identity document numbers and photographs | Verifying who is driving a vehicle worth millions of dram | The fleet’s legitimate interest, and legal obligations where they apply |
| Payments, expenses, rent history | The business’s accounting records | Legal obligation |
| Notifications, push, Telegram | Reminders you asked for | Performance of a contract, and your consent for Telegram |
Identity documents deserve the most careful answer of these, and the table above is our position, not a lawyer’s. It is one of the things a review should test.
Who else sees it
We use these companies to run the service. They hold data on our instructions and may not use it for their own purposes.
| Who | What they see | Where | Why |
|---|---|---|---|
| Supabase | The database, files, and sign-in — including the sign-in emails it sends | EU, Frankfurt (eu-central-1) | Where the service is hosted |
| Vercel | Requests to the app: address, browser, cookies | EU, Frankfurt (fra1) | Where the app runs |
| Google (Firebase Cloud Messaging) | Your device’s push token, and the title and body of each notification | Outside the EU | To deliver push notifications |
| Apple (APNs) | The same notification, relayed by Google, if you use an iPhone | Outside the EU | To deliver push notifications |
| Telegram | Your chat identifier and the reminder text | Outside the EU | Only if you connect it |
There is no separate email provider: sign-in links are sent by Supabase, in the same region as everything else.
Your data is stored in the European Union. The database and the app both run in Frankfurt. The three services in the table marked outside the EU receive only what is needed to deliver a notification to your phone, and only if you use the mobile app or connect Telegram. Turning off push, or not connecting Telegram, means nothing goes to them at all.
Notification text is written by the app and can name a vehicle or a date. Keep that in mind: it passes through Google to reach your phone.
Photographs
Photographs are stored in a private bucket. They are never public. They are served through short-lived signed links that expire, and only to people whose access allows it: the fleet that recorded them, and the driver they concern.
Deleting your account
You can delete your account yourself, from inside the app: More → Danger zone for fleet and individual accounts, or your profile page as a driver.
Straight away, and permanently:
- You are signed out and cannot sign in again.
- Push notifications stop on every device you ever used, not just the one you are holding.
- We erase your phone number, date of birth, home address, national ID number, passport number, driving licence number and its dates, and every photograph of your documents.
- Emergency contacts you listed are deleted outright. Those people never consented to being in our system, so they do not wait for a retention period.
- Your email address is released, so you may open a new account with it later if you want to.
Kept for now: your name, and the fleet’s financial records — payments, expenses, charges and vehicle history. These are the accounting records of a business, and one person leaving does not rewrite them. A ledger entry has to say who it refers to for as long as the business must keep it.
Then the name goes too. Twelve months after you stop driving for the fleet, your name is replaced automatically with “Deleted account”. The entries remain and still add up; they simply no longer say who.
Three honest limits:
- Free text. If someone typed your name into an accident description or a note, no automated process can reliably find it. Ask us and we will look.
- Photographs of incidents and handovers. These belong to the vehicle’s record rather than yours, and you may appear in one. They are not erased automatically. Ask us if this concerns you.
- Records of blocked identities are not part of the app in production and we hold none.
How long we keep it
- Your account: until you delete it.
- Your personal details after deletion: erased immediately, as above.
- Your name on financial entries: twelve months after you stop driving, then removed automatically.
- Financial records themselves — payments, expenses, rent history: kept as the business’s accounting records. They no longer identify you once the name is removed.
- Photographs and documents: your identity documents go on deletion. Vehicle photographs are kept while the vehicle’s record exists.
Getting a copy of your data
Ask at info@mekena.org and we will send you what we hold about you, in a readable format, within 30 days. Fleet owners can also export their payments, expenses, services, charges and deposits as CSV from inside the app at any time.
Your rights
You may ask us to:
- see what we hold about you;
- correct anything wrong;
- erase it — the deletion above does most of this immediately;
- restrict or object to how we use it;
- receive a copy in a portable format;
- withdraw consent where you gave it, such as Telegram reminders.
Write to info@mekena.org. We will respond within 30 days. If you are not satisfied, you may complain to the data-protection authority — in Armenia, the Personal Data Protection Agency of the Ministry of Justice.
Where a fleet is the controller of your data, ask them first; we will support them in answering, and we will act ourselves where the law requires it.
Children
Mekena is a tool for professional drivers and vehicle owners and is not intended for anyone under 18.
Changes
If we change this policy we will update the date at the top and, where the change is significant, tell you in the app.
Contact
Ashot Pahlevanyan IE Grigor Hasratsyan str, 15/3 apt 1 0031, Yerevan, Armenia Phone: +374 55 332234 info@mekena.org