Privacy Policy

This Privacy Policy explains how Kampuchea Tela Co., Ltd. ("Tela", "we", "us", or "our") collects, uses, discloses, and safeguards information when you use the Apps. Tela's mobile applications are technically developed and operated on Tela's behalf by DAE IT Solutions Pte. Ltd. ("DAE"), our appointed technology and backend service provider. Tela remains the data controller responsible for your personal data.

By using any of the Apps, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Apps.

1. Information We Collect

Category	Applies to	What it includes	Why we collect it
Account & registration data	All Apps	Name, phone number or email address, password (hashed), Cambodia phone number, referral code, language preference.	To create and secure your account, verify your identity (OTP), and personalise the app language.
Location data	B2C Loyalty	Your device's location (precise or approximate, depending on your device settings and permission choice).	To find nearby Tela stations and sort them by distance. The app works without location access, but distance sorting will be unavailable.
Transaction & loyalty data	All Apps	Fuel type, liters purchased, transaction amount, station name, timestamp, loyalty points earned, referral bonuses, e-receipts.	To process fuel purchases, generate digital receipts, and calculate and display loyalty points (accumulation only — no redemption).
Payment & wallet data	B2C Loyalty	Wallet balance (USD), Payment E-Card balance, and payment confirmation data. We do not collect or store your bank account or card details — payments are processed by licensed third-party providers (ABA Pay, Mohanokor).	To process wallet top-ups, QR payments, and E-Card transactions.
Fleet & vehicle data	B2B Commercial Fleet	Fleet card number (masked/tokenized), PIN (hashed, never stored in plain text), vehicle ID, company account name, driver name, sub-account details.	To authenticate drivers, link transactions to the correct vehicle and company account, and provide transaction history and exports.
Fleet management data	Tela Khmer Anakut	Business/company account information, and administrative access to your fleet's linked driver, vehicle, and transaction records.	To let fleet managers and business owners oversee accounts, vehicles, drivers, and transactions across their organisation.
Device & usage data	All Apps	Device model, OS version, app version, crash logs, and app usage analytics (via Firebase Analytics). Push notification tokens (FCM for Android, APNs for iOS).	To maintain app stability and performance, understand feature usage, and deliver push notifications (e.g. points earned, payment confirmations, balance alerts, promotions).
Support & communication data	All Apps	Messages and contact details you provide when submitting a complaint, comment, or support request.	To respond to your enquiries and resolve issues.

2. How We Use Your Information

• To create, secure, and authenticate your account.
• To process fuel purchases, wallet top-ups, and QR payments.
• To calculate and display loyalty points and referral bonuses (accumulation only — Tela does not offer point redemption, tiers, or point transfers).
• To generate digital receipts and maintain your transaction history.
• To show nearby stations and provide directions via Google Maps.
• To send push notifications relevant to your account activity and, where you have consented, promotional messages.
• For fleet and business accounts, to support account administration, vehicle/driver management, and transaction oversight.
• To maintain the security, stability, and performance of the Apps, and to detect and prevent fraud or misuse.

3. How We Share Your Information

We do not sell your personal data. We may share information with:

• Payment service providers — ABA Pay and Mohanokor process payments on our behalf. We share only the transaction data necessary to complete a payment; we do not receive or store your banking credentials.
• Your fleet company or account administrator — for B2B Commercial Fleet and Anakut users, transaction and account data may be visible to the linked company's fleet manager.
• Service providers acting on our behalf — including DAE (technology/backend provider), cloud hosting providers, Firebase (analytics and crash reporting), and push notification services (Google FCM, Apple APNs) — under contractual obligations to protect your data.
• Legal or regulatory authorities, where required by applicable law.

4. International Data Transfers

Tela's mobile applications are technically operated on Tela's behalf by DAE IT Solutions Pte. Ltd., based in Singapore. As a result, some personal data may be processed or stored outside Cambodia. Where this occurs, we require appropriate contractual safeguards to protect your data to a standard consistent with this Privacy Policy.

5. Data Retention

We retain your account, transaction, and loyalty data for as long as your account remains active, and for a reasonable period afterward to comply with financial record-keeping obligations, resolve disputes, and enforce our agreements. You may request deletion of your data at any time, subject to these retention needs.

6. Data Security

We apply reasonable administrative, technical, and physical safeguards to protect your information, including encrypted transmission (TLS 1.2+), hashed passwords and PINs, token-based authentication with limited session lifetimes, and automatic session timeout for fleet accounts after 15 minutes of inactivity. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Privacy Rights

Cambodia does not yet have a comprehensive data protection law equivalent to the EU's General Data Protection Regulation (GDPR). Regardless, Kampuchea Tela Co., Ltd. voluntarily applies GDPR-aligned rights and principles to all users of the Apps. You may:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data, subject to our legal and contractual retention obligations.
• Restrict or object to certain processing of your data.
• Port your data to another service, where technically feasible.
• Withdraw consent at any time for processing based on consent (e.g. marketing notifications, analytics), without affecting the lawfulness of processing carried out before withdrawal.

On first launch, the Apps present a consent screen summarising this policy, with granular controls to manage Analytics and Marketing preferences separately. You can review or change these preferences at any time in the app's Settings.

To exercise any of these rights, contact us using the details in Section 10 below.

8. Children's Privacy

The Apps are intended for use by individuals aged 18 and above and are not directed at children. We do not knowingly collect personal data from individuals under the age of 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where required, communicated through the Apps.

10. Contact Us