Privacy Policy

Account data. When you register we collect your email address and, if you sign up via Apple or Google, your name as provided by those platforms.

Preferences & usage. We store your chosen test centre, optional test date, current subscription or purchase status, and in-app settings (e.g. voice guidance preferences).

Location data. Location is processed on-device while you practise a route and is not transmitted to our servers unless you explicitly submit a pass report or opt in to anonymous route analytics.

Payment data. Web payments are handled by Stripe. App Store and Google Play purchases are handled by Apple and Google respectively, with entitlement management via RevenueCat. We do not store card numbers or full payment details on our servers.

Technical data. We automatically collect IP address, browser type, operating system, referring URLs, and pages visited when you use the web app. Mobile crash reports may be captured by Sentry.

Communications. If you contact us by email we retain a record of that correspondence.

We process your data for the following purposes:

1. To create and manage your account;
2. To deliver the Service, including route data, voice guidance, and maps;
3. To process subscription payments and verify entitlements;
4. To send transactional emails (e.g. purchase confirmations, password resets);
5. To notify you of changes to the Service or these policies;
6. To analyse aggregate usage patterns and improve the Service (analytics are anonymised where possible);
7. To comply with legal obligations and respond to lawful requests from authorities; and
8. To send marketing communications where you have given explicit consent (you may opt out at any time).

We process your personal data under the following lawful bases: performance of a contract (providing the Service you signed up for), legitimate interests (fraud prevention, service improvement), legal obligation (tax and compliance requirements), and consent (marketing emails, optional analytics).

Your data is stored on Supabase infrastructure hosted within the European Union. We apply encryption in transit (TLS) and at rest, role-based access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but take commercially reasonable steps to protect your information.

We do not sell your personal data. We may share it with the following categories of recipients:

1. Service providers— Supabase (database & auth), Stripe (payments), RevenueCat (subscription management), Sentry (crash reporting), Google Analytics (web analytics), Mapbox (maps), and Postmark (transactional email). Each is bound by a data processing agreement.
2. Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
3. Legal obligations — we may disclose data when required by law, court order, or to protect our rights and the safety of our users.

The web app uses cookies for authentication sessions and, with your consent, for analytics. See our Cookie Policy for full details.

Under UK GDPR and EU GDPR you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion (“right to be forgotten”) where there is no lawful reason for us to continue processing; object to or restrict processing; and data portability.

To exercise any of these rights, email us at support@drivingroutes.co. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority (e.g. the UK ICO or your local EU data protection authority).

We retain your account data for as long as your account is active. If you delete your account we will erase your personal data within 30 days, except where we are required to retain it longer for legal or financial compliance purposes. Anonymised, aggregated analytics data may be retained indefinitely.

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us data, please contact us and we will delete it promptly.

We may update this policy from time to time. We will notify you of material changes by posting the new policy on this page and, where appropriate, by email. Your continued use of the Service after any change constitutes acceptance of the updated policy.

Questions or requests regarding this policy should be addressed to:

support@drivingroutes.co
RELOAD TECHNOLOGIES - FZCO
Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates 341041