Policy

EU Driving Theory Privacy Policy

Effective: 21 October 2026

Who we are

EU Driving Theory is developed and published by CHUANDONG MA, Greece (“we”), who is responsible for the personal data described here. Contact: machuandong1@gmail.com.

Summary

You can study without an account, and your study progress stays on your device. An account is optional: you need one only to redeem a code, and it stores your email address and the packages you have unlocked. We do not use analytics or advertising tracking, and we do not sell data.

Data stored on your device

The app stores your study progress, mistakes, exam results, settings, languages, an optional profile photo, the packages you bought in the app, and, if you sign in, your sign-in tokens (in the device’s secure storage). This data is not sent to us. You can remove study data with “Clear study data” in the app, or everything by uninstalling the app.

If you create an account

We process your email address, your password (stored only in hashed form by our database provider; we cannot read it), an account identifier, and sign-in and security records kept by that provider, which include the IP address of the request. When you redeem a code we record which code was used and when, and which country packages it unlocked and until when. Failed code attempts are recorded with their time and reason so that repeated guessing can be blocked.

We use this data to provide your account and the content you unlocked (necessary for our contract with you) and to protect the codes against guessing (our legitimate interest).

Password reset

If you reset your password, your email address is used to send you a one-time code through our email delivery service.

In-app purchases

Purchases in the app are handled by Apple. We do not receive your payment details, your Apple ID or your purchase records; the app asks the App Store on your device which packages you own. Apple’s privacy policy applies to the purchase.

Service providers

We use Supabase for accounts and the database (hosted in the European Union), an email delivery service for password-reset codes, GitHub Pages for question images and announcements, Expo for app updates, and Apple for the App Store and payments. Like any web request, requests to these services reveal your device’s IP address to them. They process data only to provide their service to us.

How long we keep data

Account data is kept until you delete your account. Deleting it removes your email address, password, unlocked packages and failed code attempts; a used code stays marked as used but is no longer linked to you. Expiring backups at our database provider may keep deleted data for up to 30 days.

Your rights

You can ask for a copy of your data, its correction or deletion, or restrict or object to its use, and receive it in a portable format. You can delete your account in the app at any time: Delete your account and data. You can also complain to a data protection authority, such as the one where you live.

Device access

Photo access is requested only when you choose a profile photo. Notification permission is requested only for reminders, such as when an unlocked package is about to expire; reminders are scheduled on your device.

Changes

If this policy changes, we update it here and change the effective date.

Contact

Privacy questions: machuandong1@gmail.com