Privacy Policy

Last updated: 22 April 2026 · Português

This policy explains what data the DrivePass app collects, how it is used, and your rights. DrivePass is operated by Ricardo Vallejo (Teoremas), based in Portugal.

1. Data we collect

DrivePass is designed to respect your privacy. We collect only the minimum required for the service to work:

• Unique device identifier — a UUID generated on your phone and stored locally. It is not the IDFA nor the Android Advertising ID. Used only to sync your progress between sessions.
• Progress and answers — questions you answered, result (correct/wrong), date. All tied to the UUID above, not to you personally.
• Email (optional) — only if you choose to send feedback or a support request via the app. We use it only to reply to you.
• Subscription data — if you make an in-app purchase, payment is processed by Apple (App Store) or Google (Play Store). We receive only an anonymous subscription identifier via RevenueCat to validate premium access.

2. What we do NOT collect

• Name, address, phone number or other personal data.
• Location (GPS or approximate).
• Contacts, photos or any content from your device.
• Advertising identifiers (IDFA, AAID).
• Behavioural data for marketing or sharing with third parties.

3. How we use the data

The data collected is used exclusively to:

• Let you continue where you left off and view your progress.
• Improve the experience (aggregated and anonymous statistics).
• Generate personalised explanations of questions via AI models.
• Reply to your request when you send feedback.
• Validate your premium subscription.

4. Where the data is stored

Data is stored on secure servers hosted in Portugal (Hetzner, data centre in Falkenstein, EU). Databases are encrypted at rest and access is restricted. We do not share your data with third parties except as described in the next section.

5. Third-party services

DrivePass integrates with the following providers, each with its own privacy policy:

• Apple / Google — in-app purchase and subscription processing.
• RevenueCat — subscription management (anonymous transaction identifier only).
• Resend — transactional email delivery when we reply to feedback.
• AI providers — to generate question explanations, the question text is sent to a language-model provider. No personal identifier is included.

6. Retention

Your progress data is kept while the app is installed. If you uninstall the app and do not return, data tied to your UUID is deleted after 12 months of inactivity.

7. Your rights (GDPR)

As an EU user you have the right to:

• Access the data we hold about you.
• Correct or delete that data.
• Export your data in a portable format.
• Withdraw consent at any time.

To exercise any of these rights, email us at [email protected]. We reply within 30 days.

8. Children

DrivePass is intended for users aged 16 and over (the minimum licence age in Portugal). We do not knowingly collect data from minors under 16.

9. Changes to this policy

We may update this policy occasionally. Material changes will be communicated in the app. The latest version is always available at drivepass.teoremas.dev/en/privacy.

10. Contact

Any privacy questions: [email protected].