Privacy Policy

• Anonymous usage analytics — which sections are opened, how long a session lasts, and general device type. This is not linked to your name or identity and is used only to improve the app.
• Restore-purchase email (optional) — if you buy the full kit, you may enter an email address at checkout. We store it only so you can restore your purchase later on another device. It is never used for marketing.
• Local device data — settings like audio and haptics preferences, onboarding status, and a randomly generated device identifier used to remember your premium unlock on this device.
• Support messages — if you email us, we keep your message and reply so we can help you.

• We do not collect your name, address, phone number or date of birth.
• We do not collect your driving licence number or test booking details.
• We do not intentionally collect any health or mental health information.
• We do not collect payment card details (see Payments below).
• We do not require an account or password to use the core app.

If analytics are enabled, Microsoft Clarity may also collect anonymous session recordings and interaction data to help improve usability. Personal input fields are masked. Analytics are disabled by default and can be turned off at any time in Settings.

If analytics are enabled and you buy Premium, we also store a short, non-identifying note of how you first reached PassPal — the page you arrived on, the website address you came from, and any campaign tags in the link. This helps us understand which channels work. It contains no personal information, and if analytics are off it is never sent or stored.

When you open PassPal through one of our own campaign links or QR codes (for example on a flyer or poster), we count that visit anonymously so we can tell which campaigns work. We record only the campaign, the page you landed on, a rough device type (web, iPhone or Android) and the date. To estimate unique visitors we keep a one-way code that changes every day and can't be traced back to you or linked across days. We don't store your IP address or any personal details, and nothing is saved on your device for this, so it doesn't depend on your analytics setting.

If you use a PassPal Partner's code or link (for example from a driving instructor), we save that Partner code against your anonymous device ID on our server, with the date it was added, so the right Partner is credited if you later buy Premium. We keep a record when a code is replaced by a newer one. No name, email, IP address or other personal details are stored for this, it is used only to run the Partner Programme, it lasts 90 days, and it doesn't depend on your analytics setting.

On iPhone, when you tap "Open PassPal" or "Get PassPal" on an instructor's link page, we copy a random one-time link code to your clipboard. It contains no personal details and doesn't identify the Partner by itself. PassPal only reads your clipboard if you tap "Use my instructor's link", and your phone asks first. The code can be used once and expires after 3 days. Just opening or previewing the link saves nothing.

See posthog.com/privacy and privacy.microsoft.com.

• Restore-purchase emails are kept for as long as your unlock is valid (lifetime), so we can help you restore it.
• App Store purchase references (an anonymous Apple transaction reference and your device ID) are kept for as long as your unlock is valid, so Premium stays unlocked and can be restored.
• Anonymous analytics (PostHog and Microsoft Clarity) are retained by those providers on their standard schedules (typically up to ~13 months).
• Local device data stays on your device until you clear it.
• Support emails are kept for up to 2 years, then deleted.