Privacy Policy

Last updated: 26 September 2026

This policy explains what information the Roadready app (the “app”) and this website collect, why, and the choices you have. Roadready is published by TODO: Your name or company name (“we”, “us”), the data controller for the personal data described here.

1. Information we collect

Stored only on your device

Your practice history, mock test results, bookmarked questions, mistakes to review, study streak, test date, reminder times and app settings are saved on your phone. They are not sent to us unless you sign in (see below). Uninstalling the app removes them.

If you create an account (optional)

• Account details: your email address, display name, and profile photo if you sign in with Google or Apple, plus a unique user ID. If you choose “Hide My Email” with Apple, we receive a private relay address instead. Passwords are handled by Firebase Authentication and are never visible to us.
• Synced progress: the on-device data listed above, so it can be restored when you sign in on another device.
• Invites: your invite code, whether you joined with someone else’s code (and whose), and how many invite rewards you’ve earned, so we can apply the programme’s rules and grant rewards.
• Email sign-in links: if you ask for a sign-in link, your email address is kept on your device until you tap the link.

Advertising (free version)

We show ads using Google AdMob. Google may collect your device’s advertising identifier, IP address, approximate location derived from it, device and app information, and how you interact with ads. Where the law requires it, we ask for your consent before any personalised advertising; you can change your choice at any time. On iPhone, apps may only track you across other companies’ apps and websites if you allow it. Ads are not shown to Premium users. See how Google uses information from apps that use its services.

Purchases

Apple (App Store) or Google (Google Play) process all payments and share with us only what is needed to confirm your purchase. We use RevenueCat to check which purchases are active. RevenueCat receives purchase and transaction details, a user ID (your account ID if you are signed in, otherwise a random anonymous ID), and basic device information such as country and app version. We never receive your payment card details.

Notifications

Daily study reminders are scheduled on your device and involve no data sent to us. If you allow push notifications, Firebase Cloud Messaging assigns your device a token so we can send you messages. You can turn notifications off in your phone’s settings.

What we don’t collect

The app contains no analytics or tracking SDKs beyond those named above. We don’t collect your contacts, precise location, photos or microphone. Sharing your results or rating the app happens through your phone’s own share sheet and store review prompt.

2. How we use your information and our legal bases

Under UK data protection law (UK GDPR) we rely on:

• Contract: to provide your account, back up and sync your progress, and provide Premium you have bought.
• Consent: for personalised advertising and push notifications. You can withdraw consent at any time.
• Legitimate interests: to show non-personalised ads that keep the free version free, to prevent fraud and abuse, and to keep the service secure.
• Legal obligation: to keep transaction records for tax and accounting.

We don’t sell your personal data or use it for automated decisions that affect you legally.

3. Who we share it with

We use these service providers, who process data on our behalf or as independent controllers:

• Google Firebase (Authentication, Cloud Firestore, Cloud Messaging): accounts, synced progress and notifications. Firestore data is stored in the UK (London region). Firebase privacy
• Google AdMob: advertising. Google Privacy Policy
• RevenueCat: purchase management. RevenueCat privacy
• Apple and Google: sign-in (if you choose Sign in with Apple or Google), payments and app distribution, under their own privacy policies.

We may also disclose information if required by law, or to protect the rights and safety of our users or others.

4. International transfers

Some providers, such as Google and RevenueCat, may process data in the United States or other countries. Where they do, transfers are protected by UK adequacy regulations (including the UK–US data bridge) or the UK International Data Transfer Agreement or Addendum.

5. How long we keep it

• Account and synced progress: until you delete your account.
• Invite records: if you used or shared an invite code, the record that the code was used (two anonymous account IDs and the date, with no name or email) is kept after you delete your account, so the programme’s one-code-per-person rule and the other person’s reward stay correct.
• On-device data: until you delete it or uninstall the app.
• Purchase records: as long as needed to provide Premium and meet tax and accounting obligations (normally six years).
• Advertising data: as set out in Google’s policies.

6. Deleting your account

In the app, go to Settings → Delete Account. This permanently deletes your account and the progress backed up to it straight away. Progress saved on your phone stays until you uninstall the app. Deleting your account does not cancel a subscription; manage that in your App Store or Google Play settings. You can also ask us to delete your data by emailing TODO: privacy@yourdomain.co.uk.

7. Your rights

You have the right to access, correct, delete, restrict or object to our use of your personal data, to receive it in a portable format, and to withdraw consent at any time. To make a request, email TODO: privacy@yourdomain.co.uk. We’ll respond within one month.

If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We’d appreciate the chance to put things right first.

8. Children

Roadready is designed for learner drivers and is not directed at children under 13. We don’t knowingly collect personal data from children under 13. If you believe a child has given us personal data, contact us and we’ll delete it.

9. Security

Data is encrypted in transit, and access to your cloud data is limited to your own signed-in account. No system is completely secure, but we take reasonable steps to protect your information.

10. This website

This website doesn’t use cookies, analytics or tracking, and practice answers stay in your browser. Our hosting provider may keep standard server logs, including IP addresses, for security and to keep the site running.

11. Changes to this policy

We may update this policy. We’ll change the date at the top, and for significant changes we’ll let you know in the app.

12. Contact us

See also our Terms of Service.