Privacy policy
Last updated: 12 October 2026
1. Who is responsible
The data controller is Your Name, Street, City, Country. Contact for any privacy question or request: engrranaabubakar@gmail.com.
2. What we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Email address, password (stored only as a bcrypt hash), account creation date | Your account and login | Contract, art. 6(1)(b) |
| Your answers (question, chosen answer, correct or not, time taken), review schedule, exam simulations and results, start date of the 15-day plan | Spaced repetition, progress, pass-readiness estimate | Contract, art. 6(1)(b) |
| IP address and email of login, registration and password-reset attempts | Protection against password guessing and abuse (rate limiting) | Legitimate interest in security, art. 6(1)(f) |
| Password-reset token (stored only as a hash) | Sending you a link to choose a new password | Contract, art. 6(1)(b) |
We do not collect your name, phone number, location, contacts or payment data. We use no advertising, no analytics or tracking tools and no cookies. The service is free and your data is not sold or shared for marketing.
3. Data stored on your device
The app stores in your browser's local storage only what it needs to work: your login token, the answers of an unfinished exam simulation, flashcard progress and small display preferences. If you install the app or press "Save for offline", question texts, chapter phrases and sign images are kept in the browser cache. You can remove all of this by logging out and clearing the site data in your browser or uninstalling the app.
4. Who processes the data for us
- Hosting (servers and database): VPS provider (OpenStack, Czech Republic), in the European Union.
- Email delivery (only for password-reset emails: your email address and the link): none (no emails are sent yet).
- HTTPS certificates are obtained from Let's Encrypt; no user data is sent to them.
Fonts and all other files are served from our own server. Explanations are generated on our server from the official answers and the theory manual; your answers are not sent to any AI provider.
5. How long we keep data
- Account and learning data: until you delete your account.
- Login / reset attempts (IP address, email): 2 days.
- Password-reset links: 30 minutes, single use.
- Database backups: up to 14 days (on our server, and an encrypted copy off-site); deleted accounts disappear from backups when those expire.
6. Your rights
You can access, correct, download (portability) or delete your data, restrict or object to processing, at any time. On the Account page you can download all your data as a file and permanently delete your account yourself. For anything else write to engrranaabubakar@gmail.com; we answer within one month. You also have the right to lodge a complaint with a supervisory authority, in Italy the Garante per la protezione dei dati personali (garanteprivacy.it).
7. Children
The service is meant for people preparing the driving-licence theory exam and is not directed at children under 14. If you are under 14, do not create an account.
8. Security
All traffic is encrypted (HTTPS). Passwords are stored only as bcrypt hashes, repeated failed logins are blocked, and changing the password logs out all other sessions.
9. Changes
If this policy changes we update the date above; important changes are announced in the app.