Privacy Policy

Who we are

GoPermit ("the app") is operated by 1000904733 Ontario Inc. ("we", "us"). Questions about this policy: support@gopermit.org.

What stays on your device

Your study progress — completed lessons, quiz results, streaks, missed-question review bank, chosen state and license class, and settings — is stored locally on your device. We don't upload the record itself (your answers, review bank or lesson history), and deleting the app deletes it. Our analytics do receive each quiz's score and pass/fail, your streak length, and your chosen state and license class, as described below. Your state and license class also leave your phone when the app downloads the right handbook, and with any question report or feedback you choose to send.

The app has no account system. We do not collect your name, email address, or phone number through the app.

What we collect, and why

• Analytics and app experiments (PostHog). Usage events — for example which onboarding and paywall screens are viewed, your onboarding answers (such as how soon your test is), quiz scores and pass/fail, streak length, and whether a trial or purchase happened (the plan and price, never your payment details). They come with the app version, device model, OS version, language, time zone, and the state and license class you picked. Events are linked to a random ID that our subscription manager (RevenueCat) also uses, never to your name, email, or phone number. PostHog also receives your IP address and uses it to estimate an approximate location (country, region, city, postal code and approximate coordinates), which is stored with your analytics profile. We use the same service to test different versions of some screens, like the paywall, to see which works better. We use this data to understand what works and improve the app, not for advertising. It runs whether or not you allow tracking.
• Ad attribution (AppsFlyer). AppsFlyer helps us see which ads or links lead people to install the app. When you open the app, AppsFlyer receives basic device and app information, for example the identifier Apple gives each app on your device (the identifier for vendor), an AppsFlyer ID, device model, iOS and app version, language, country and time zone, network type, other technical device details, your IP address, when the app was installed and opened, and details of the ad or link you tapped before installing (if any). It also uses Apple's privacy-preserving ad measurement (SKAdNetwork and Apple Search Ads attribution). If you allow tracking in the iOS App Tracking Transparency prompt, AppsFlyer also receives your device's advertising identifier. If you tap "Ask App Not to Track", the advertising identifier is never shared — the app works exactly the same either way. AppsFlyer may report installs and subscription events (such as trial starts) to the ad networks we advertise with, so we can measure and improve our campaigns. If you allowed tracking, these reports can include your advertising identifier.
• Purchases (RevenueCat and Apple). Payments are processed entirely by Apple; we never see your payment details. RevenueCat, our subscription manager, receives a random user ID it creates for the app, your purchase and subscription history for this app, and basic device information (the identifier for vendor, device model, and IP address) so your subscription unlocks correctly and can be restored. To help us see which ads lead to subscriptions, RevenueCat also receives your AppsFlyer ID, the ad campaign details AppsFlyer reports for your install (if any), and Apple's Search Ads attribution token, and it may share subscription events such as trial starts and renewals with AppsFlyer. If you allow tracking, it also receives your advertising identifier.
• Question reports and feedback (our database, hosted on Convex). If you flag a question as wrong or send feedback, we receive what you wrote plus context that helps us fix the problem: the question and quiz involved, the answer you picked and whether it was right (for question reports), your selected state and license class, where in the app you sent it from, app version, platform, OS version, a content-version identifier, and the time. A copy of your message (shortened), together with your selected state and license class, the content version and, for question reports, the question involved, may also be sent to us as a notification in a private Telegram chat so we can act on it quickly. If you're offline, it is saved on your phone and sent the next time you send another message of the same kind (a question report or feedback). Please don't include personal information in the message text.

Content the app downloads

To keep questions and road-sign images up to date, the app checks our server (hosted on Convex) when you open it, and again when you come back to it (at most every 10 minutes). When we publish new questions or sign images, it downloads them. These requests don't include your study progress, your chosen state, or any account, analytics, or advertising identifier.

The app also downloads the official driver handbook (a PDF) from handbooks.gopermit.org (hosted on Cloudflare), matching the state and license type you picked. To fetch the right file, that request names the state and license type, but nothing that identifies you.

Like any internet request, these downloads reveal your IP address and basic technical details your phone sends automatically to the host. Everything the app downloads is saved on your device and is deleted when you delete the app.

What we don't do

• We do not sell your personal data. We do share install and subscription events with the ad networks we advertise with, as described above, to measure our ads.
• We never ask for your device's precise (GPS) location, and we do not access your contacts, photos, camera, microphone, or health data. Our analytics provider does estimate a rough location from your IP address, as described above.
• We do not show third-party ads inside the app.

If you email us

If you email us (support, feedback, or a Pass Guarantee claim), we receive your email address and whatever you include, such as App Store receipt details, a DMV score slip or exam record, and screenshots. We use it only to answer you and to review your claim, keep it as long as needed to resolve your request and meet legal or accounting requirements, and delete it on request.

Service providers

The providers above (PostHog, AppsFlyer, RevenueCat, Convex, Cloudflare, Telegram, Apple) and the ad networks we advertise with process data on our behalf to provide the services described. We only use providers that are bound by contract to use this data solely to provide their service to us and to protect it with the same or equal protection as described in this policy. We share data with them only as needed to run the app and measure our ads, and with authorities only if legally required. These providers may store and process data outside your country, including in the United States, where it may be accessible to local authorities under local law.

Data retention

On-device data, including downloaded questions, sign images, and handbooks, stays until you delete the app. Question reports and feedback, including the copies in our Telegram notifications, are kept for as long as needed to maintain content quality, and we'll delete them on request. Analytics and attribution data are kept for as long as our providers retain them under our account settings. Subscription records are kept by RevenueCat and Apple for as long as needed to provide and restore your purchase and for legal, tax and accounting reasons.

Your choices and rights

• Tracking: the app asks once (normally during setup). Decline the tracking prompt to keep your advertising identifier private, or change your answer anytime in iOS Settings → Privacy & Security → Tracking. Declining doesn't turn off the analytics and basic attribution described above.
• Notifications: if you allow them, study reminders and a heads-up before a free trial ends are scheduled on your phone itself; we don't send them from a server. Turn them off anytime in iOS Settings → Notifications → GoPermit.
• Delete on-device data: tap Settings → Reset all Results to clear your quiz progress, or delete the app to remove your progress and everything the app downloaded. Some identifiers our providers' tools keep in the iOS Keychain (such as AppsFlyer's) may remain until the device is reset.
• Everything else: email us at support@gopermit.org to ask what we hold that could relate to you, or to request deletion. Depending on where you live (for example the EEA, UK, or California) you may have additional legal rights to access, correct, or delete personal information; we honor valid requests regardless of where you live. Because the app has no accounts, we may need details from you (for example the text of a report you sent, or your purchase receipt) to find data related to you, and we may not be able to link analytics data to you.

Children

Many permit-test takers are teenagers, and the app is designed to be appropriate for them. We do not knowingly collect personal information from children beyond what is described above, and the app never asks for your name, age, email address, or phone number. If you believe a child has submitted personal information to us (for example inside a feedback message), contact us and we will delete it.

Changes

If we materially change this policy, we will update this page and the date above. Continued use of the app after a change means the updated policy applies.