Privacy policy

1. Who we are

PassRoutes is run by ITSS (IT Sols and Services). We are the data controller for the personal data described in this policy.

For any privacy question or request: Send us a message with the contact form.

2. What stays on your phone

The app keeps the following on your phone. It is not sent to us unless section 4 says so.

• Who you are in the app (learner driver, accompanying driver or driving instructor), your test centre and your test date, if you add one.
• Your voice settings.
• Which routes you have previewed or driven, and which test prep items you have ticked.
• Your recordings, until you delete them.
• Any pass you have bought.
• A random ID that the app creates the first time it runs. It is not your phone’s own ID and does not contain your name.

Deleting the app removes all of this from your phone.

3. Your location

Guided drives

During a guided drive the app uses your phone’s location to show where you are and to give the next direction. This happens on your phone. If you leave the route, the app sends your current position and direction of travel to a routing service to work out the way back (see section 6). Your name and the app’s ID are not sent with it.

Recordings

When you record a route or your driving test, the app saves a list of GPS points on your phone: position, time, speed and GPS accuracy. It keeps recording with the screen locked until you stop it. It never records sound, video or photos.

For a test recording, the app keeps only the part of the drive that starts and ends at the test centre. The rest, such as your drive to the centre, is removed on your phone before the recording is saved.

4. What is sent to us, and when

Only the following, and only when you choose to do it:

• A recording you send. The GPS points, the test centre, the date, length and distance of the drive, the spots you marked, the route name and, if you typed one, the name you want shown on the route. For a test recording, also anything you chose to tell us afterwards: your result, the number of grade 2 faults, where you picked up faults, and your note. The app version and the app’s random ID are sent with it.
• A problem report. The route, where on the route you were, the kind of problem, your note, the time, the app version and the app’s random ID.
• A pass you buy or restore. The store’s signed proof of the purchase: which pass it is, the store’s purchase number, the date, the test centres you chose and a random code that links the passes bought on one phone. It does not contain your name, your email address or your card details. The app’s random ID is sent with it. We check the proof and keep a record of the pass, so that you can get it back on a new phone.
• A message to us. When you use the contact form on this website, or email us: your name, your email address and what you write.

To stop people flooding these services, we also keep a scrambled code made from the sender’s IP address for up to two days. It cannot be turned back into the address.

You can also share a recording as a file from your phone, for example with your instructor. That goes wherever you send it, not to us.

5. Why we use it

• To give you the app’s features (guided drives, passes). The legal basis is our contract with you.
• To add and check routes using the recordings and reports you send. The legal basis is your consent: you tick the boxes before recording and you choose to send. You can withdraw consent at any time by asking us to delete what you sent.
• To keep routes correct, stop misuse and answer your questions. The legal basis is our legitimate interest in running a safe and accurate service.

We do not make decisions about you by automated means, and we do not build advertising profiles.

6. Others who handle data for us

• Apple App Store and Google Play take payment for passes. We never see your card details.
• Our database provider (Neon) stores the recordings, reports and messages you send, and the record of your passes, on servers in the European Union (Frankfurt, Germany).
• The routing service receives a position and a direction of travel when you leave a route, to work out the way back.
• The map provider (OpenFreeMap) sends map images to the app. Like any web server, it sees your IP address and which area of the map was asked for.
• Our website host (Vercel) runs this website and the service the app sends to. It keeps short-lived server logs that include IP addresses, to keep them running and secure.

Spoken directions are made by your phone’s own speech engine. We do not sell personal data, and we share it only as described here or when the law requires it.

7. How long we keep it

• On your phone: until you delete it. You can delete every recording in the app under Me, or delete the app.
• Recordings and reports you sent: for as long as they are needed to check and maintain routes, or until you ask us to delete them. A published route contains only the road path and spots, never who drove it, apart from an instructor’s name when they asked for it to be shown.
• The record of a pass: until 12 months after the pass ends, then it is deleted automatically.
• Messages from the contact form: 12 months, then they are deleted automatically. Emails are kept for as long as needed to deal with your request.

8. Your rights

Under data protection law (GDPR) you can ask us for a copy of your personal data, ask us to correct or delete it, ask us to limit or stop using it, ask for it in a portable form, and withdraw your consent. We will reply within one month.

Because there are no accounts, please tell us the test centre and the date and time of the recording, so that we can find it. For a pass, tell us the date you bought it and its test centres. See how to delete your data.

You also have the right to complain to the Data Protection Commission in Ireland (dataprotection.ie) or to the data protection authority where you live.

9. Data outside Europe

Some of the companies in section 6 are based outside the European Economic Area, for example in the United States. Where personal data is transferred there, it is protected by safeguards approved under EU law, such as the EU–US Data Privacy Framework or standard contractual clauses.

10. Children

PassRoutes is made for learner drivers and the people who help them. It is not aimed at children under 16, and we do not knowingly collect their personal data.

11. This website

This website does not use cookies and has no analytics or advertising trackers.

12. Changes to this policy

If we change this policy we will update this page and the date at the top. If a change is important, we will also say so in the app.