Privacy Policy

• We use Apple or Google sign-in — there are no passwords, and we never see your card details.
• We collect your location only while you’re actively navigating or practising a route, to place you on the map and give turn-by-turn guidance.
• The AI co-pilot only processes your data after you switch it on, and your inputs are never used to train third-party AI models.
• We do not sell your data and we run no third-party advertising.
• You can delete your account and data at any time from the app, or by emailing us.

We collect only what we need to run the service:

• Account information. When you sign in with Apple or Google we receive a provider identifier and, where you allow it, your name and email address. Apple’s “Hide My Email” is fully supported. We do not store passwords.
• Profile & preferences. Details you give us to tailor practice — such as your vehicle type, learning goal, and target test date — and your onboarding progress.
• Location & route traces. Precise GPS location while you navigate to a centre or practise a route (foreground use). We use it to position you on the route and generate turn-by-turn guidance, and we store the trace so you can review your practice history and AI debriefs.
• Practice activity. Which centres and routes you practise, session debriefs, and your skill-graph progress.
• AI co-pilot interactions. The questions and inputs you send to the AI coach, together with the relevant practice context, so it can respond. These features are off until you give consent (see section 5).
• Subscription & purchase data. Which plan you hold and the transaction identifiers Apple or Google return when we verify your purchase. Payment is handled entirely by the App Store / Google Play — we never receive your card or bank details.
• Technical & diagnostic data. Basic device and app information and error/diagnostic logs needed to operate, secure, and debug the service.

• Provide the app: navigation, practice routes, debriefs, and your profile.
• Power the AI co-pilot when you have enabled it.
• Manage your subscription and unlock the right entitlements.
• Provide customer support and respond to your requests.
• Keep the service secure and prevent fraud or abuse.
• Improve and maintain DriveRoutes.
• Meet our legal and regulatory obligations.

We rely on the following legal bases:

• Contract — to provide the app and your subscription.
• Consent — for the AI co-pilot features and for sharing your practice traces (e.g. with an instructor). You can withdraw consent at any time.
• Legitimate interests — to secure the service, prevent fraud, and improve DriveRoutes, balanced against your rights.
• Legal obligation — where the law requires us to keep or disclose information.

The AI and sharing features are opt-in. In the app you can independently turn on or off:

• Trace analysis — letting the AI analyse your drive traces to coach you.
• Personalised coaching — tailoring guidance to your progress and history.
• Instructor sharing — generating a report you choose to share with a driving instructor.
• Trace sharing — sharing an individual practice trace; off by default for every session.

Withdrawing consent stops the related processing going forward; it does not affect anything done while consent was in place.

When you enable the AI co-pilot, the inputs and practice context needed to answer you are processed by our AI provider, Anthropic (the Claude API), acting as our processor. Your inputs are used solely to generate your response and are not used to train Anthropic’s or any third party’s models. The AI co-pilot provides study guidance only and is not a substitute for a qualified driving instructor.

We do not sell your personal data. We share it only with service providers that help us run DriveRoutes, each bound to protect it:

• Apple & Google — sign-in and verification of in-app purchases.
• Anthropic — AI co-pilot processing (only when enabled).
• Mapbox — rendering the maps used for navigation.
• Error-monitoring & hosting providers — to operate, secure, and debug the service on our infrastructure.
• A driving instructor — only if you explicitly choose to share a report.
• Authorities or advisers — where required by law, or to protect our rights, users, or the public.

Some providers (for example Anthropic) process data outside the UK. Where data leaves the UK we rely on an adequacy decision or appropriate safeguards such as the UK Addendum to the EU Standard Contractual Clauses.

We keep your account and practice data while your account is active and for as long as needed for the purposes above or to meet legal obligations. Diagnostic logs are kept for a short period. When you delete your account we delete or anonymise your personal data, except where we must retain limited records (for example for tax or fraud-prevention).

Under UK GDPR you have the right to:

• access a copy of your personal data;
• correct inaccurate data;
• erase your data (“right to be forgotten”);
• restrict or object to certain processing;
• data portability;
• withdraw consent at any time.

To exercise any of these, email [email protected]. You can also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

DriveRoutes is intended for learner drivers and is not directed at children under 16. We do not knowingly collect data from children under 16; if you believe a child has provided us data, contact us and we will delete it.

We protect your data with encryption in transit, provider-based authentication (no passwords to leak), server-side enforcement of entitlements and access, and least-privilege access to our systems. No service can be perfectly secure, but we work to keep your data safe and to respond quickly to any incident.

We may update this policy from time to time. We will revise the “last updated” date above and, for material changes, give notice in the app or by email.

Privacy questions or requests: [email protected]. General enquiries: [email protected].