Privacy Policy

1. Who we are

Passly ("Passly", "we", "us") provides a platform for UK driving instructors, driving schools and learner drivers, including this website, the Passly web app and the Passly mobile app (together, the "Service"). This policy explains what personal data we collect, why, and the choices you have. For any privacy question, contact support@passly.co.uk.

2. What we collect

• Account details: name, email address, phone number and password (stored as a secure hash).
• Profile and business details: for instructors: services, prices, availability, working areas and public profile information; for learners: pickup addresses you save.
• Lesson data: bookings, driving tests, cancellations, lesson notes, skill and progress reports.
• Messages: conversations sent between an instructor and their pupils inside the Service.
• Payment data: payment records for lessons and lesson credits. Card payments are processed by Stripe; Passly never sees or stores full card numbers.
• Device data: push-notification tokens for the mobile app, and basic technical logs (such as IP address and browser type) generated when you use the Service.

3. How we use your data

• To run the Service: managing diaries, bookings, payments, progress records and messaging between instructors and pupils.
• To send service communications: booking confirmations, reminders, payment requests and account emails, plus push notifications you can control in your device settings.
• To display instructor profiles publicly where an instructor chooses to be listed in our directory.
• To keep the Service secure, prevent abuse and comply with our legal obligations.

Our legal bases under UK GDPR are performance of a contract (providing the Service), legitimate interests (security, service improvement) and consent where required (e.g. marketing emails, which you can withdraw at any time).

4. Who we share data with

We share personal data only with the processors needed to run the Service:

• Supabase: database, authentication and file hosting.
• Stripe: card payment processing and instructor payouts.
• Expo / Apple / Google: delivery of mobile push notifications.
• Email delivery providers: sending transactional emails.

Within the Service, your instructor or pupil sees the information needed to work together (names, contact details, pickup addresses, lessons, payments and progress). We do not sell personal data, and we do not share it with advertisers.

5. Data retention

We keep your data while your account is active. If you close your account, we delete or anonymise personal data within a reasonable period, except records we must keep for legal reasons (such as payment records for tax purposes).

6. Your rights

Under UK GDPR you can ask us to access, correct, delete or export your personal data, and you can object to or restrict certain processing. Email support@passly.co.uk and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).

7. Children

The Service is intended for driving instructors and learner drivers. Learners must be old enough to hold a UK provisional licence and to consent to our processing (13 or over); in practice learner accounts are created by invitation from an instructor.

8. Cookies

The Service uses cookies and similar storage that are essential for signing in and keeping your session secure. Where we use optional analytics to understand how the Service is used, the data is aggregated and not used for advertising.

9. Changes to this policy

We may update this policy as the Service evolves. Material changes will be flagged in the app or by email, and the "last updated" date above always reflects the current version.

10. Contact

Questions, requests or concerns: support@passly.co.uk or via our contact page.