Privacy notice

What we collect

• Email address — to create your passwordless account and send sign-in and purchase-related messages.
• Purchase records — order and payment status from our payment processor. We do not store full payment-card numbers.
• Learning progress — quiz attempts, scores, and saved progress, so you can resume and review weak areas.

Why we collect it

We use this data only to provide the service you purchased: authentication, access entitlement, and your saved learning progress. We do not sell personal information.

Service providers and security data

We use Supabase for authentication and database services, Stripe for payment processing, Vercel for hosting, Brevo for transactional email, and Resend as a transactional-email fallback. We also retain limited security records, including a hashed identifier derived from an IP address, to rate-limit abuse of authentication and checkout endpoints.

Analytics and tracking

The service does not run third-party advertising pixels or cross-site tracking. If we ever introduce analytics or marketing tracking, this notice and any required consent controls will be updated before that tracking is enabled.

Minors' data

Many learners preparing for a first license are teenagers. We do not knowingly collect personal information from children under 13. Purchases must be made by an adult (18+) or a parent or guardian. An account and its study progress belong to the adult purchaser; we do not create a separate minor learner profile. If we obtain actual knowledge that an account holder is under 13, we suspend the account, address the purchase with the adult purchaser, and process the record under our child-data procedure.

Your controls

Signed-in users can download their stored account and learning-progress data and submit an account-deletion request from the dashboard. You can also email support@onwarddriving.com to request access, correction, or deletion, regardless of where you live. We acknowledge requests within 10 days and generally complete them within 30 days. If we need an additional 45 days, we will notify you. We may need to verify your request and retain limited information for tax, accounting, security, payment, fraud-prevention, or other legal reasons; when we complete a deletion request, we will tell you what we retained and why.

Retention

We keep account and learning data while an account is active and process verified deletion requests within the period described above, subject to lawful retention needs. Payment, refund, dispute, and checkout-assent records are retained for the applicable accounting, tax, and legal period. We retain email-delivery metadata for a limited operational period and remove expired rate-limit records on a scheduled basis.

State-specific privacy rights

Depending on where you live and whether a state privacy law applies to us, you may have rights to know or access personal information, correct it, delete it, or receive a portable copy. Some state laws also provide opt-out rights for the sale or sharing of personal information, targeted advertising, or certain significant profiling. California residents may also have a right to limit certain uses and disclosures of sensitive personal information. We do not sell or share personal information, use targeted advertising, or conduct significant-decision profiling, so there is no such processing to opt out of today.

We do not knowingly collect consumer health data. If that changes, we will provide any additional notice, consent, and request process required by applicable law, including Washington's consumer-health-data requirements.

Contact

For privacy questions or a rights request, email support@onwarddriving.com.