Privacy Policy

This Privacy Policy describes how DriveSchool ("we", "us", or "our") collects, uses and shares information when you use our web application (the "Service"). By using the Service, you agree to the practices described in this policy. This document is a general template and should be reviewed by your legal counsel before going to production.

• Account information: name, email address, role (instructor or student), phone number and business details you provide when creating or updating your profile.
• Operational data: lesson bookings, availability, payment status, progress notes and other content you enter while using the Service.
• Communications: automated reminders, confirmation messages and support correspondence.
• Technical data: device, browser, IP address and basic usage information used to keep the Service running securely.

• To provide, maintain and improve the Service.
• To schedule lessons, process payments and send reminders.
• To respond to support requests and notify you about important changes.
• To detect, prevent and address fraud, abuse or security incidents.

DriveSchool offers an optional integration with Google Calendar so instructors can avoid double-bookings and keep their personal and teaching schedules in sync. When you choose to connect your Google account, the following applies:

• What we access: we request the minimum Calendar scopes needed to read your busy time slots and create or update lesson events on a calendar you select.
• What we store: we securely store the access and refresh tokens issued by Google, your Google account email, and the scopes granted. We do not store the contents of unrelated events from your calendar.
• How it is used: tokens are used solely to read free/busy information and to write lesson events that you create inside DriveSchool. We do not sell or share Google user data with third parties.
• Disconnecting: you can disconnect the integration at any time from your settings page. Doing so revokes our stored tokens. You can also revoke access directly from your Google account permissions page.
• Google API Services User Data Policy: our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell your personal information. We share data only with:

• Service providers that help us operate the platform (hosting, database, SMS delivery, payment processing), under contractual confidentiality obligations.
• The instructor or student you are directly transacting with — for example, your instructor can see lessons you book with them.
• Authorities when required by law, or to protect the rights, safety or property of DriveSchool, our users or the public.

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account at any time, after which we will delete or anonymize personal data except where retention is required for legal, accounting or security purposes.

We use industry-standard safeguards — including encryption in transit, access controls and row-level database security — to protect your information. No system is perfectly secure, and we encourage you to use a strong, unique password and to keep your account credentials confidential.

Depending on your jurisdiction, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing. Contact us to exercise these rights.

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email. The "Last updated" date at the top reflects the latest revision.

For questions about this policy or your data, contact us at privacy@driveschool.app.