Privacy policy
You can use Co-Drive without creating an account. This policy explains what data the app and this website process, why, who receives it, how long we keep it, and the rights you have in Great Britain and the United States.
Last updated: 24 October 2026
In short
- Your lesson progress, test rehearsal results, theory history and My car details stay on your phone; only your first answer to each theory question is sent, with your anonymous ID, for aggregated answer statistics.
- The app creates a random, anonymous user ID for each device. We only process your name, email or phone number if you enter them.
- We do not sell or share your personal information. Ads are not personalised and we do not track you across other companies’ apps or websites.
- We never see your card details: Apple handles all in-app purchases.
- You can delete your account and server data from inside the app in one step.
Who we are
Co-Drive (called Yol Hocam in Turkish) is an independent driving theory and practice app for Great Britain, the United States and Türkiye. The controller responsible for your personal data is Ömer Doğan. Contact for any privacy question or request: omerdogan0@gmail.com. Users in Türkiye are covered by the Turkish privacy policy and KVKK notice.
Data that stays on your device
The following are stored only in the app’s storage on your phone and never sent to our servers: lesson and unit progress, rehearsal and theory question results (except the first-answer statistics below), your mistake review schedule, My car details (vehicle, mileage, inspection, insurance and registration dates), your licence or permit date, language and display settings, and local reminder settings. You can erase them with Settings → “Delete data on this device”, or by deleting the app. If you back up your phone, these files may be included in your backup according to your own settings.
Data we process on our servers
| Data | When | Why | How long |
|---|---|---|---|
| Random user ID (anonymous session) | Automatically, when you first open the app | To link purchases to your account and prevent abuse | Until you delete your account |
| Profile: test country (Great Britain, United States, Türkiye), US state, transmission type, platform, app version | During setup and when you change settings | To show the right content; aggregated statistics to plan the service | Until you delete your account |
| Your first answer to each theory question: question, chosen option, whether it was correct, time | The first time you answer a theory question (later answers to the same question are not sent) | To show how often each option is chosen and how many people get it right, and to find and fix wrong or misleading questions; individual answers are never shown to anyone, and statistics appear only after 20 answers | Until you delete your account |
| Email address | Only if you sign in with email (one-time code, no password) | To send the sign-in code and move your membership to another device | Until you delete your account |
| Purchase records: product, transaction ID, start and end dates | When you buy through the App Store | To verify the purchase, unlock content, and reflect refunds and cancellations | Until you delete your account; accounting summaries for up to 10 years |
| Push token | If you allow notifications | To send notifications you asked for | Until you delete your account or turn notifications off |
| Crash and error reports | When the app crashes or hits an error | To find and fix bugs | Up to 90 days |
| Technical logs: IP address, time, request details | On every connection to our servers | Security, abuse prevention, debugging | Up to 90 days |
| Support emails | When you email us | To answer you and handle your request | 2 years after the matter is closed |
Some features exist only in Türkiye: course-centre promo codes, sorting driving schools by your location, and private lesson requests to independent instructors. They are not offered in Great Britain or the United States, and the data they use is described in the Turkish policy.
We do not ask for your driver’s licence or permit number, test booking credentials, or any government ID. The app never books, changes or monitors driving test appointments.
Advertising
The free version shows ads through Google AdMob. We request non-personalised ads only: no interest-based targeting, no access to your device’s advertising identifier (IDFA), and therefore no iOS “tracking” permission prompt. Google processes app-scoped device identifiers, approximate location derived from your IP address and ad interactions to serve ads, limit how often you see them, prevent fraud and measure performance. Where the law requires consent for storing or reading information on your device for advertising, including in Great Britain, the app asks for your choice before showing ads, and you can change it later in the app’s settings. Co-Drive + members see no ads and the ad SDK is not started for them. Google’s practices: policies.google.com.
Purchases
Co-Drive + subscriptions and passes are sold by Apple through the App Store. Apple handles payment, billing and refunds; we only receive confirmation that a purchase is valid and how long it lasts.
Who receives your data
We do not sell, rent or share your personal information for cross-context behavioural advertising. We disclose it only to service providers that process it on our behalf or as needed to provide their service, to authorities when the law requires it, and to a successor if the service is transferred (with notice to you and the same protections).
| Recipient | Location | Purpose | Data |
|---|---|---|---|
| Supabase, Inc. (on Amazon Web Services) | US company; data hosted in Tokyo, Japan | Database, sign-in and email codes, server functions | User ID, profile, email (if given), entitlements, booking and application records, technical logs |
| Apple Inc. / Apple Distribution International | US / Ireland | App Store purchases, subscriptions and refunds; push delivery (APNs) | Transaction ID and status; push token |
| Google LLC / Google Ireland Ltd. (AdMob) | US / Ireland | Non-personalised ads in the free version, ad fraud prevention and measurement | App-scoped device identifiers, approximate location from IP address, ad interactions, ad SDK diagnostics |
| Functional Software, Inc. (Sentry) | US | Crash and error reports | Error details, device model, OS and app version, random user ID |
| 650 Industries, Inc. (Expo) | US | Delivery of app updates and push notifications | IP address, device and app version, push token |
| Resend, Inc. | US | Transactional email: lesson-request notice to the instructor, request status to the learner (if an email was given); Türkiye only | Recipient email address, lesson request content (learner name, phone, note, lesson time) |
| Google LLC (email service) | US | Receiving and answering support and rights-request emails | Email address and message content |
International transfers
Our database is hosted in Tokyo, Japan, and most of our providers are based in the United States or Ireland. For users in Great Britain, transfers rely on UK adequacy regulations (which cover Japan and the European Economic Area, and US organisations certified under the UK Extension to the EU–US Data Privacy Framework) or, where those do not apply, on the UK International Data Transfer Addendum to the European Commission’s standard contractual clauses or the UK International Data Transfer Agreement. You can ask us for a copy of the relevant safeguards.
Security
Connections are encrypted (TLS). Our database enforces row-level access rules so each user can only reach their own records. Admin access is personal and role-based. No system is perfect; if a breach affects you, we will notify you and the relevant regulators as the law requires.
Children and teenagers
Co-Drive is meant for learner and new drivers, who may be teenagers (for example from 15 in many US states and from 16 or 17 in Great Britain). It is not directed to children under 13, and we do not knowingly collect personal information from them; if you believe a child under 13 has given us personal information, contact us and we will delete it. For all users, including those under 18, the app uses privacy-protective defaults: no personalised ads, no tracking, no profiling, no precise location, and no public profiles or messaging. We never sell or share personal information of anyone, including consumers under 16.
Great Britain: your rights under UK GDPR
We process your personal data under the UK General Data Protection Regulation and the Data Protection Act 2018 on these lawful bases:
| Purpose | Lawful basis |
|---|---|
| Providing the app, your anonymous account, email sign-in, purchases and notifications you ask for | Contract (Art. 6(1)(b)) |
| Security, abuse prevention, crash reporting, aggregated statistics | Legitimate interests (Art. 6(1)(f)): keeping the app safe and working |
| Non-personalised ads in the free version | Consent for device storage and access where the Privacy and Electronic Communications Regulations require it; otherwise legitimate interests (funding the free version) |
| Accounting and tax records, responding to legal requests | Legal obligation (Art. 6(1)(c)) |
You have the right to access your data, to have it corrected or erased, to restrict or object to processing (including processing based on legitimate interests), to data portability, and to withdraw consent at any time without affecting earlier processing. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. To exercise a right, email omerdogan0@gmail.com; we reply within one month. You can also complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113.
United States: notice for California and other state residents
Notice at collection
In the last 12 months we have collected the following categories of personal information, from you and your device, for the purposes and retention periods described above:
- Identifiers: random user ID, email address (optional), IP address, app-scoped device identifiers (by our ad provider), push token.
- Commercial information: App Store purchase records.
- Internet or other electronic network activity: technical logs, crash reports, your first answer to each theory question (for aggregated statistics), ad interactions (by our ad provider).
- Geolocation data: approximate location derived from IP address (by our ad provider). We do not collect precise geolocation in the United States.
- Inferences and profile data: only the settings you choose (test country, state, transmission). We do not build profiles to infer characteristics about you.
We do not collect sensitive personal information as defined by California law, and we do not use any personal information to infer characteristics about you.
No sale or sharing
We do not sell personal information and do not share it for cross-context behavioural advertising, and have not done so in the last 12 months. Because we do not, we do not offer a “Do Not Sell or Share My Personal Information” link; you do not need to opt out. Our website honours Global Privacy Control signals, though it has no tracking to turn off.
Your rights
Depending on your state (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with comprehensive privacy laws), you may have the right to know what personal information we hold and how we use and disclose it, to access and receive a portable copy, to correct it, to delete it, and to opt out of sale, sharing, targeted advertising and profiling (none of which we do). We will not discriminate against you for using these rights. To make a request, email omerdogan0@gmail.com or delete your account in the app. We verify requests by matching information we already hold (for example, by replying from the email used to sign in). You may use an authorised agent, who must provide signed permission from you. If we deny your request, you can appeal by replying to our decision; if the appeal is denied, you may contact your state attorney general. We respond within 45 days.
California “Shine the Light”: we do not disclose personal information to third parties for their own direct marketing.
Website
This website uses no analytics, advertising or marketing cookies. To remember your cookie choice, a small preference record (yolhocam-cookie-preference, 6 months) may be stored in your browser’s localStorage; it is not a cookie and is never sent anywhere. Our hosting provider keeps connection logs (IP address, time) for security for up to 90 days.
Changes
We update this policy when the app or our providers change. We will announce material changes in the app or on this page before they take effect. The date at the top shows the latest version.