Privacy Policy

1. Who we are

Drv.ge is operated by Individual Entrepreneur Alexey Ivanov (registration number 306421592), Georgia, Tbilisi, Samgori district, Police Lane I, N5, floor N2, N4a ("we", "us"). We decide how your personal data is used and are responsible for it. You can reach us at support@drv.ge.

2. Data we collect

• Account data: your email address and name; your password if you register with email (stored only as a one-way hash, so we cannot read it); your interface language, theme and, if you enter it, your exam date.
• Sign-in data from Google: if you sign in with Google, the data described in section 3.
• Learning data: the tests and exams you take, your answers and scores, your progress, the questions you got wrong or saved for review, and how many questions you have answered today (used for the daily free limit).
• Content you send us: comments you post on questions and emails you send to our support address.
• Payment data: the amount, currency, order number and status of your payments. For card payments made through Flitt we also receive the masked card number (only a few digits are visible). You enter your card details on the payment provider's page; we never receive or store your full card number or security code.
• Technical and usage data: your IP address (including the IP address of your last sign-in), browser and device type, operating system, the pages you open, actions you take in the Service (for example, starting a test or buying a subscription) and technical details of errors.
• Guest exam data: if you try an exam without an account, we store your answers under a random identifier kept in a cookie in your browser. If you then register, the results are moved to your new account.
• Push notification data: if you allow notifications in your browser, the subscription address your browser gives us so that we can send you reminders.

Sign in with Facebook was discontinued on July 1, 2026. For accounts that used it before that date we keep the Facebook user ID linked to the account until the account is deleted; we no longer receive any data from Facebook.

3. Google user data

You can create a Drv.ge account and sign in with your Google account, on the website and in the Android app. This section explains exactly what we receive from Google and what we do with it.

What we access

We request only Google's basic sign-in permissions: openid, email and profile. With your permission, Google shares with us:

• your Google account email address;
• your name;
• your Google account ID (a number that identifies your Google account).

Google also includes a link to your profile picture, which we do not store or use. We do not request access to Gmail, Google Drive, Contacts, Calendar or any other Google service. We never see your Google password, and we do not keep Google access or refresh tokens, so we cannot act on your Google account.

How we use it

• Email address: to create your Drv.ge account, to recognise you when you sign in, and to send you service emails: the welcome email, sign-in and password reset links, notifications of replies to your comments and answers to your support requests.
• Name: to address you in the Service and in our emails.
• Google account ID: to link your Google account to your Drv.ge account, so that the next Google sign-in opens the same account.

We do not sell Google user data. We do not use it for advertising, and we do not use it to develop, improve or train artificial intelligence or machine learning models. We do not give it to data brokers or use it to decide on credit. Nobody reads it except when you ask us for help, when it is needed for security (for example, investigating abuse), or when the law requires it.

How we store and share it

Your email address, name and Google account ID are stored in our database on Fly.io servers. We share them only with the service providers that run parts of the Service for us, and only for the purposes in section 6:

• Resend receives your email address to deliver our emails;
• Sentry receives your email address with error reports, if an error happens while you are signed in;
• Mixpanel receives your name as part of your product analytics profile;
• Dodo Payments receives your name and email address when you pay through Dodo Payments.

Limited Use

Drv.ge's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

We keep your Google user data for as long as your Drv.ge account exists. You can delete your account at any time in your profile with the "Delete my account" button, on the website or in the app. This immediately removes your email address, name and Google account ID from our database, together with the rest of your account data (see section 8 for the few records that are kept after deletion). You can also email support@drv.ge from the address you signed in with to ask us to delete it.

You can remove Drv.ge's access to your Google account at any time on the Third-party apps & services page of your Google Account. This stops Google from sharing your data with us in future; to delete the data we already hold, delete your Drv.ge account as described above.

4. How we use your data

• To provide the Service: your account, tests and exams, progress tracking, spaced review of mistakes and the daily free limit. We process this data to perform our agreement with you.
• To handle payments and Pro access, and to keep the accounting records required by law.
• To contact you: service emails, answers to your support requests and comments, and, only if you turned them on, practice reminders by push notification.
• To understand and improve the Service: usage statistics that show which features and pages are used and where errors happen.
• To keep the Service secure: error monitoring and preventing abuse.
• To comply with the law.

We do not send newsletters or marketing emails, and we do not sell your personal data.

5. Cookies and similar technologies

• Essential cookies keep you signed in, protect forms against forgery, remember you if you choose "Remember me" and link a guest exam to your browser. The Service cannot work without them.
• Preference storage remembers choices such as your language and theme, and which sections you collapsed.
• Analytics cookies: a device identifier (mp_device_id, kept for one year) that links your visits for our product analytics in Mixpanel, and Google Analytics, which counts visits and is loaded through Cloudflare Zaraz.

You can block or delete cookies in your browser settings. If you block essential cookies you will not be able to sign in.

6. Who we share data with

We use the following service providers. Each receives only the data it needs to do its job for us:

• Fly.io hosts the application and its database on servers in Frankfurt, Germany. All account and learning data is stored there.
• Tigris (through Fly.io) stores our files (such as question images) and backups of our database.
• Cloudflare delivers the website and protects it against attacks. All traffic to Drv.ge, including your IP address, passes through Cloudflare.
• Google Analytics (Google) receives the pages you view, your device and browser, and your approximate location (country or city). We do not send your name or email address to Google Analytics.
• Mixpanel (product analytics, stored in the European Union) receives events about how you use the Service, your account number, device identifier, language and name, and your email address when you delete your account.
• Sentry (error tracking) receives technical details of errors, including your account number and email address if you were signed in. Passwords and other sensitive fields are removed before a report is sent.
• Datadog (server monitoring, European Union) receives technical data about requests to our servers, which may include your IP address.
• Resend delivers our emails and receives the emails you send to our support address.
• Flitt processes card payments. You enter your card details on Flitt's payment page; Flitt tells us whether the payment succeeded.
• Dodo Payments has processed some of our payments and receives your name and email address when you pay through it.
• Browser push services (for example, Google for Chrome, Mozilla for Firefox and Apple for Safari) deliver push notifications if you turned them on. The notification content is encrypted so the push service cannot read it.
• Google Play distributes the Android app and shows the optional in-app review prompt, under Google's own privacy policy.

We may also disclose personal data when the law requires it (for example, to a court or a public authority) or when it is necessary to protect our rights or the safety of users. If the Service is sold or transferred to another operator, your data will be transferred with it, the new operator will be bound by this policy, and we will notify you before that happens.

Some of these providers process data outside Georgia, in particular in the European Union and the United States. We use providers that commit to protecting personal data in their data processing terms.

7. How we protect your data

• All connections to Drv.ge are encrypted with HTTPS.
• Passwords are stored only as salted one-way hashes.
• Card details are entered on the payment provider's page and never reach our servers.
• Access to our servers and database is limited to the people who operate the Service.
• Passwords and other sensitive fields are removed from error reports before they are sent to our error tracking provider.

No method of transmission or storage is completely secure. If a security incident puts your data at risk, we will inform you and the supervisory authority as required by Georgian law.

8. How long we keep data

• Account, learning and Google user data: as long as your account exists. When you delete your account, it is removed from our database immediately.
• Payment records: kept after the account is deleted, together with the name and email address used for the payment, for as long as tax and accounting law requires.
• Comments: comments you posted on questions stay visible under the name they were posted with, but are no longer linked to an account. Write to us if you want them removed.
• Support emails: kept so that we can follow up on your request. Write to us if you want them deleted.
• Backups: our database backups can still contain deleted data for a limited period, until they are overwritten.
• Analytics and monitoring data: error reports, server logs and Google Analytics data are deleted automatically by those providers after their retention periods. Mixpanel data is kept until we delete it; write to us and we will delete your Mixpanel profile.

9. Your rights

Under the Law of Georgia on Personal Data Protection you have the right to:

• know what data we hold about you and get a copy of it;
• correct inaccurate data (you can change your name in your profile yourself);
• have your data deleted (see section 3);
• object to or ask us to restrict the processing of your data;
• withdraw your consent at any time, for example by turning off push notifications;
• file a complaint with the State Audit Office of Georgia, which has supervised personal data protection in Georgia since March 2, 2026.

To use any of these rights, email support@drv.ge from the address linked to your account. We will answer within the time limits set by law.

10. Children

Drv.ge is meant for people preparing for a driving theory exam. It is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child under 13 has given us personal data, contact us and we will delete it.

11. Changes to this policy

When we change this policy, we update the date at the top of this page. Before any significant change takes effect, in particular any change to how we use Google user data, we will notify you by email or in the Service.

12. Contact us

For any question about this policy or your personal data:

• Email: support@drv.ge
• Operator: Individual Entrepreneur Alexey Ivanov, registration number 306421592
• Address: Georgia, Tbilisi, Samgori district, Police Lane I, N5, floor N2, N4a