Data controller
CARGOKULT SOCIEDAD LIMITADA, tax ID B75611442, C/Tenderina Baja 106, 5th Floor Left, 33010 Oviedo, Asturias, Spain, is the controller of personal data used to provide Driving Time. For questions or to exercise your rights, email support@drivingtime.pro.
Data we process
- Account and identity data: email address, display name, language, and, if you choose Google, the profile data Google shares to authenticate you.
- Use and learning data: preferences, answers, attempts, progress, favourites, repetition schedule, statistics, and access rights.
- Purchase data: product, quantity, amount, currency, status, Checkout and payment references, dates, and access granted. Driving Time does not receive full card details.
- Support and quality data: reply email, topic, message, question number, language, app version, browser, and operating system. The IP address is used to limit abuse and protect the form.
- Privacy data: analytics and advertising-measurement choices and records needed to demonstrate those choices.
- Technical and security data: sessions, technical identifiers, error records, and signals needed to prevent fraud, abuse, and unauthorised access.
- Ask AI prepares a draft containing instructions and a public link to the question. The draft does not include account, session, attempt, or selected-answer data. If you choose to open ChatGPT or Claude, your browser sends the draft to the selected service; if you only copy it, Driving Time does not send it to an AI service.
Purposes and legal bases
- To create and protect the account, save progress, provide study features, manage purchases, and answer support requests: performance of the contract or steps requested before entering into it.
- To issue and retain payment documents, handle consumer rights, and comply with valid requests: compliance with legal obligations.
- To prevent fraud, abuse, and failures, protect the service, and improve reliability: CARGOKULT SOCIEDAD LIMITADA's legitimate interests, balanced against user rights.
- For Google Analytics and advertising or campaign measurement: consent. You can refuse or withdraw consent without losing essential functions.
- For optional communications you choose: consent, which you can withdraw through your account when that option is available. Messages needed to provide the service or answer a request are not advertising.
Providers and recipients
We share the data needed with providers that help us deliver the service: Stripe and Sold through Link, LLC for payments, tax, receipts, refunds, and disputes; Google for sign-in chosen by the user and, with consent, Google Analytics; the email provider for access codes and service messages; and hosting, security, and technical-operation providers.
If you choose to open an Ask AI draft in ChatGPT or Claude, your browser sends it to the selected service, operated by OpenAI or Anthropic. If you only copy the draft, Driving Time does not send it to either service.
Support requests and question reports are stored in Driving Time, and a copy is sent to a private Telegram group. The copy contains the reference, topic, reply email, message, language, and app version; it does not include session identifiers or the IP address.
We may also disclose data when required by law, a competent authority, or the defence of legal rights. We do not sell personal data.
International transfers
Stripe and Link, Google, Telegram, OpenAI, and Anthropic may process data in countries outside the European Economic Area. The provider that receives data depends on the features you use: Stripe and Link for payments; Google for sign-in and, with your consent, analytics; Telegram for copies of support requests and question reports; and OpenAI or Anthropic only when you choose to open an Ask AI draft in ChatGPT or Claude.
You can read how each provider handles data and international transfers in its official notice: https://stripe.com/privacy, https://link.com/privacy, https://policies.google.com/privacy, https://telegram.org/privacy, https://openai.com/policies/eu-privacy-policy/, and https://www.anthropic.com/legal/privacy.
Retention
We keep data while the account is active and afterwards only for as long as needed to provide the service, resolve issues, protect it, and meet legal obligations. Payment and billing records that must be retained by law may remain after account deletion, with personal data reduced to the minimum needed. If you joined through an invite, we keep keyed hashes of your email address and Google account after you delete the account, so that inviting the same person again earns no invite days; the hashes cannot be turned back into the email or the account.
Copies of messages already delivered to the private Telegram group are not automatically withdrawn when an account is deleted. Payment providers and other third parties retain the data they control under their own obligations and policies.
Your rights and controls
You may request access, correction, deletion, restriction, portability, or objection where applicable, and withdraw consent without affecting processing carried out before withdrawal. Email support@drivingtime.pro to exercise these rights.
From Data and privacy in your account, you can request an export in JSON format and delete the account. Deletion is irreversible: it closes the account, deletes or anonymises associated data that we do not have to retain, and revokes Forever, 30-day passes, and any other pending or active access.
You may also lodge a complaint with the Spanish Data Protection Agency at aepd.es.
Security and changes
We apply technical and organisational controls to limit access, protect sessions, and reduce the risk of loss, misuse, or unauthorised access. No Internet-connected system removes every risk.
We will update this policy when the service or data processing changes materially. The current version will be published on Driving Time.