Privacy Policy

Effective Date: March 14, 2026

Welcome to Drivia. Drivia is a driving license exam preparation platform available as a mobile application and at drivia.ge. We are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

Information You Provide

  • Phone Number — Required for account registration, login, and identity verification via SMS OTP.
  • Full Name — Provided during registration to personalize your profile.
  • Password — Used for account authentication. Passwords are securely hashed and never stored in plain text.
  • Profile Picture (Avatar) — Optionally uploaded by you to personalize your profile.
  • Contact Form Submissions — If you reach out via our website's contact form, we collect the information you submit.

Information Generated Through Usage

  • Learning Progress — Your answers to practice tickets/questions and whether they were correct.
  • Exam History — Records of exams taken, including category, number of tickets, time spent, and individual answers.
  • Points & Streaks — Points earned from completing tasks, learning tickets, taking exams, and daily streaks.
  • Daily Task Progress — Your progress on daily learning and exam tasks.
  • Leaderboard Data — Your ranking based on accumulated points, visible to other users.

Automatically Collected Information

  • Analytics Data — Our website uses Vercel Analytics to collect anonymized usage data such as page views and browser type.
  • Device & Session Data — Standard technical information may be collected for app functionality and security purposes.

2. How We Use Your Information

  • Account Management — To create and manage your account, authenticate your identity, and provide password recovery via SMS OTP.
  • Core Functionality — To deliver the driving exam preparation experience, track your learning progress, and manage your points and streaks.
  • Leaderboard — To display your ranking among other users. Your full name and avatar may be visible to other users.
  • Personalization — To display your profile information, progress, and daily tasks within the app.
  • Communication — To send OTP codes via SMS for account verification and password recovery.
  • Improvement — To analyze aggregated, anonymized usage patterns to improve our platform.

3. Data Storage & Security

  • Database — Your data is stored in a secure PostgreSQL database.
  • File Storage — Profile pictures and related media are stored on Cloudflare R2, a secure cloud storage service.
  • Password Security — All passwords are hashed using the bcrypt algorithm before storage.
  • Authentication — We use JSON Web Tokens (JWT) for secure session management.
  • Rate Limiting — We implement request throttling to protect against abuse and brute-force attacks.

4. Data Sharing & Third-Party Services

We do not sell your personal data. We share data only with the following third-party service providers as necessary to operate our platform:

  • SMS Service (smsoffice.ge) — To deliver OTP verification codes to your phone number.
  • Cloudflare R2 — To store uploaded profile pictures and media files.
  • Vercel Analytics — To collect anonymized website usage data (website only).
  • Railway — Our database hosting provider.

We may also disclose your information if required by law, legal process, or governmental request.

5. Data Retention

We retain your personal data for as long as your account is active. If you choose to delete your account:

  • Your personal data (name, phone number, password hash) will be permanently deleted.
  • Your learning progress, exam history, points, and daily task data will be permanently deleted.
  • Your profile picture will be removed from cloud storage.

Temporary data such as phone verification codes expire automatically (typically within 15 minutes).

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access — Request a copy of the personal data we hold about you.
  • Correction — Request correction of inaccurate personal data.
  • Deletion — Request deletion of your account and all associated data.
  • Portability — Request your data in a structured, machine-readable format.
  • Objection — Object to certain processing of your personal data.

To exercise any of these rights, please contact us using the contact form on our website.

7. Children's Privacy

Drivia is intended for users who are of legal driving age in their respective jurisdiction. We do not knowingly collect personal information from children under the age of 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

8. International Data

Drivia is available in multiple languages (Georgian, English, Russian, Azerbaijani, Armenian) and serves users across different regions. Your data may be processed and stored in servers located outside your country of residence. By using Drivia, you consent to the transfer of your data to these locations.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify users through the app or website. The "Effective Date" at the top of this page indicates when the policy was last updated. Continued use of Drivia after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact us through the contact form on our website at drivia.ge/contact.