DriveBox is an app that connects driving instructors with learner drivers, qualified drivers who want extra training, and trainee instructors. This policy explains what personal information the DriveBox app collects, why, who it's shared with, and the choices and rights you have.
The short version: we only collect what the app needs to work. We don't show ads, we don't track you across other apps or websites, and we never sell your information.
1. Who we are
DriveBox ("DriveBox", "we", "us") is the data controller for the personal information described in this policy.
Contact: support@drivebox.uk
Postal address: [OOOSH! Your Local Driving School]
Driving instructors on DriveBox are self-employed and are not employed by DriveBox. When an instructor keeps their own records about their learners (for example their diary, lesson notes and payments), they are also responsible for that information under data protection law.
2. What we collect
| Information | Examples | Why we need it |
|---|---|---|
| Account details | Name, email address, password (stored securely, never in plain text), account type | To create and secure your account and let you sign in |
| Profile | Profile photo, banner photo, bio, town or postcode district, gearbox, prices and qualifications (instructors) | To show your profile to the people you connect with, and help learners find local instructors |
| Instructor checks | ADI or PDI badge number, expiry date and photos of the badge | So DriveBox can check instructors before they can use the app |
| Phone numbers | A learner's phone number that an instructor adds to their diary | So instructors can contact learners who aren't on DriveBox |
| Approximate location | Town or postcode district, and the map position worked out from it | To show your area, find instructors nearby, and send local lesson alerts |
| Precise location | An instructor's live location, only after they tap "On my way" for a lesson | So their learner can see when they'll arrive. Sharing stops automatically when they arrive or end it |
| Messages and content | Chat messages, ADI Community posts and replies, lesson notes, skill progress, test results, feedback badges | To provide messaging, the community, progress reports and pass rates |
| Diary | Lessons, tests, times, pick-up places, confirmations | To run the diary and tell people about changes |
| Payments | Payment requests, amounts, how a lesson was paid, and in-app card payments | To record payments and let learners pay instructors by card |
| Identifiers | Your DriveBox account ID | To link your information to your account |
Card details
Card payments are handled by Stripe. Your card number is entered into Stripe's secure payment form and goes straight to Stripe. DriveBox never sees or stores your full card details.
What we don't collect
We don't collect your contacts, browsing history, health information or advertising identifiers, and we don't use analytics or advertising tools that track you.
3. Who can see your information
- People you connect with. Learners and instructors who are connected can see each other's profiles, shared lessons, messages, progress and lesson notes.
- Other DriveBox users. Instructor profiles (name, photo, area, prices, qualifications, availability and feedback badge totals) can be seen by signed-in users. Learner profiles are only shown to instructors.
- Other instructors. ADI Community posts are visible to approved instructors.
- Private to you. An instructor's money records and pass rate are private to them, unless they choose to share them. Feedback badges never show who gave them.
4. Service providers we use
We use trusted companies to run DriveBox. They only use your information to provide their service to us, under contract:
- Supabase: secure database, sign-in and file storage for the app.
- Stripe: card payments. Instructors who take card payments have their own Stripe account, and Stripe checks their identity and bank details. Stripe also uses payment information to prevent fraud. See Stripe's privacy policy.
- Resend: sending account and order emails.
- Open-Meteo: local weather on the home screen. Only an approximate map position is sent, with nothing that identifies you.
- Apple: app distribution, and Apple Maps when you open directions. If you choose Google Maps or Google Calendar, Google's privacy policy applies.
We may also share information if the law requires it, or to protect the safety of our users.
5. Our legal reasons (UK GDPR)
- Contract: to provide the app and the features you use.
- Legitimate interests: to keep DriveBox safe, check instructors, prevent fraud and misuse, and improve the app.
- Consent: for sharing an instructor's live location ("On my way") and for optional photos. You can withdraw consent at any time in the app or your iPhone settings.
- Legal obligation: where we must keep certain records, for example about payments.
6. How long we keep it
We keep your information while your account is open. You can delete your account at any time in the app (Profile → Settings → Delete account). This permanently deletes your account, profile, photos, messages, diary, progress and other content. Payment records held by Stripe are kept by Stripe for as long as the law requires.
7. Your rights
Under UK data protection law you have the right to access, correct or delete your information, to object to or restrict how we use it, and to receive a copy of it. Email support@drivebox.uk and we'll respond within one month.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.
8. Security and storage
Information is sent over encrypted connections and protected by access controls so that people can only see what they're meant to. Some of our providers may process information outside the UK. Where they do, we rely on approved safeguards such as UK adequacy regulations or standard contractual clauses.
9. Children
DriveBox is designed for people who are learning to drive, or are already driving, and is not intended for children under 13. Learners under 18 may want to involve a parent or guardian when booking lessons and making payments.
10. Changes to this policy
We may update this policy from time to time. We'll change the date at the top, and tell you in the app if the changes are significant.