Privacy Policy
Last updated: 2 October 2026
PassPath UAE is a study companion for the UAE driving licence theory test, starting with Dubai’s RTA Knowledge Test. This policy explains what PassPath UAE stores about you, where, and for how long.
Who we are
PassPath UAE is made by Ufuk Karakuş in Ireland, who is the data controller. Contact: karakusufuk@gmail.com.
Kept on your phone only
Your name and photo on the profile card, your age group, licence stage, language, test date, checklist ticks, answers and statistics are stored only on your device. We never receive them. Deleting the app removes them.
Practice-question notifications and the home-screen widget are prepared by your phone itself. Nothing about them is sent to a server.
Your account (optional)
You only need an account to use Community. You can sign in with Apple, Google or Facebook. We then receive and store, through Google Firebase Authentication:
- an account ID created by Firebase,
- the name and email address that Apple, Google or Facebook shares with us (with Apple you may hide your email),
- which sign-in method you used, and when you signed up and last signed in.
We do not receive your password, your contacts or your friends list, and we do not post anything to Facebook.
Community
When you post or comment, we store the text, the display name you choose, the channel and the time. Other signed-in PassPath UAE users can read it. If you report a post, we store the report and the reason so we can review it. Your block list is stored with your account and is visible only to you.
Purchases
Subscriptions are handled by Apple or Google. We never see your card details. The app asks Apple or Google whether your subscription is active.
No ads, no tracking
PassPath UAE shows no ads, uses no advertising, analytics or tracking tools, and never sells or shares your data for marketing.
What we use your data for, and on what legal basis
We use personal data only for these purposes. The legal bases are those of the EU General Data Protection Regulation (GDPR), which applies because PassPath UAE is made in Ireland.
| Data | Purpose | Legal basis |
|---|---|---|
| Account (ID, name, email, sign-in method) | Signing you in and running Community | Our contract with you (Art. 6(1)(b)) |
| Posts, comments, display name | Showing them to other PassPath UAE users | Our contract with you (Art. 6(1)(b)) |
| Reports, block list, suspension records | Keeping Community safe, reviewing reports, preventing abuse | Legitimate interests in a safe service (Art. 6(1)(f)) |
| Subscription status | Giving you the access you paid for | Our contract with you (Art. 6(1)(b)) |
| Emails you send us | Answering you | Legitimate interests (Art. 6(1)(f)) |
We do not use your data for any other purpose. Giving us personal data is not a legal or contractual requirement: without an account you can use everything except Community. We make no automated decisions and do no profiling.
Who receives your data
We share personal data only with these service providers, and only with ones that provide the same or equal protection of your data as described in this policy:
- Google (Firebase Authentication and Cloud Firestore) — stores your account and Community data as our processor under its data processing terms;
- Apple, Google or Facebook — only if you sign in with them; they confirm who you are and share your name and email with us;
- Apple or Google — handle your subscription payment.
Other signed-in PassPath UAE users see what you post in Community. We never sell personal data.
Where the data is stored
Community posts, comments and reports are stored in Google Cloud Firestore in the European Union (eur3 multi-region: Belgium and the Netherlands). Your sign-in account (account ID, name, email) is kept by Google Firebase Authentication, which Google runs from the United States; that transfer is covered by the EU–US Data Privacy Framework and the EU Standard Contractual Clauses. Google acts as our processor under its data processing terms. Data is encrypted in transit and at rest.
How long we keep it
| Data | Kept |
|---|---|
| Account | Until you delete it |
| Posts and comments | Until you delete them or your account, or we remove them for breaking the Community rules |
| Reports | Until reviewed, at most 6 months |
| Suspension record (account ID only) | Only while the suspension applies — kept for security and abuse prevention, so a suspended account cannot simply be reopened |
Deleting your account
In the app: Profile → Settings → Account → Delete account. This deletes your account and everything stored with it — posts, comments, reports and block list — straight away. You can also ask by email; see Delete your account.
Your rights
You can ask to access, correct, delete or export (portability) any data we hold about you, to restrict its use, to object to use based on our legitimate interests, and to withdraw any consent at any time without affecting earlier use. Write to karakusufuk@gmail.com; we answer within one month. You can complain to the Irish Data Protection Commission (dataprotection.ie). If you live in the UAE you also have rights under the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, PDPL) and can contact the UAE Data Office.
Users in the UAE
If you live in the United Arab Emirates, the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) may also apply. Your data is processed outside the UAE: in the European Union (Belgium and the Netherlands), under the GDPR, and your sign-in account in the United States by Google LLC under its data processing terms and the EU Standard Contractual Clauses, which require the same level of protection as described in this policy. You have the rights described above.
Children
PassPath UAE is not directed at children under 16. You need to be at least 16 to create an account.