Privacy Policy
Last updated: 2 October 2026
PassPath AU is a study companion for Australian learner and driver licence tests. This policy explains what PassPath AU stores about you, where, and for how long.
Who we are
PassPath AU is made by Ufuk Karakuş in Ireland, who is the data controller. Contact: karakusufuk@gmail.com.
Kept on your phone only
Your name and photo on the profile card, your state or territory, age group, licence stage, language, test date, checklist ticks, answers and statistics are stored only on your device. We never receive them. Deleting the app removes them.
Practice-question notifications and the home-screen widget are prepared by your phone itself. Nothing about them is sent to a server.
Your account (optional)
You only need an account to use Community. You can sign in with Apple, Google or Facebook. We then receive and store, through Google Firebase Authentication:
- an account ID created by Firebase,
- the name and email address that Apple, Google or Facebook shares with us (with Apple you may hide your email),
- which sign-in method you used, and when you signed up and last signed in.
We do not receive your password, your contacts or your friends list, and we do not post anything to Facebook.
Community
When you post or comment, we store the text, the display name you choose, the channel and the time. Other signed-in PassPath AU users can read it. If you report a post, we store the report and the reason so we can review it. Your block list is stored with your account and is visible only to you.
Purchases
Subscriptions are handled by Apple or Google. We never see your card details. The app asks Apple or Google whether your subscription is active.
No ads, no tracking
PassPath AU shows no ads, uses no advertising, analytics or tracking tools, and never sells or shares your data for marketing.
What we use your data for, and on what legal basis
We use personal data only for these purposes. The legal bases are those of the EU General Data Protection Regulation (GDPR), which applies because PassPath AU is made in Ireland.
| Data | Purpose | Legal basis |
|---|---|---|
| Account (ID, name, email, sign-in method) | Signing you in and running Community | Our contract with you (Art. 6(1)(b)) |
| Posts, comments, display name | Showing them to other PassPath AU users | Our contract with you (Art. 6(1)(b)) |
| Reports, block list, suspension records | Keeping Community safe, reviewing reports, preventing abuse | Legitimate interests in a safe service (Art. 6(1)(f)) |
| Subscription status | Giving you the access you paid for | Our contract with you (Art. 6(1)(b)) |
| Emails you send us | Answering you | Legitimate interests (Art. 6(1)(f)) |
We do not use your data for any other purpose. Giving us personal data is not a legal or contractual requirement: without an account you can use everything except Community. We make no automated decisions and do no profiling.
Who receives your data
We share personal data only with these service providers, and only with ones that provide the same or equal protection of your data as described in this policy:
- Google (Firebase Authentication and Cloud Firestore) — stores your account and Community data as our processor under its data processing terms;
- Apple, Google or Facebook — only if you sign in with them; they confirm who you are and share your name and email with us;
- Apple or Google — handle your subscription payment.
Other signed-in PassPath AU users see what you post in Community. We never sell personal data.
Where the data is stored
Community posts, comments and reports are stored in Google Cloud Firestore in the European Union (eur3 multi-region: Belgium and the Netherlands). Your sign-in account (account ID, name, email) is kept by Google Firebase Authentication, which Google runs from the United States; that transfer is covered by the EU–US Data Privacy Framework and the EU Standard Contractual Clauses. Google acts as our processor under its data processing terms. Data is encrypted in transit and at rest. Your personal information is therefore disclosed overseas, to the European Union (Belgium and the Netherlands) and the United States. We take reasonable steps so that it is handled in line with the Australian Privacy Principles.
How long we keep it
| Data | Kept |
|---|---|
| Account | Until you delete it |
| Posts and comments | Until you delete them or your account, or we remove them for breaking the Community rules |
| Reports | Until reviewed, at most 6 months |
| Suspension record (account ID only) | Only while the suspension applies — kept for security and abuse prevention, so a suspended account cannot simply be reopened |
Deleting your account
In the app: Profile → Settings → Account → Delete account. This deletes your account and everything stored with it — posts, comments, reports and block list — straight away. You can also ask by email; see Delete your account.
Your rights
You can ask to access, correct, delete or export (portability) any data we hold about you, to restrict its use, to object to use based on our legitimate interests, and to withdraw any consent at any time without affecting earlier use. Write to karakusufuk@gmail.com; we answer within one month. You can complain to the Irish Data Protection Commission (dataprotection.ie). If you live in Australia you can also complain to the Office of the Australian Information Commissioner (OAIC, oaic.gov.au) under the Privacy Act 1988.
Complaints
If you think we have mishandled your personal information, email karakusufuk@gmail.com with the details. We confirm receipt within 7 days, look into it and give you a written answer within 30 days. If you are not satisfied with our answer, you can take the complaint to the OAIC or to the Irish Data Protection Commission.
Children
PassPath AU is not directed at children under 16. You need to be at least 16 to create an account.