Privacy Policy

Who we are

PassPraise (“PassPraise”, “we”, “us”) is a UK service that helps driving instructors ask every pupil who passes their test for a Google review. This policy explains what personal data we collect, why, and what rights you have over it. If you have any questions, email hello@passpraise.co.uk.

Data we collect

If you're an instructor with a PassPraise account: your name, email address, your Google review link, and billing details handled by Stripe (we don't store your card details ourselves).

If you're a pupil: your instructor adds your name, email address, and optionally a test date, so PassPraise can email you a review request once they mark you as passed. We only hold what your instructor enters — we don't collect anything from you directly unless you email us.

How we use it

• To run your instructor account — signing you in, saving your settings, and showing your pupils list.
• To send the review-request email (and any reminder) to a pupil once they're marked as passed.
• To process subscription payments and manage your trial and billing status.
• To keep the service secure and diagnose faults.

We never use pupil data for anything beyond sending the review request an instructor has triggered, and we never sell personal data to anyone.

Our legal basis

For instructor accounts, we process your data to perform our contract with you (UK GDPR Art. 6(1)(b)) — you can't use PassPraise without it.

For pupil data, your instructor is the data controller: they decide whose details to add and why, based on their existing relationship with their own pupil. PassPraise acts as their data processor, storing and using that data only to carry out the review request the instructor asks for. Sending that one email relies on the instructor's legitimate interest in asking a pupil they've just taught for feedback (Art. 6(1)(f)), which is why every review-request email includes a clear, one-line opt-out in line with UK PECR rules.

Every pupil, no gating

PassPraise is built so instructors ask every pupil who passes for a review, not a filtered selection of happy ones. We don't offer any way to screen pupils before the request goes out, because Google's review policies prohibit gating reviews this way. Every pupil receives the same standard, fixed review-request email: instructors can't edit its wording, and only provide their name and Google review link.

Sub-processors (who we share data with)

We use a small number of third-party services to run PassPraise. Each one only processes the data it needs to do its job:

• Supabase — hosts our database (instructor and pupil records) and handles email-code sign-in.
• Resend — sends the review-request and reminder emails on the instructor's behalf.
• Stripe — processes subscription payments and manages billing.
• Vercel — hosts the PassPraise website and app.
• Cloudflare — runs our domain's DNS and routes email sent to our addresses (such as hello@passpraise.co.uk).

These providers may process data on servers outside the UK (for example, in the EU or US). Where that happens, they do so under appropriate safeguards such as the UK International Data Transfer Addendum or an adequacy decision. We don't share data with anyone else, and we don't run advertising or tracking cookies.

How long we keep it

We keep instructor and pupil data for as long as the instructor's account is active. If an account is closed, we delete the associated pupil and instructor data within 30 days, except where we're required to keep billing records for longer to meet UK tax and accounting law.

Security

Data is encrypted in transit (HTTPS/TLS) and stored in Supabase with row-level security, so an instructor's account can only ever read their own pupils' data. Access to production systems is limited to what's needed to run the service.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Ask us to delete your data, or restrict how we use it.
• Object to how we're using your data.
• Receive your data in a portable format.

If you're a pupil and want review requests stopped, use the “Unsubscribe” link at the bottom of any of our emails — that instructor won't be able to email you through PassPraise again. You can also contact us directly at hello@passpraise.co.uk: we'll stop emailing you straight away, delete your details from PassPraise on request, and let your instructor know. We keep a record of your email address against that instructor only so we can make sure you're not contacted again. Your instructor remains responsible for any information they hold about you outside PassPraise, so for those records please contact them directly. Instructors can also manage or delete pupil records from their dashboard at any time.

To exercise any of these rights, email hello@passpraise.co.uk. If you're not happy with how we've handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.

Cookies and local storage

We use an essential cookie set by Supabase to keep you signed in, and your browser's local storage to remember your light/dark theme choice. We don't use any advertising or analytics cookies.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page. Significant changes will be flagged in the app.