PassPraise
Home

Privacy Policy

Last updated 25 September 2026

Who we are

PassPraise (“PassPraise”, “we”, “us”) is a UK service that helps driving instructors ask every pupil who passes their test for a Google review. This policy explains what personal data we collect, why, and what rights you have over it. If you have any questions, email hello@passpraise.co.uk.

Data we collect

If you're an instructor with a PassPraise account: your name, email address, your Google review link, your review-message template, and billing details handled by Stripe (we don't store your card details ourselves).

If you're a pupil: your instructor adds your name, email address, and optionally a test date, so PassPraise can email you a review request once they mark you as passed. We only hold what your instructor enters — we don't collect anything from you directly unless you email us.

How we use it

  • To run your instructor account — signing you in, saving your settings, and showing your pupils list.
  • To send the review-request email (and any reminder) to a pupil once they're marked as passed.
  • To process subscription payments and manage your trial and billing status.
  • To keep the service secure and diagnose faults.

We never use pupil data for anything beyond sending the review request an instructor has triggered, and we never sell personal data to anyone.

Our legal basis

For instructor accounts, we process your data to perform our contract with you (UK GDPR Art. 6(1)(b)) — you can't use PassPraise without it.

For pupil data, your instructor is the data controller: they decide whose details to add and why, based on their existing relationship with their own pupil. PassPraise acts as their data processor, storing and using that data only to carry out the review request the instructor asks for. Sending that one email relies on the instructor's legitimate interest in asking a pupil they've just taught for feedback (Art. 6(1)(f)), which is why every review-request email includes a clear, one-line opt-out in line with UK PECR rules.

Every pupil, no gating

PassPraise is built so instructors ask every pupil who passes for a review, not a filtered selection of happy ones. We don't offer any way to screen pupils before the request goes out, because Google's review policies prohibit gating reviews this way. Instructors can personalise the wording of the request, but not who receives it.

Who we share data with

We use a small number of trusted providers to run the service, each only processing the data needed to do their job:

  • Supabase — hosts our database and handles magic-link sign-in.
  • Resend — sends the review-request and reminder emails on the instructor's behalf.
  • Stripe — processes subscription payments and manages billing.

These providers may process data on servers outside the UK (for example, in the EU or US). Where that happens, they do so under appropriate safeguards such as the UK International Data Transfer Addendum or an adequacy decision. We don't share data with anyone else, and we don't run advertising or tracking cookies.

How long we keep it

We keep instructor and pupil data for as long as the instructor's account is active. If an account is closed, we delete the associated pupil and instructor data within 30 days, except where we're required to keep billing records for longer to meet UK tax and accounting law.

Security

Data is encrypted in transit (HTTPS/TLS) and stored in Supabase with row-level security, so an instructor's account can only ever read their own pupils' data. Access to production systems is limited to what's needed to run the service.

Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Have inaccurate data corrected.
  • Ask us to delete your data, or restrict how we use it.
  • Object to how we're using your data.
  • Receive your data in a portable format.

If you're a pupil and want a review request stopped or your details removed, replying “STOP” to the email works, or you can email hello@passpraise.co.uk and we'll pass it on and remove your details. Instructors can manage or delete pupil records directly from their dashboard at any time.

To exercise any of these rights, email hello@passpraise.co.uk. If you're not happy with how we've handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.

Cookies and local storage

We use an essential cookie set by Supabase to keep you signed in, and your browser's local storage to remember your light/dark theme choice. We don't use any advertising or analytics cookies.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page. Significant changes will be flagged in the app.

Privacy·Terms