Privacy policy

Teorio processes personal data so the app works (your account, your progress and your purchases), to improve it, and to measure which ads bring new users. On the website, ad measurement only happens if you accept cookies. We never sell your data.

1. Controller

Dalsten Group AB, company reg. no. 559542-6304, Slånbärsstigen 7, 861 38 Bergeforsen, Sweden. Email: info@teorio.shop, or use our contact form.

2. What we process

• Account: email address, name (if you sign in with Google or Apple) and a user ID. You can also use the app without an account; you then get an anonymous user ID.
• Progress and tests: chapters read, quiz and test results, chosen language and which driving-licence book you use. If you enter a test date, or tell us how the test went, we store that.
• Purchases: that you have Premium, when it expires, which product you bought and in which store. Card details are handled by Apple, Google or Stripe, never by us.
• Device key: a one-way encrypted (hashed) identifier for your device, so the same device cannot get the free trial more than once.
• Usage statistics: via Firebase Analytics, such as which features are used, app version, device type and approximate country.
• Ad measurement: see section 4.
• Emails from us: if you have an account with an email address, we may send reminders, for example if you have not practised for a while, before the test date you entered and about your free trial. Every email has a link to stop receiving them.
• Contact: what you write to us through the contact form or by email.

3. Purposes and legal bases

• Providing the service: account, sync between devices, Premium and tests. Contract.
• Preventing abuse of the free trial. Legitimate interest.
• Improving the app using usage statistics. Legitimate interest.
• Reminder emails. Legitimate interest; you can unsubscribe at any time.
• Ad measurement on the website (cookies, click ID, Meta pixel). Consent.
• Ad measurement in the app and reporting purchases to Meta (section 4). Legitimate interest — seeing which ads work. On iOS the advertising identifier is only used if you allow tracking.
• Replying when you contact us. Legitimate interest.
• Bookkeeping of purchases. Legal obligation.

4. Ad measurement

On the website. If you arrive at teorio.eu from an ad, the ad's campaign name is in the address and follows along as you click on. If you accept cookies, we store the campaign name and Meta's click ID in your browser and pass the click ID on to Google Play if you install the app from there. In the web app, the Meta pixel and Google Analytics cookies load only after you accept. If you decline, only your choice is stored.

In the app. The app uses Meta's SDK to record installs and app opens, so we can see which ads lead to installs. On Android the app reads the install referrer from Google Play (campaign and click ID). On iOS, RevenueCat retrieves Apple's ad attribution, which shows whether the install came from an App Store ad and, if so, which campaign and keyword. The app asks for tracking permission on iOS, and the advertising identifier (IDFA) is only used if you say yes.

Purchases. When you buy Premium, we tell Meta that a purchase happened: value and currency, your user ID and your email address in hashed form, and a click ID or advertising identifier if there is one. Meta does not receive your name or card details.

5. Cookies and browser storage

• teorio_cookies — your cookie choice. Necessary.
• teorio_utm, teorio_fbc — campaign and Meta click ID. Only after consent; the click ID is used for at most seven days.
• Meta pixel (_fbp, _fbc) and Google Analytics (_ga) in the web app. Only after consent.
• Sign-in in the web app (Firebase). Necessary to keep you signed in.

Fonts are served from our own server; nothing is loaded from Google Fonts.

6. Recipients

We use the following providers. They process data on our behalf or, in the case of Meta, Apple and Google, as controllers of their own services.

• Google (Firebase: sign-in, database, Analytics and server functions; Google Play) — EU/USA
• Meta Platforms — ad measurement — EU/USA
• RevenueCat — in-app purchases and Apple ad attribution — USA
• Stripe — payments on the website — EU/USA
• Apple — purchases and ad attribution in the App Store
• Resend — sending emails — USA
• Loopia — hosting of teorio.eu — Sweden

Transfers to the USA rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

7. How long we keep data

• Account and progress: as long as the account exists. If you delete your account, we remove the personal data within 30 days.
• Purchase records: seven years, under the Swedish Bookkeeping Act.
• Messages to us: as long as the matter requires.
• Contact form spam protection: a hashed IP address, deleted after two days.

8. Your rights

You have the right to access the data we hold about you, to have errors corrected, to erasure, to restrict processing, to receive your data in a machine-readable format, to object to processing based on legitimate interest, and to withdraw consent at any time. Contact us and we will help. You can also complain to the Swedish Authority for Privacy Protection (imy.se) or the data protection authority where you live.

9. Children

Teorio is for people learning to drive, normally from 15 years of age. We do not knowingly collect data from children under 13. If you are a parent or guardian and believe your child has registered, contact us and we will delete the account.

10. Security

All traffic is encrypted (HTTPS), and data is stored in Firebase with access control. Only authorised people have access to production data.

11. Changes

If we change this policy, we update the date at the top. For significant changes we will let you know in the app or by email.

Change your cookie choice

You can withdraw or change your choice at any time. Click here and everything stored for ad measurement is deleted, and the question is shown again.