Home

Privacy Policy

Theory Test app by Gandora Labs · Last updated: 13 October 2026

Who we are

The Theory Test app for iOS and Android ("the app") is made by Gandora Labs ("we", "us"). We are the controller of the personal data described in this policy. If you have any questions or requests about your data, email us at theorytest.privacy@gandoralabs.com.

Data stored only on your device

The app saves the following on your device so it can work offline and remember where you are:

• your answers, practice progress, mock test results and bookmarked questions;
• your settings, such as test type, test location, theory test date, read-aloud voice and speed, text size and appearance.

This data is not sent to us. You can erase it at any time with Settings → Reset progress, or by uninstalling the app. Your device's own backup service (for example iCloud or Google backup) may include app data, depending on your device settings.

Analytics (Google Firebase Analytics)

We use Firebase Analytics, provided by Google, to understand how the app is used so we can improve it. It collects:

• which screens you view and how long you use the app;
• in-app events, for example sending feedback (including the topic and whether it was sent anonymously), responding to the review prompt, and seeing or tapping app update prompts;
• an app instance identifier generated by Firebase;
• device and app details: device model, operating system version, app version, language and screen size;
• your approximate location (country or region), worked out from your IP address. We do not collect your precise location;
• the device's advertising ID, if your device settings and consent choices allow it. On iOS the advertising identifier (IDFA) is only available if you allow tracking in Apple's prompt.

Analytics data is not linked to your name or email address. Google keeps this data for up to 14 months. We rely on our legitimate interests in understanding and improving the app.

Crash reports (Google Firebase Crashlytics)

If the app crashes or hits an error, Firebase Crashlytics sends us a report so we can fix the problem. A report includes technical details of the error, the device model, operating system version, app version, the state of the device at the time (such as free memory, storage and orientation) and a Crashlytics installation identifier. Crashlytics keeps crash reports for 90 days. We rely on our legitimate interests in keeping the app working reliably.

Advertising (Google AdMob)

The app shows adverts provided by Google AdMob, for example a short rewarded video you can choose to watch to continue practising. Adverts are personalised only where you consent through Google's consent message, which the app shows where the law requires it (for example in the UK and EEA). On iOS, adverts are only personalised if you also allow tracking in Apple's App Tracking Transparency prompt. If you decline, Google serves non-personalised or limited adverts instead — you can still use the app.

To show and measure adverts, Google may process:

• your device's advertising ID (IDFA on iOS, only with your permission);
• device and app details, and how you interact with adverts;
• your approximate location, worked out from your IP address.

We limit adverts to family-friendly content (a "G" content rating, with sensitive categories blocked in our AdMob settings). You can change your consent choice at any time in Settings → Privacy options (shown where the consent message applies) and in your device's advert settings. For how Google uses this data, see How Google uses information from sites or apps that use our services.

In-app purchases

The app offers a one-off "Remove ads" purchase, processed entirely by Apple (App Store) or Google (Google Play) under their own privacy policies and terms. We never see your payment details. The app stores only a flag on your device that adverts have been removed, so it can stop showing them — including after you reinstall and restore your purchase.

Feedback and support

When you use Contact us, or tell us why you're not enjoying the app after the review prompt, we receive:

• your message and the topic or reasons you chose;
• your email address, only if you turn off "Send anonymously" and enter it, so we can reply;
• the app version and build number, platform (iOS or Android), operating system version, device model and the test you are studying for.

We do not send any device identifiers with feedback. Your feedback is sent securely (HTTPS) through our server on Cloudflare to Featurebase, the service we use to read and manage feedback. Our server uses your IP address to deliver the request and to limit each IP address to 10 messages a day. It stores only a daily count, which is deleted every day at midnight (UTC). Cloudflare may keep short-lived technical logs of requests to help us diagnose problems.

We keep feedback for as long as we need it to deal with your message and improve the app. You can ask us to delete it at any time. We rely on our legitimate interests in responding to you and improving the app.

Other features

App store reviews

The app may ask you to rate it using Apple's or Google's built-in review prompt. Reviews are handled by Apple or Google under their own privacy policies. We do not see who left a review through the prompt.

Read aloud

Read aloud uses your device's built-in text-to-speech voices. The app does not use your microphone, and nothing you hear is sent to us.

Sharing the app

Share the app opens your device's share sheet. We do not see who you share with or what you send.

Who we share data with

We use these service providers, who process data on our behalf:

We do not sell your personal data. Google (including AdMob) and the app stores may act as independent controllers for the data they process under their own privacy policies.

We may also disclose data if the law requires us to.

International transfers

Our providers may process data outside the UK, for example in the United States. Where they do, the transfer is protected by appropriate safeguards, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework.

Children

The app is designed for people preparing for their driving theory test. It is not aimed at children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has sent us personal data, please contact us and we will delete it.

Your rights

Under UK data protection law (UK GDPR) you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how we use your data;
• receive your data in a portable format.

To use any of these rights, email theorytest.privacy@gandoralabs.com. Because the app has no accounts, we may need details from you (for example the email address you used, or roughly when you sent feedback) to find your data. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Security

Data sent from the app to our providers is encrypted in transit using HTTPS. We collect only what we need, and we limit who can access it.

Changes to this policy

We may update this policy, for example when we add new features. The date at the top shows when it last changed, and significant changes will be clearly described on this page.

Contact us

Gandora Labs
Email: theorytest.privacy@gandoralabs.com