Privacy Policy

Last updated: October 8, 2026

This Privacy Policy explains what personal data Drv.ge collects, why we collect it, who we share it with, how long we keep it and what rights you have. It applies to the drv.ge website, the learning app at learn.drv.ge, the Drv.ge Android app and the DRV.GE plugin that lets ChatGPT and other AI assistants use our server at https://learn.drv.ge/mcp (together, "Drv.ge" or "the Service").

1. Who we are

Drv.ge is operated by Individual Entrepreneur Alexey Ivanov (registration number 306421592), Georgia, Tbilisi, Samgori district, Police Lane I, N5, floor N2, N4a ("we", "us"). We decide how your personal data is used and are responsible for it. You can reach us at support@drv.ge.

2. Data we collect

  • Account data: your email address and name; your password if you register with email (stored only as a one-way hash, so we cannot read it); your interface language, theme and, if you enter it, your exam date.
  • Sign-in data from Google: if you sign in with Google, the data described in section 3.
  • Learning data: the tests and exams you take, your answers and scores, your progress, the questions you got wrong or saved for review, and how many questions you have answered today (used for the daily free limit).
  • Content you send us: comments you post on questions and emails you send to our support address.
  • Payment data: the amount, currency, order number and status of your payments. For card payments made through Flitt we also receive the masked card number (only a few digits are visible). You enter your card details on the payment provider's page; we never receive or store your full card number or security code.
  • Technical and usage data: your IP address (including the IP address of your last sign-in), browser and device type, operating system, the pages you open, actions you take in the Service (for example, starting a test or buying a subscription) and technical details of errors.
  • Guest exam data: if you try an exam without an account, we store your answers under a random identifier kept in a cookie in your browser. If you then register, the results are moved to your new account.
  • Push notification data: if you allow notifications in your browser, the subscription address your browser gives us so that we can send you reminders.
  • AI assistant data: if you use Drv.ge in ChatGPT or another AI assistant, the data described in section 4.

Sign in with Facebook was discontinued on July 1, 2026. For accounts that used it before that date we keep the Facebook user ID linked to the account until the account is deleted; we no longer receive any data from Facebook.

3. Google user data

You can create a Drv.ge account and sign in with your Google account, on the website and in the Android app. This section explains exactly what we receive from Google and what we do with it.

What we access

We request only Google's basic sign-in permissions: openid, email and profile. With your permission, Google shares with us:

  • your Google account email address;
  • your name;
  • your Google account ID (a number that identifies your Google account).

Google also includes a link to your profile picture, which we do not store or use. We do not request access to Gmail, Google Drive, Contacts, Calendar or any other Google service. We never see your Google password, and we do not keep Google access or refresh tokens, so we cannot act on your Google account.

How we use it

  • Email address: to create your Drv.ge account, to recognise you when you sign in, and to send you service emails: the welcome email, sign-in and password reset links, notifications of replies to your comments and answers to your support requests.
  • Name: to address you in the Service and in our emails.
  • Google account ID: to link your Google account to your Drv.ge account, so that the next Google sign-in opens the same account.

We do not sell Google user data. We do not use it for advertising, and we do not use it to develop, improve or train artificial intelligence or machine learning models. We do not give it to data brokers or use it to decide on credit. Nobody reads it except when you ask us for help, when it is needed for security (for example, investigating abuse), or when the law requires it.

How we store and share it

Your email address, name and Google account ID are stored in our database on Fly.io servers. We share them only with the service providers that run parts of the Service for us, and only for the purposes in section 7:

  • Resend receives your email address to deliver our emails;
  • Sentry receives your email address with error reports, if an error happens while you are signed in;
  • Mixpanel receives your name as part of your product analytics profile;
  • Dodo Payments receives your name and email address when you pay through Dodo Payments.

Limited Use

Drv.ge's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

We keep your Google user data for as long as your Drv.ge account exists. You can delete your account at any time in your profile with the "Delete my account" button, on the website or in the app. This immediately removes your email address, name and Google account ID from our database, together with the rest of your account data (see section 9 for the few records that are kept after deletion). You can also email support@drv.ge from the address you signed in with to ask us to delete it.

You can remove Drv.ge's access to your Google account at any time on the Third-party apps & services page of your Google Account. This stops Google from sharing your data with us in future; to delete the data we already hold, delete your Drv.ge account as described above.

4. Drv.ge in ChatGPT and other AI assistants

The DRV.GE plugin lets an AI assistant, such as ChatGPT, use our server at https://learn.drv.ge/mcp to show you practice questions with their pictures, check your answers and look things up in our guides. You do not need a Drv.ge account. The assistant does not send us your name, your email address or the text of your conversation.

What we receive

  • Your request: which function the assistant calls and its inputs: the exam (licence category and language), the question, the answer option you chose or the language of a guide. These are numbers and language codes, not text from your conversation.
  • Metadata the assistant adds: ChatGPT sends an anonymised user identifier, an anonymised conversation identifier (and, for work accounts, an anonymised organisation identifier), your language setting and an approximate location (city, region, country, time zone and approximate coordinates). Other assistants may send less.
  • Technical data: the IP address and software name of the assistant's servers that send the request. They belong to the assistant's provider, not to you.
  • Pictures: when the assistant shows a question card with a picture, your device loads the picture from our servers. As with any web page, this sends your IP address and browser details to Cloudflare, Fly.io and Tigris.

What we keep and why

  • Usage statistics: for each request, Mixpanel records which function was used, the exam, question and language, the position in the practice round, the assistant (for example, ChatGPT) and the software name of its server, and your language setting, so that we can see how many people use the plugin and how. To tell people apart without knowing who they are, we record a keyed one-way hash of the anonymised user identifier (of the conversation identifier when there is none), never the identifier itself.
  • Rate limiting: to stop runaway or abusive use, we count requests for one minute, per keyed hash of the anonymised user identifier and per address of the server that sends them.
  • Server logs: the time of each request, the function and its inputs, and the IP address and software name of the server that sent it, so that we can keep the service working and investigate errors. The metadata the assistant adds, including your approximate location, is removed before anything is written to our logs or error reports. We do not use your location.

We do not link plugin use to a Drv.ge account, our answers to the assistant contain no information about you, and we do not use this data for advertising or to train artificial intelligence models.

Links to Drv.ge that the plugin shows carry tags saying they come from an AI assistant (for example, utm_source=mcp), and nothing that identifies you. If you open one, the rest of this policy applies to that visit, including the acquisition cookie described in section 6.

Who receives it

Cloudflare and Fly.io process every request, Mixpanel stores the usage statistics in the European Union, Datadog receives technical data about the requests, and Sentry receives technical details if an error happens. The assistant's provider (for example, OpenAI for ChatGPT) receives our answers and handles your conversation under its own privacy policy; it is not our service provider, and we share no other data with it.

How long we keep it, and your choices

Rate-limiting counts are kept for one minute, server logs until our hosting provider deletes them at the end of its retention period, and usage statistics until we delete them from Mixpanel. The plugin receives data only when you use it: you can disconnect or remove it at any time in your assistant's settings, and the assistant's own data controls apply to your conversation. Because these requests are not linked to your name, your email address or a Drv.ge account, we cannot tell which records are yours; if you have a question, write to support@drv.ge.

5. How we use your data

  • To provide the Service: your account, tests and exams, progress tracking, spaced review of mistakes and the daily free limit. We process this data to perform our agreement with you.
  • To handle payments and Pro access, and to keep the accounting records required by law.
  • To contact you: service emails, answers to your support requests and comments, and, only if you turned them on, practice reminders by push notification.
  • To understand and improve the Service: usage statistics that show which features and pages are used and where errors happen.
  • To keep the Service secure: error monitoring and preventing abuse.
  • To comply with the law.
  • To answer AI assistant requests and count how the plugin is used (see section 4).

We do not send newsletters or marketing emails, and we do not sell your personal data.

6. Cookies and similar technologies

  • Essential cookies keep you signed in, protect forms against forgery, remember you if you choose "Remember me" and link a guest exam to your browser. The Service cannot work without them.
  • Preference storage remembers choices such as your language and theme, and which sections you collapsed.
  • Analytics cookies: a device identifier (mp_device_id, kept for one year) that links your visits for our product analytics in Mixpanel, and Google Analytics, which counts visits and is loaded through Cloudflare Zaraz.
  • Acquisition cookie: acq_source, kept for 90 days, remembers which tagged link first brought your browser to Drv.ge, for example a link shown by an AI assistant. It holds only the link's source and campaign names (such as mcp/chatgpt), and we add it to the usage events we send to Mixpanel so that we can see which channels bring learners.

You can block or delete cookies in your browser settings. If you block essential cookies you will not be able to sign in.

7. Who we share data with

We use the following service providers. Each receives only the data it needs to do its job for us:

  • Fly.io hosts the application and its database on servers in Frankfurt, Germany. All account and learning data is stored there.
  • Tigris (through Fly.io) stores our files (such as question images) and backups of our database.
  • Cloudflare delivers the website and protects it against attacks. All traffic to Drv.ge, including your IP address, passes through Cloudflare.
  • Google Analytics (Google) receives the pages you view, your device and browser, and your approximate location (country or city). We do not send your name or email address to Google Analytics.
  • Mixpanel (product analytics, stored in the European Union) receives events about how you use the Service, your account number, device identifier, language and name, your email address when you delete your account, the source of the link that first brought you to Drv.ge (section 6) and the plugin usage statistics described in section 4.
  • Sentry (error tracking) receives technical details of errors, including your account number and email address if you were signed in. Passwords and other sensitive fields are removed before a report is sent.
  • Datadog (server monitoring, European Union) receives technical data about requests to our servers, which may include your IP address.
  • Resend delivers our emails and receives the emails you send to our support address.
  • Flitt processes card payments. You enter your card details on Flitt's payment page; Flitt tells us whether the payment succeeded.
  • Dodo Payments has processed some of our payments and receives your name and email address when you pay through it.
  • Browser push services (for example, Google for Chrome, Mozilla for Firefox and Apple for Safari) deliver push notifications if you turned them on. The notification content is encrypted so the push service cannot read it.
  • Google Play distributes the Android app and shows the optional in-app review prompt, under Google's own privacy policy.

When you use Drv.ge through an AI assistant, the assistant's provider handles your conversation under its own privacy policy (see section 4).

We may also disclose personal data when the law requires it (for example, to a court or a public authority) or when it is necessary to protect our rights or the safety of users. If the Service is sold or transferred to another operator, your data will be transferred with it, the new operator will be bound by this policy, and we will notify you before that happens.

Some of these providers process data outside Georgia, in particular in the European Union and the United States. We use providers that commit to protecting personal data in their data processing terms.

8. How we protect your data

  • All connections to Drv.ge are encrypted with HTTPS.
  • Passwords are stored only as salted one-way hashes.
  • Card details are entered on the payment provider's page and never reach our servers.
  • Access to our servers and database is limited to the people who operate the Service.
  • Passwords and other sensitive fields are removed from error reports before they are sent to our error tracking provider.

No method of transmission or storage is completely secure. If a security incident puts your data at risk, we will inform you and the supervisory authority as required by Georgian law.

9. How long we keep data

  • Account, learning and Google user data: as long as your account exists. When you delete your account, it is removed from our database immediately.
  • Payment records: kept after the account is deleted, together with the name and email address used for the payment, for as long as tax and accounting law requires.
  • Comments: comments you posted on questions stay visible under the name they were posted with, but are no longer linked to an account. Write to us if you want them removed.
  • After you delete your account: we keep a one-way hash of your email address (not the address itself), together with how much of your free trial and of that day's free questions you had used, for 30 days after the deletion, so that signing up again with the same address does not restart them. It is then deleted automatically.
  • Support emails: kept so that we can follow up on your request. Write to us if you want them deleted.
  • Backups: our database backups can still contain deleted data for a limited period, until they are overwritten.
  • Analytics and monitoring data: error reports, server logs and Google Analytics data are deleted automatically by those providers after their retention periods. The acquisition cookie expires after 90 days. Mixpanel data, including the plugin usage statistics, is kept until we delete it; write to us and we will delete your Mixpanel profile.

10. Your rights

Under the Law of Georgia on Personal Data Protection you have the right to:

  • know what data we hold about you and get a copy of it;
  • correct inaccurate data (you can change your name in your profile yourself);
  • have your data deleted (see section 3);
  • object to or ask us to restrict the processing of your data;
  • withdraw your consent at any time, for example by turning off push notifications;
  • file a complaint with the State Audit Office of Georgia, which has supervised personal data protection in Georgia since March 2, 2026.

To use any of these rights, email support@drv.ge from the address linked to your account. We will answer within the time limits set by law.

11. Children

Drv.ge is meant for people preparing for a driving theory exam. It is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child under 13 has given us personal data, contact us and we will delete it.

12. Changes to this policy

When we change this policy, we update the date at the top of this page. Before any significant change takes effect, in particular any change to how we use Google user data, we will notify you by email or in the Service.

13. Contact us

For any question about this policy or your personal data:

  • Email: support@drv.ge
  • Operator: Individual Entrepreneur Alexey Ivanov, registration number 306421592
  • Address: Georgia, Tbilisi, Samgori district, Police Lane I, N5, floor N2, N4a