Privacy notice
What Doovor holds about you, why we hold it, where it is kept and what you can ask us to do with it.
Last changed 26 October 2026. Not yet checked by a solicitor.
Who is responsible
Doovor is run by Maxterz LTD, registered in England and Wales, company number 16822859. Registered office: 128 City Road, London, United Kingdom, EC1V 2NX. It is registered with the Information Commissioner's Office under reference ZC165156, and questions about your data go to support@doovor.com. Two different things happen on Doovor, and who is responsible differs between them.
- When a driving instructor or a school uses the app to run their own business, they decide what they keep about their learners. They are the controller of that, and we hold it for them as their processor.
- When somebody searches for lessons, looks at a public profile or creates an account, we decide what we keep. We are the controller of that.
- When somebody asks a driving school for lessons, the school decides what happens to what they told it. If it passes them to an instructor who works with it and runs their own business, that instructor decides what they keep from then on. We hold it for each of them.
For the solicitor
Please confirm the controller and processor split above, and say whether a representative or data protection officer must be named. Please also say whether a school and the instructors it works with need a data sharing agreement for the pupils it passes on.
What we hold
| Your account | Name, email address, mobile number, password (stored only as a hash), the dates you signed in, and an account number of our own so we can find you without using your name. |
|---|---|
| Instructors and schools | Business name, the area you cover, your working hours, your prices, your car, the languages you teach in, and your ADI or PDI badge number and its expiry date. |
| An instructor’s books | If you keep your books with us: what you spent and what it was for, a photograph of the receipt where you add one, the cars you teach in and how each one is claimed, the miles you drove for work, and whether you are registered for VAT along with your VAT number. These are your business records rather than anything about a learner. Only you can see them, and nobody at a school you teach for can. Working them into a tax figure is ours to get right and your accountant’s to check, and we never file anything on your behalf. |
| Learners | Who teaches you, your lessons, what you have paid, your progress against the DVSA syllabus, and your date of birth where a Business asks for it so it knows whether you are under 18. You are also asked which gearbox you want to learn in and whether you have passed the theory test, so your instructor can plan around both. Answering is your choice and you can change either whenever you like. |
| Your health, if you tell us | You can tell us about a disability, health condition or learning difficulty, and about medication that could affect your driving, so your instructor can plan lessons that suit you and knows what to watch for. We ask about medication only where it could affect your driving, and nothing else about your health. This is health information, which the law treats as special, and we hold it only because you chose to tell us. Answering is your choice: you can skip either question, change your answer, or take it off your record at any time from About you in your account. We keep it apart from the rest of your details, in a table only you can write to, and only the instructor who teaches you and the people who run the school you learn with can read it. It is never used to decide whether you can learn with us, and it is never sold or shared. |
| Where your lessons start | The addresses you are collected from, with their postcode, and a point on the map for each one. The point comes from the middle of the postcode unless you drag the pin to the door yourself. You can add, change and remove these whenever you like, and pick which one a lesson uses. Your instructor and the school you learn with see them, because that is how they know where to be. A place your school added stays theirs, and one you added stays yours. |
| Lessons and money | Bookings, cancellations, payments, refunds, receipts and credit. Card numbers are never sent to us: the card fields belong to Stripe and the card goes straight to them. |
| Pictures | A profile photograph if you add one, and a picture of a badge or a licence while it is being checked. |
| Notes | An instructor can write private notes about a learner. Those are theirs, and no learner sees them. |
| What the app did | An audit trail of the things that matter: who signed in, who changed a role, who saw a learner, who took a payment, and where a lesson was changed. |
| Asking us to close your account | If you ask us to close your account we record that you asked, when, and the reason you gave, so we can deal with it and so you can change your mind before it happens. |
| A photograph of the day you passed | If your instructor puts your pass photo on their public profile, we hold the picture, your first name, the date you passed and who taught you. It is on a page anybody can read. Your instructor has to confirm they asked you first, and we record that they said so and when. It is not a review and nothing is scored: it is a photograph. Ask your instructor to take it down and they can, at any time, and so can we if you ask us instead. |
| Anything you tell us about the product | If you send us feedback, we hold what you wrote, the screen you were on, and a screenshot if you chose to attach one. A screenshot shows whatever was on your screen at the time, so it may hold somebody else’s name: only the people who run the platform read these. |
| Asking a school about lessons | If you ask a driving school for lessons on its page, or it takes your details on the phone, we hold your name, your email address or mobile number, your postcode, the gearbox you want and when suits you, with the words you agreed to and when. The school may offer you to instructors who work with it. Until one of them takes you on, they see your first name, the first half of your postcode, the gearbox and when suits, and nothing they could contact you with. |
| Instructors who work with a school | Some instructors run a business of their own and work with a school that sends them pupils. We record that they work together, the fee the school charges and each one as it falls due, the most the school asks them to charge, and which pupils the school introduced. The school sees when they are busy, but not who with. |
| What a school pays its instructors | A school can record what it pays the instructors who teach under it, by the hour or as a share of each lesson, and the app works out each week from the lessons they taught. The instructor sees their own, and so do the people at the school allowed to see its money. |
| Moving with your instructor | If your instructor joins a school, or stops working with the school that introduced you, we ask whether you want to move, and keep your answer. Nothing moves until you choose. |
| How you found us | Every Business has a referral code. If a Business joined through somebody else’s code we record which code, so the reward can be applied. It says one Business introduced another and nothing else. |
| Booking a call with us | If you book a free onboarding call on our page for instructors, Calendly takes your name, your email address, your mobile number and the time you chose, and passes them to us. We use them to ring you at that time and help you set up, and for nothing else. |
Why we hold it
- To run the service you asked for: your diary, your bookings, your payments and your progress. That is our contract with you.
- To keep the service safe and working: sign in, rate limits, the audit trail, and finding out what went wrong when something breaks. That is our legitimate interest, and yours.
- To meet the law: financial records for HMRC, and the checks that say an instructor is who they say they are.
- To count how the product is used, but only once you have said yes to it. Nothing is counted before that.
- Anything you tell us about your health is held only because you chose to tell us, and for no other reason. Take it back and we stop holding it.
- To pass your details from a school to an instructor who works with it, because you asked the school for lessons and agreed to it, in the words we keep with what you asked.
- To ring you about an onboarding call you booked and help you set up, because you asked us to.
For the solicitor
Please confirm the lawful basis for each row, and the wording for the legitimate interests assessment.
Where it is kept
The database, the files and the accounts are held in London, and the app itself runs in London. We keep encrypted backups of the database ourselves, in the United Kingdom. Errors and usage go to services in the European Union. Some of the companies below work outside the United Kingdom: Stripe, Resend, Mapbox, Inngest and Calendly may process what they handle outside the United Kingdom. If you sign in with Google, Google handles that sign in. Text messages are sent through Twilio's Ireland region, so the number a code goes to stays in the European Union.
Our page for instructors has a setup video from YouTube. Nothing is loaded from YouTube until you press play. Once you do, the video comes from YouTube, and Google, which runs YouTube, decides what it records about that under its own privacy policy.
| Supabase | The database, sign in, and the files people upload. London. |
|---|---|
| Vercel | Runs the app itself. London. |
| Stripe | Card payments and payouts. Stripe holds the card details; we never see them. |
| Resend | Sends email. |
| Twilio | Sends text messages, including sign in codes. Ireland. |
| Mapbox | Draws the maps of the area an instructor covers. |
| PostHog | Counts how the product is used, once you have agreed. European Union. |
| Sentry | Records errors so we can fix them. Reports reach it through our own server, so it never sees your address. European Union. |
| Inngest | Runs the jobs behind reminders and receipts. |
| Calendly | Books the free onboarding call on our page for instructors, and holds the name, email address, number and time of each call booked. |
For the solicitor
Please check this list against the processing agreements in place, add any transfer wording needed where a company is outside the United Kingdom, and say whether the list belongs here or in a separate register. Please also confirm the wording for the setup video, which YouTube plays only once somebody presses play, and whether YouTube belongs in this list as well.
How long we keep it
- Your account and what is in it: while your account is open.
- Financial records: six years, because HMRC requires it. When an account is deleted these are kept but the person behind them is removed.
- An instructor’s own books, and the receipts photographed into them: six years for the same reason, and they go with the Business if it is closed.
- The audit trail: two years.
- Backups of the database: five weeks, encrypted, then deleted, so a deleted account has left every backup five weeks later.
- Pictures of a badge or a licence: removed once the check is done.
- What you told us about your health: for as long as you choose to leave it there. It is yours to take off your record at any moment, and it goes when your account does.
- Where your lessons start: while your account is open, and they are yours to remove sooner.
- A request to close your account: until the account is closed or you change your mind.
- A pass photograph: while it is on the profile. It goes when it is taken down, when the instructor’s account is closed, or when you ask, and the file itself is removed within a day.
- Feedback you send us, and any screenshot with it: two years, the same as the audit trail.
- Asking a school about lessons: a year after the school closes it or an instructor takes you on, or a year after it was last touched if it is still waiting. Once an instructor takes you on, you are their learner and the rest of this notice applies.
- Fees between a school and the instructors who work with it, and what a school pays its instructors: with the rest of each business’s records.
- An onboarding call you booked: until a year after the call.
For the solicitor
Please confirm each period, and whether anything else must be kept for a set time, including the fees between a school and the instructors who work with it, the pay records a school keeps, and how long a booked onboarding call is kept in Calendly.
Who can see it, and why
Not everybody who works on Doovor can see everything, and nobody browses for the sake of it. This is what each person can reach.
| Your instructor | The learners they teach, and for each one: the lessons, what is paid and owed, where lessons start, progress against the syllabus, and anything you chose to tell them about your health. They cannot see a learner who is not theirs, and they cannot see another instructor’s learners even at the same school. |
|---|---|
| The people who run a school | Everything above, for the learners of the instructors who teach for that school, because they are responsible for the teaching. An owner sees the school’s money; a manager does not see payouts or billing. |
| A school an instructor works with | The instructor’s name, when they are busy but not who with, the fees between them, and the pupils it introduced to them. Not the instructor’s other learners, their lessons or their money. |
| Other learners | Nothing. A learner sees their own lessons, their own money and their own progress, and the public part of an instructor’s profile. |
| The people who run the platform | Accounts, Businesses and the state of things: who signed up, whether a badge was approved, whether a payment succeeded, and what the audit trail says. They do not read private notes, and they do not read what you told us about your health. |
| Support looking through your eyes | To help with a problem, platform staff can open the app as you and read what you would read, without being able to change anything. A banner says it is happening, and every time it starts it is written to the audit trail with who did it and when. |
The database enforces this rather than the screens: every table carries the rule about who may read each row, so an answer that should not be given is not given, whatever asks for it.
For the solicitor
Please confirm this is the right level of detail here, and whether the support access described in the last row needs its own wording about the lawful basis and the record kept.
What you can ask for
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to what we do with it. Everything about you can be downloaded from your account, and your account can be deleted from the same screen. Where a Business is the controller, ask them first and we will help them answer.
If you are not happy with how we have answered, you can complain to the Information Commissioner at ico.org.uk.
Children
A learner may be 17, and may be 16 if they are learning on a moped or in a vehicle their licence allows. Nobody younger than that may hold an account. Where a learner is under 18, a Business may record a parent or guardian to contact, and the learner is shown as under 18 to the instructor teaching them.
For the solicitor
Please confirm the minimum age, and what consent is needed from a parent or guardian.