TheoryXP Privacy at a Glance

Version: V1.1
Updated: 15 September 2026

TheoryXP Limited uses a limited amount of account, technical and learning information to run a UK driving-theory revision app and personalise revision.

What TheoryXP keeps

Depending on how you use the app, TheoryXP may keep:

  • your TheoryXP/Supabase account identifier;
  • your email address if your account has one;
  • Google sign-in identity information if you use Google;
  • an anonymous account identifier if you use Guest mode;
  • optional profile and study preferences such as display name, test date, test jurisdiction and study schedule;
  • Practice, Mock, video-case-study and Road Sign learning activity;
  • response time and answer-change counts where recorded;
  • saved or flagged items;
  • Topic Performance, Study Plan, Today’s Tasks, XP and streak information;
  • confirmed Recovery Scanner categories;
  • limited security/rate-limit/request-log information; and
  • support or privacy correspondence if you contact us.

Technical and device information

TheoryXP does not need to build a database of your iPhone model simply to make the app display correctly. Interface compatibility is handled through app layout code and release testing.

Supabase infrastructure may process technical request information such as IP address and user-agent/client information for authentication, security and operational logs. Apple may also make aggregated analytics or diagnostic/crash reports available to developers; those can include app/device/operating-system information under Apple’s systems and user sharing controls.

TheoryXP does not currently create its own advertising device identifier, use device fingerprinting for advertising or collect precise GPS location.

What stays on your iPhone

Under the current Recovery Scanner design, the source image and raw OCR text are processed on your iPhone using Apple Vision and are not uploaded to TheoryXP’s backend. Only the categories and related learning information you confirm are kept with your TheoryXP account.

Special-category information

TheoryXP does not ask for or intentionally use special-category information such as health, ethnicity, religion, political beliefs, trade-union membership, genetic/identifying biometric information, sex life or sexual orientation as part of its normal revision/personalisation features. Do not send unnecessary sensitive information in support messages.

What TheoryXP does not currently use

TheoryXP does not currently use:

  • in-app advertising;
  • a dedicated third-party analytics or crash-reporting SDK;
  • an external AI/LLM to process learner data;
  • precise location tracking;
  • third-party direct marketing using learner data; or
  • public social posting or messaging.

TheoryXP does not sell personal information.

Guest mode is still an account

Guest mode uses an anonymous Supabase authentication identity so that learning progress can work with the same protected backend. It does not require you to provide an email address, but Guest progress is still stored on TheoryXP’s backend against that anonymous account identifier.

Why TheoryXP uses learning data

TheoryXP uses learning evidence to show progress and choose useful revision. The recommendation system is deterministic and rules-based.

Response time and answer changes are secondary supporting signals. They may slightly influence revision priority, but they cannot by themselves classify a learner as Weak.

UK scope

TheoryXP’s UK privacy framework covers England, Wales, Scotland and Northern Ireland. Supporting Northern Ireland users does not by itself mean TheoryXP is operating under the EU GDPR. If TheoryXP later deliberately targets EEA markets, that position will be reviewed before launch there.

How long TheoryXP keeps it

Account-linked learning data is kept while the account is active. If there is no recorded account activity for 12 months, the account may become eligible for automatic deletion. Where TheoryXP has an email address, it sends an advance warning and provides at least 30 days before deletion. A Guest account without an email address may not receive that warning.

Your controls

Inside TheoryXP you can use:

  • Export My Data
  • Delete Account

For privacy rights or a data protection complaint, email support@theoryxp.app.

Valid privacy-rights requests are normally answered within one calendar month. TheoryXP will acknowledge a data protection complaint within 30 days, investigate it without undue delay, keep you informed where appropriate and tell you the outcome without undue delay.

You may also complain to the UK Information Commissioner’s Office: https://ico.org.uk/make-a-complaint/.

For the complete details, read the full TheoryXP Privacy Policy.