TheoryXP Privacy at a Glance

Version: V1.3
Updated: 24 September 2026

TheoryXP Limited uses a limited amount of account, technical and learning information to run a UK driving-theory revision app and personalise revision.

What TheoryXP keeps

Depending on how you use the app, TheoryXP may keep:

  • your TheoryXP/Supabase account identifier;
  • your email address if your account has one;
  • Google sign-in identity information if you use Google;
  • an anonymous account identifier if you use Guest mode;
  • optional profile and study preferences such as display name, test date, test jurisdiction and study schedule;
  • Practice, Mock, video-case-study and Road Sign learning activity;
  • response time and answer-change counts where recorded;
  • saved or flagged items;
  • Topic Performance, Study Plan, Today’s Tasks, XP and streak information;
  • confirmed Recovery Scanner categories;
  • limited security/rate-limit/request-log information; and
  • support or privacy correspondence if you contact us.

Technical and device information

TheoryXP does not need to build a database of your iPhone model simply to make the app display correctly. Interface compatibility is handled through app layout code and release testing.

Supabase infrastructure may process technical request information such as IP address and user-agent/client information for authentication, security and operational logs. Apple may also make aggregated analytics or diagnostic/crash reports available to developers; those can include app/device/operating-system information under Apple’s systems and user sharing controls.

TheoryXP does not currently create its own advertising device identifier, use device fingerprinting for advertising or collect precise GPS location.

What stays on your iPhone

Under the current Recovery Scanner design, the source image and raw OCR text are processed on your iPhone using Apple Vision and are not uploaded to TheoryXP’s backend. Only the categories and related learning information you confirm are kept with your TheoryXP account.

Special-category information

TheoryXP does not ask for or intentionally use special-category information such as health, ethnicity, religion, political beliefs, trade-union membership, genetic/identifying biometric information, sex life or sexual orientation as part of its normal revision/personalisation features. Do not send unnecessary sensitive information in support messages.

What TheoryXP does not currently use

TheoryXP does not currently use:

  • in-app advertising;
  • a dedicated third-party analytics or crash-reporting SDK;
  • an external AI/LLM to process learner data;
  • precise location tracking;
  • third-party direct marketing using learner data; or
  • public social posting or messaging.

TheoryXP does not sell personal information.

Guest mode is still an account

Guest mode uses an anonymous Supabase authentication identity so that learning progress can work with the same protected backend. It does not require you to provide an email address, but Guest progress is still stored on TheoryXP’s backend against that anonymous account identifier.

Why TheoryXP uses learning data

TheoryXP uses learning evidence to show progress and choose useful revision. The recommendation system is deterministic and rules-based.

Response time and answer changes are secondary supporting signals. They may slightly influence revision priority, but they cannot by themselves classify a learner as Weak.

UK scope

TheoryXP’s UK privacy framework covers England, Wales, Scotland and Northern Ireland. Supporting Northern Ireland users does not by itself mean TheoryXP is operating under the EU GDPR. If TheoryXP later deliberately targets EEA markets, that position will be reviewed before launch there.

How long TheoryXP keeps it

Account-linked learning data is kept while the account is active. If there is no recorded account activity for 12 months, the account may become eligible for automatic deletion. Where TheoryXP has an email address, it sends an advance warning and provides at least 30 days before deletion. A Guest account without an email address may not receive that warning.

Your controls

Inside TheoryXP you can use:

  • Export My Data
  • Delete Account

For privacy rights or concerns about how TheoryXP handles your personal information, email support@theoryxp.app.

You can also complain to the UK Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/.

For the complete details, read the full TheoryXP Privacy Policy.

AI Tutor — planned privacy protections

TheoryXP is preparing an optional AI Tutor. At the date of this version, AI Tutor is not yet a live external-AI data flow. Simply using the ordinary TheoryXP app does not send your learning data to OpenAI.

When AI Tutor is enabled and you choose to use it:

  • what you type will be sent securely through TheoryXP's backend to the AI provider so it can generate a response;
  • TheoryXP plans to use OpenAI as the AI provider;
  • your exact date of birth is not needed or sent to the AI provider;
  • licensed DVSA revision-question wording, answer options, supporting Knowledge & Understanding text and licensed media are not intentionally sent to the AI provider;
  • Recovery source images and raw OCR text are not sent to the AI provider;
  • permanent server-side Tutor chat history is not planned for V1;
  • AI answers can make mistakes, so important rules should be checked against trusted/official learning material; and
  • the same high-privacy and age-appropriate AI safeguards apply to eligible users rather than weakening protection for adults.

AI Tutor age check

The planned AI Tutor V1 is for users aged 13 or over.

TheoryXP may use Apple's Declared Age Range feature when the Tutor is first used. Apple shares age-range information, not the user's exact date of birth, with TheoryXP.

Where technically appropriate, TheoryXP will keep only a result such as whether the account is eligible to use AI Tutor, instead of keeping the underlying age range.

If sufficient age-eligibility information is not available, AI Tutor may remain unavailable. This does not prevent use of ordinary TheoryXP revision features.

AI Tutor personalisation

The default Tutor should not need your full TheoryXP learning profile.

If a future option lets you use your TheoryXP progress to personalise a Tutor answer, it must be clearly explained and use only the minimum learning context needed for that request. It must not send your email address, exact DOB, authentication credentials or the licensed DVSA question bank merely to personalise an answer.

AI provider retention

OpenAI states that API data is not used to train its models by default unless the customer explicitly opts in. Its standard API abuse-monitoring logs may retain prompts/responses for up to 30 days. TheoryXP plans to use provider controls that minimise additional application-state storage, including store: false where supported.

V1.3 update — 24 September 2026: added planned AI Tutor, age-eligibility and external-AI privacy information while preserving the existing summary.