Privacy Policy
English · Español
1. Introduction
This Privacy Policy describes how Epic Auto School (the “App,” “Service”) collects, uses, shares, and protects personal information when you use the Epic Auto School mobile application (iOS and Android) and the website located at https://epicautoschool.com.
The Service is operated by Online Learning Solutions L.L.C-FZ (“we,” “our,” or “us”). For privacy-related questions or requests, you may contact us at [email protected].
The Service is designed for and offered to users in the United States. Its content covers the driver licensing rules of individual U.S. states and is not intended for use elsewhere. We do not direct or market the Service to any other country. If you access the Service from outside the United States, you do so on your own initiative. This Privacy Policy applies to all users of the Service. Additional provisions apply to residents of California (Section 13). By using the Service, you acknowledge that you have read and understood this Privacy Policy.
2. Scope and Applicability
This Privacy Policy applies to personal information we collect through the Service. It does not apply to third-party websites, applications, or services that may be linked from the Service, nor to information you provide directly to Apple, Google, or other third parties through their own platforms. Those parties have their own privacy policies, which we encourage you to review.
3. Information We Collect
3.1 Information You Provide
Account registration is optional. You may use the Service without providing this information. If you choose to create an account, we collect:
- Name
- Email address
We do not use passwords. You sign in with a one-time verification code sent to your email address, or with your Google or Apple account.
We also generate internal identifiers used to operate the Service, such as an identifier recording that you arrived through a referral link and identifiers used to test product variations.
This information is used to create and maintain your account and to synchronize your learning progress with our servers so it can be restored and accessed across devices. If you contact us directly, we may also receive the contents of your communication and any attachments.
3.2 Learning and Usage Information
To provide the educational features of the App, the App processes information about how you interact with the learning content, including:
- Quiz answers and test results
- Learning progress and completed lessons or topics
- Time spent on lessons and videos
- Video interaction activity (e.g., playback events)
- In-app selections and settings, including selected jurisdiction and your age range
Where this information is stored.
Your complete learning record — your full progress history, your saved results, and the state of every lesson and quiz you have taken — is stored on your device. If you create an account, this record is also synchronized with our servers under your account so that it can be restored and accessed across your devices. If you do not create an account, this record remains on your device only, and we do not hold a copy of it.
Separately from that stored record, the App sends analytics events to our analytics providers as you use it. These events describe individual interactions at the moment they occur, and include your activity within lessons, videos, and quizzes, the screens you open, and the in-app actions you take, including subscription-related actions.
These events are sent whether or not you have an account. They are not linked to your name or email address, but they are associated with an app installation identifier generated by our analytics provider, and with the technical information described in Section 3.3. We use them in aggregate — for example, to identify which questions learners most often answer incorrectly, so that we can improve the explanations and the content.
Advertising and attribution partners receive a narrower set of events. They are told that a milestone occurred — that the App was installed, that registration was completed, that a first video was watched, that a first quiz was completed, or that a subscription was started or purchased — together with the technical and device information described in Section 3.3 and, where you have permitted it, your device advertising identifier. They do not receive your quiz answers or the contents of your learning activity.
Risk of data loss. Because your learning record is stored on your device when you have no account, it may be permanently lost if your device is lost, stolen, damaged, reset, or replaced; if the App is uninstalled or reinstalled; if app data is cleared; or for any other reason affecting local storage. You are solely responsible for safeguarding your device and any data stored on it. We are unable to recover learning progress that was stored only on your device, and we accept no liability for any such loss. Creating an account is the way to enable cloud backup and cross-device access of your progress.
3.3 Technical and Device Information
We and our service providers automatically collect certain technical information when you use the Service, including:
- Device type and model
- Operating system and version
- App version
- IP address
- Device identifiers, including your device advertising identifier where you have granted permission for its use (see Section 6)
- Analytics installation identifiers generated by our analytics providers
- Crash reports and diagnostic information
- General usage events and timestamps
3.4 Subscription and Transaction Information
We do not collect or store payment card details. When you subscribe, Apple or Google provides us with confirmation of the transaction, the type of subscription, its status, and a transaction identifier. Payment information is handled exclusively by Apple and Google in accordance with their respective policies.
4. How We Use Your Information
The table below describes the purposes for which we process personal information and the categories of data involved.
| Purpose of Processing | Categories of Data |
|---|---|
| Create and maintain your account | Name, email |
| Deliver the learning experience, track progress, operate quizzes and lessons | Quiz answers, test results, learning progress, lesson activity, time spent, video interactions |
| Maintain app stability, diagnose errors, improve performance | Device type, OS version, app version, IP address, crash reports, diagnostic data |
| Analytics, content improvement, development of future AI-based features from aggregated data | Learning interaction events, usage data, device-level data |
| Measure effectiveness of marketing campaigns, attribute app installs to advertising sources | Device identifiers, IP address, install and milestone event data |
| Send subscription-related notifications and service communications | Email address, subscription status |
| Comply with legal obligations, respond to lawful requests, enforce Terms | As required by the specific obligation |
Age-based limits on advertising uses. Personalized advertising data is not used for users under 18. Age is determined through platform age signals or by asking you directly. For users under 18 we do not use personal information for personalized advertising, cross-app tracking, or the building of advertising audiences. Our analytics and attribution tools still operate, but in a restricted mode: they do not collect the device advertising identifier, they run under privacy-limited settings, and any measurement is aggregated and not tied to identity. See Section 15.
Your controls. You can limit the advertising and attribution uses described above at any time. See Section 6 for device-level tracking permissions and Section 13.3 for the in-app opt-out.
5. Third-Party Services and Providers
We use trusted third-party service providers to operate, measure, and improve the Service. These providers may process technical and usage data as independent controllers or as our processors, depending on the service. The categories of providers currently in use are:
- Cloud hosting, data storage, and content delivery
- Authentication, analytics, and crash reporting
- Advertising measurement and install attribution
Each provider processes data in accordance with its own privacy terms. We select providers that offer appropriate technical and organizational safeguards and, where applicable, contractual data protection commitments.
6. Advertising, Tracking, and Install Attribution
We do not display third-party advertisements to you inside the App. The App is ad-free in that sense.
However, we do run paid advertising campaigns on third-party platforms to promote the Service. To measure how effective those campaigns are, we use attribution and analytics tools that may collect and share limited information with advertising networks, including:
- Your device advertising identifier, where you have granted permission for its use
- IP address
- App install and milestone event data (for example, that an install occurred after viewing an ad, or that a subscription was purchased)
- Aggregated attribution signals provided by the app stores
This information is used to understand which campaigns lead to installs and subscriptions, to measure overall campaign performance, and to reach users who may be interested in the Service. We do not use this information to build a profile of your identity or to sell your personal data.
6.1 Apple App Tracking Transparency (ATT)
On iOS devices, before any tracking takes place for advertising purposes, the operating system will present you with Apple’s App Tracking Transparency prompt, asking whether you allow the App to track your activity across apps and websites owned by other companies. The App requests this permission after you have selected your jurisdiction during onboarding.
If you decline, we will not access your device’s advertising identifier for tracking purposes, and attribution will be limited to aggregated or privacy-preserving signals. Declining does not limit your access to any feature of the Service. You can change your choice at any time in your device settings, under Privacy & Security → Tracking.
For users under 18, this prompt is not shown and the device advertising identifier is not accessed. Our analytics and attribution tools still run, but under privacy-limited settings that prevent cross-app tracking and personalized advertising (see Section 15).
6.2 Android Advertising ID
On Android devices, we use your device’s advertising ID for attribution and campaign measurement, subject to your device settings and to the in-app control described in Section 13.3. You can reset or delete your advertising ID at any time through your device settings. For users under 18, the advertising ID is not collected or used, and our attribution tools run under privacy-limited settings that transmit only aggregated, non-identifying measurement (see Section 15).
6.3 Aggregated Attribution
Regardless of your tracking choices, the app stores provide us with aggregated, privacy-preserving measurements of campaign performance. These signals do not identify you individually.
7. Our Website
The website at https://epicautoschool.com is an informational page that describes the Service and directs visitors to download the App. It does not require an account and does not process learning data.
The website uses cookies and similar technologies for analytics and for advertising measurement. These help us understand how visitors find and use the page and how effective our advertising campaigns are. Information collected through the website is limited to website usage and is not linked to your App account or your learning record.
You can prevent these cookies through your browser’s cookie settings. If you wish to opt out of the sharing of your information for advertising purposes, see Section 13.3.
8. Data Sharing and Disclosure
We do not sell your personal information in exchange for monetary consideration, and we do not rent it to third parties. We share personal information only in the following circumstances:
- With service providers (such as those described in Section 5) that process data on our behalf or as independent controllers for defined purposes
- With Apple and Google in connection with account sign-in and subscription billing
- With advertising networks for measurement and attribution purposes, as described in Section 6
- With competent authorities, courts, or regulators where disclosure is required by applicable law or is necessary to protect our rights, users, or the public
- In connection with a merger, acquisition, reorganization, or sale of assets, in which case personal information may be transferred as part of that transaction, subject to confidentiality commitments
Certain of these disclosures may constitute “sharing” under California law. See Section 13.
9. Where Your Information Is Stored
Your personal information is stored on servers located in the United States.
Some of our service providers, including the analytics and attribution providers described in Section 5, operate globally and may process technical and usage data outside the United States in accordance with their own terms.
10. Data Retention
We retain personal information only as long as necessary for the purposes described in this Privacy Policy, to comply with our legal obligations, resolve disputes, and enforce our agreements.
| Category of Data | Retention |
|---|---|
| Account data (name, email), learning progress, and related records | Retained while your account is active. Deleted from our live systems upon your deletion request. Copies may persist in encrypted backups for a limited period, after which they are permanently removed. |
| Aggregated or anonymized learning data (no longer linked to you) | Retained indefinitely for product improvement and statistical analysis. |
| Analytics, crash, and diagnostic data | Retained in accordance with the retention settings of the relevant provider. |
| Attribution and install-measurement data | Retained in accordance with the retention settings of the relevant provider. |
| Service-related email communications | Retained for as long as necessary to support your account, unless a longer period is required by law. |
| Transaction records required for legal, tax, or accounting purposes | Retained for the period required by applicable law. When you delete your account, these records are stripped of any link to your identity and retained only as financial records. |
When the applicable retention period ends, we delete or irreversibly anonymize the personal information, so that it can no longer be associated with you.
Account deletion. When you delete your account from within the App, your account record, learning progress, and related data are removed from our live systems — we do not retain a hidden or deactivated copy. Backups of our database are retained on a rolling basis for operational and disaster-recovery purposes; deleted information may remain in those encrypted backups for a limited period, after which it is permanently removed. Backup data is not restored to live systems.
The retention periods above apply only to data that we actually hold. Where you use the App without an account, your learning record described in Section 3.2 is stored only on your device and is not retained on our servers; in that case, the length of time it remains available to you depends on your device, and we are unable to recover it on your behalf.
11. Data Security
We implement reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, loss, alteration, and disclosure. These include:
- Encryption of data in transit between your device and our servers (HTTPS/TLS)
- Access controls and authentication for administrative systems
- Regular review of security practices and service provider commitments
No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.
12. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and the competent authorities as required by applicable law.
13. California Privacy Notice (CCPA/CPRA)
This section applies to residents of California and supplements the information elsewhere in this Privacy Policy. In the preceding twelve (12) months, we have collected the following categories of personal information, as defined by the California Consumer Privacy Act (as amended by the California Privacy Rights Act):
- Identifiers (e.g., name, email, IP address, device identifiers, advertising identifiers)
- Internet or other electronic network activity (e.g., app interaction data, usage events)
- Commercial information (e.g., subscription status)
- Inferences drawn from the above (e.g., learning progress, recommended content)
We collect these categories from the sources described in Section 3 and use them for the purposes described in Section 4. We share these categories with the service providers and advertising partners described in Sections 5, 6, and 8.
13.0 Notice at Collection
At or before the point at which we collect your personal information, we want you to know the following, in summary form. This summary is provided for convenience; the full detail is in the sections referenced.
- What we collect. If you create an account, your name and email address. Whether or not you have an account, your learning progress, and technical and device information such as IP address, device model, operating system, app version, an analytics installation identifier, and crash and diagnostic data. See Section 3.
- Why we collect it. To operate your account, deliver and synchronize the learning experience, keep the App stable and secure, and — where permitted — measure advertising campaigns. See Section 4.
- What is essential vs. optional. The account, learning, technical, and crash/diagnostic data above is used to operate the Service and is collected for all users. Advertising and attribution data (including your device advertising identifier and click identifiers) is collected and shared only where you have granted permission and you are 18 or older. See Sections 6 and 15.
- Whether we sell or share it. We do not sell your personal information for money. We “share” personal information for cross-context behavioral advertising only as described in Section 13.1, and only with your permission. You can opt out at any time.
- How long we keep it. See Section 10.
- How to opt out. See Section 13.3.
For the complete description of our practices, please read this entire Privacy Policy.
13.1 “Sale” and “Sharing”
We do not sell personal information in exchange for monetary consideration. However, under the CPRA, the term “share” includes disclosures of personal information for cross-context behavioral advertising, even without monetary exchange. Our use of advertising attribution and campaign measurement tools, as described in Section 6, constitutes “sharing” under this definition.
We do not sell or share the personal information of consumers we know to be under 16 years of age. For users under 18, we do not sell or share personal information for cross-context behavioral advertising: we do not collect the device advertising identifier, our analytics and attribution tools run under privacy-limited settings, and any measurement is aggregated and not tied to identity or used to build advertising audiences.
13.2 Your California Rights
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and share about you
- Request deletion of your personal information
- Correct inaccurate personal information
- Opt out of the “sale” or “sharing” of personal information
- Limit the use of sensitive personal information (we do not process sensitive personal information beyond what is needed to provide the Service)
- Not be subject to discrimination for exercising your privacy rights
13.3 How to Opt Out of Sharing
You can opt out of the sharing of your personal information for cross-context behavioral advertising in the App’s privacy settings, under “Do Not Sell or Share My Personal Information.” When enabled, we stop sharing your device data with advertising and attribution partners.
If you use our website and do not use the App, you can submit an opt-out request by emailing [email protected] with the subject “Do Not Sell or Share.” Because website analytics and advertising cookies are not linked to any account, we may be unable to identify which of them relate to you; in that case we will tell you so and direct you to the browser controls described in Section 7.
On iOS, declining Apple’s App Tracking Transparency prompt (Section 6.1) additionally prevents the use of your device advertising identifier.
13.4 Exercising Other Rights
To exercise your other California rights, contact us at [email protected]. You may also designate an authorized agent to make a request on your behalf, subject to verification.
Where you use the App without an account, your learning record stays on your device and is not stored on our servers, so we may be unable to associate a request with your data. In that case, we will explain what we can and cannot do, and we will direct you to the controls described in Section 13.3 and to your device’s advertising identifier settings.
14. Your Rights
Depending on where you live, you may have the following rights in relation to your personal information. If you are a California resident, see Section 13 for rights specific to you.
- Right of access – to request a copy of the personal information we hold about you
- Right to rectification – to correct inaccurate or incomplete information
- Right to erasure – to request deletion of your personal information
- Right to restriction of processing – in certain circumstances, to limit how we process your information
- Right to data portability – to receive your information in a structured, commonly used, machine-readable format
- Right to object – to object to processing for direct marketing and attribution purposes
- Right to withdraw consent – where processing is based on consent, at any time
You can delete your account at any time directly within the App, as described in Section 10. For any other request, contact us at [email protected]. We will respond within the time frames required by applicable law, and in any event within a reasonable period. We may need to verify your identity before acting on a request.
Because your learning record is stored on your device when you use the App without an account, deleting the App or clearing its data removes that information from your device. We cannot access or delete data that we never received.
15. Children’s Privacy and Minors
The Service is intended for users aged thirteen (13) and older. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without appropriate parental consent, we will take reasonable steps to delete it promptly.
Users under 18. Personalized advertising data is not used for users under 18. Age is determined through platform age signals or by asking you directly. For users under 18 we apply the following privacy protections:
- The device advertising identifier is not collected or accessed on either platform, and Apple’s App Tracking Transparency prompt is not shown
- Our analytics and attribution tools run under privacy-limited settings, so that they do not enable cross-app tracking or personalized advertising
- Any measurement transmitted is aggregated and not tied to identity; we do not build advertising audiences or lookalike models from it, and we do not sell or share personal information for cross-context behavioral advertising
- Advertising-related analytics signals are disabled
We continue to process the limited technical information necessary to operate the Service, maintain its stability, and provide the educational features you use, including the learning analytics described in Section 3.2. We also receive aggregated, non-identifying measurement about how features are used, so that we can improve the Service for all learners.
In short: for users under 18, our measurement tools still function, but only in a form that cannot identify you or track you across other apps and websites.
If you are under the age of majority in your jurisdiction, you may only use the Service with the consent and supervision of a parent or legal guardian, who accepts this Privacy Policy and our Terms and Conditions on your behalf.
If you are a parent or guardian and believe that your child has provided personal information to us contrary to this section, please contact us at [email protected].
16. Communications and Notifications
Email. We send email notifications related to your account and subscription status. These are service communications necessary to the operation of your account.
Push notifications. We do not currently send push notifications. If we introduce them, they will relate to your account, your subscription, or your learning progress — for example, a reminder to continue a lesson. Push notifications are sent only to devices where you have granted push-notification permission, and you can withdraw that permission at any time in your device settings without losing access to any feature of the Service.
What we do not do. We do not send promotional SMS messages and we do not operate a newsletter. In-app promotional messages may appear only on subscription-related screens (for example, launch pricing offers).
17. Aggregated Data and AI
We may also use aggregated and anonymized learning data to train, develop, and improve machine-learning and AI models that power recommendation, analytics, and educational features. Data used for these purposes is aggregated or anonymized so that it can no longer identify you.
We do not use the personal information of users under 18 to build advertising audiences or lookalike models, and the restricted, aggregated measurement we receive about them (see Section 15) is not used for these purposes.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. Material changes will be communicated through the Service or by other reasonable means, and the “Effective Date” at the top of this document will be updated. Continued use of the Service after changes take effect indicates your acceptance of the revised Privacy Policy. If you do not agree to the revised Privacy Policy, you must discontinue use of the Service.
19. Third-Party Platforms
Your download and use of the App is also governed by the privacy policies and terms of Apple (App Store) and Google (Google Play). We are not responsible for the privacy practices of these platforms.
20. No Rights for Non-Users
This Privacy Policy creates rights and obligations only between you and us. It does not create rights in favor of any third party, except as expressly required by applicable law.
21. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal information, you may contact us at:
Online Learning Solutions L.L.C-FZ
Email: [email protected]
We will respond to your inquiry within the time frames required by applicable law, and in any event within a reasonable period.
Last updated 3 August 2026. Previous versions are available on request at [email protected].