Privacy Policy

1. Who we are

Passit Drive ("we", "us", "our") is an independently operated New Zealand study tool for NZTA theory practice (Learner, Motorcycle, Heavy Vehicle) and NZQA 16718 Dangerous Goods course-prep. We are not NZTA, Waka Kotahi, or an approved 16718 training provider. For privacy questions or requests, email hello@passit.co.nz.

2. What information we collect

You do not need an account to use Passit Drive. A private browser cookie identifies this device so practice answers and any purchased access can persist. If you choose to sign in, we also keep an optional account. We may collect:

• Two httpOnly cookies — passit_user_id and passit_session_id — random identifiers lasting about 13 months, used to recognise this browser. They are not your name or email.
• Practice history: which exam you practised, which question IDs you answered, the topic, and whether the keyed answer was correct. We do not store the wording of your chosen option.
• If you pay: the email you enter on Stripe Checkout, Stripe session and payment-intent IDs, amount paid, currency, and which licence (or Commercial Driver Pack) was unlocked. We do not receive or store full card numbers.
• If you create an optional account: the email you use to sign in (Google or a one-time email link via Supabase Auth — no password). Google may share a name with the sign-in service; we do not ask for or store a separate profile name, year level, or date of birth.
• Technical information our host needs to serve the site (such as IP address and browser type in server logs).

If you later sign in with the same email you used at checkout, we may attach that earlier purchase and practice history to the signed-in account so you can restore access on a new device. We do not sell personal information.

3. How we use your information

• Keep your diagnostic tally, readiness score, and unlocked licences available on this device — and, if you sign in, on other devices.
• Mark keyed multiple-choice answers and pick the next practice question from your weak topics. Marking and readiness run in our app from your stored attempts; we do not send answers to an AI service.
• Process a one-time payment of $19.99 NZD per licence, or $34.99 NZD for the Commercial Driver Pack (Heavy Vehicle + Dangerous Goods). This is not a subscription.
• Restore a purchase when you sign in with the checkout email, and merge that history into one account so access is not split or lost.
• Reply if you email us about a refund, access, or a privacy request.

4. Who we share your information with

We use a small number of providers to run Passit Drive. We only share what each one needs:

• Supabase — database for visitors, practice attempts, entitlements and payments, and optional sign-in
• Vercel — website hosting
• Stripe — Checkout and payment processing
• Google — only if you choose "Continue with Google", and for the fonts loaded on our pages

We do not use an AI marking or generation provider. Practice questions and explanations are written by Passit and marked against a stored correct index. We do not sell or rent personal information for anyone else's marketing. Each provider has its own privacy policy.

5. Overseas disclosure

Our database is hosted by Supabase in Singapore. Vercel, Stripe and Google may also store or process information on servers outside New Zealand, including in the United States. Where this happens, we take reasonable steps so your information receives a comparable standard of protection to that required under the Privacy Act 2020, as required under Information Privacy Principle 12.

6. Users under 18

Learner Licence practice is often used by people under 18. An account is optional — a parent or caregiver can practise with the young person on a shared device without signing in. We only collect what is needed to keep practice and purchased access working. A parent or caregiver can email us to review, correct, or ask us to delete a young person's session or account information at any time.

7. Data retention and security

Visitor cookies last about 13 months unless you clear them. We keep practice and purchase records for as long as they are needed to provide access on this device or a signed-in account, or to meet legal obligations (for example, payment records). After you ask us to delete a session or account, we remove or de-identify the personal information we hold unless we must keep a payment receipt. We use encrypted connections and restrict database access, but no online service can guarantee absolute security.

8. Your rights

Under the Privacy Act 2020 you can ask to access or correct personal information we hold about you, and you can ask us to delete a browser session or optional account. Email hello@passit.co.nz. We will respond within the timeframes in the Act. If you are not satisfied, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page.

See also our Terms.