Permit Hours – Privacy Policy

Kovan Apps Yazılım Ltd. Şti. (“Company”, “we”, “us”, or “our”) built the Permit Hours app (the “App”) available on both Google Play (Android) and the Apple App Store (iOS). The App is a supervised-driving log: a learner driver and their parent or supervisor record practice sessions, track progress toward their state’s required hours, and export a printable report for the DMV. Logging is free up to a limited number of hours; unlimited logging and PDF export are unlocked with a single one-time purchase. The App contains no advertising and does not track you across other apps or websites.

This page informs visitors regarding our policies on the collection, use, and disclosure of information if anyone decides to use our Service. By using our Service, you agree to the collection and use of information in relation to this policy.

⚠️ Independent App Notice: Permit Hours is an independent application and is NOT affiliated with, endorsed by, or connected to any Department of Motor Vehicles, Bureau of Motor Vehicles, state agency, or driving school. The hour requirements shown in the App are provided for reference only and may change; always confirm the current official requirements with your own state’s licensing agency. Whether a printed log from this App is accepted is at the sole discretion of your local agency.

1. Information Collection and Use

The App works without a traditional account — there is no sign-up, no password, and we never ask for your email address or phone number. A device is identified only by an anonymous Firebase Authentication ID. The information you type into the App (a driver’s display name, a supervisor’s name, notes) is content you choose to enter, and you may use nicknames or initials instead of full names.

The App uses the following third-party services, which may process limited technical information:

Service	Purpose	Platform
Google Play Services	Core app functionality and device services	Android
Firebase Authentication (Anonymous)	Anonymous device ID for backend authentication — no personal sign-in	Android & iOS
Firebase Cloud Functions	Family sync, PDF import parsing, remote configuration — the only way the App reaches our database	Android & iOS
Cloud Firestore	Stores synced session records for families that turn Family Sync on	Android & iOS
Firebase App Check	Backend abuse prevention (device attestation)	Android & iOS
Firebase Remote Config	Delivers app configuration such as the free-hour limit	Android & iOS
Google Analytics for Firebase	Aggregate, anonymous usage statistics	Android & iOS
Firebase Crashlytics	Crash reporting and stability monitoring	Android & iOS
RevenueCat	One-time purchase validation (Full Unlock) and purchase restoration	Android & iOS

2. Your Driving Log

Every session you log is stored on your device in a local database. If you never turn on Family Sync, your log never leaves your phone at all — the App is fully usable offline and entirely local.

If you do turn on Family Sync (so that a second parent or supervisor sees the same log), the following fields for each session are sent to our servers and stored against your family’s record:

Start and end time of the session, and the split between daytime and nighttime minutes
Total distance in miles, if you recorded or entered one
Weather and road type, if you selected them
The supervisor name and any note you typed for that session
The driver’s display name, state, and hour targets

  🔒 Location and route data never leave your device. When you use the built-in drive timer, the App may record GPS points to calculate distance and draw a private route sketch on the session screen. Those coordinates are stored only in your device’s local database. They are never uploaded to our servers, never included in Family Sync, never written into the exported PDF, and never sent to any third party. Uninstalling the App deletes them permanently.

3. Location Data

The drive timer optionally uses your device’s precise location, including while the timer runs in the background, for a single purpose: measuring how far the practice drive went and sketching its shape for your own reference. Location access is:

Used only on your device — as described above, coordinates never leave the phone
Entirely optional — you can log every session manually, and the App is fully functional without location access
Revocable at any time in your device’s system settings

4. Family Sync and Share Codes

Family Sync links two or more devices so that a drive logged by one supervisor appears for the others. When you create a family, our server generates a short share code. Anyone who enters that code joins the family and can see the sessions in it, so treat the code like a password and share it only with people you want to have access. A family is limited to a small number of members. Only the session fields listed in Section 2 are shared — never location or route data.

5. Importing a Log From Another App

The App can read a driving-log PDF exported from another app so you do not have to retype your history. The file you choose is uploaded to our Cloud Function, parsed into session rows, and returned to your device for you to confirm. The uploaded file is processed in memory and is not stored on our servers afterwards.

6. Purchase Data

The App offers a single optional one-time purchase (“Full Unlock”) managed through RevenueCat. When you purchase:

Payment is processed entirely by Apple (App Store) or Google (Play Store). We never see or store your payment details (card numbers, billing address, etc.).
RevenueCat receives your anonymous ID and the purchase receipt to validate the unlock, including for “Restore purchases”.
There is no subscription, no recurring charge, and no ads.

7. Analytics, Crash and Diagnostic Data

We use Firebase Crashlytics to detect crashes and stability problems. Crash reports may include your device model, operating system version, and the technical state of the App at the time of the crash. We also use Google Analytics for Firebase to understand aggregate usage (such as first opens, sessions started, and purchases). These events carry no personal content — no driver or supervisor names, no notes, no locations, no session details. This data is tied to an anonymous app-instance identifier, not to your name, email, or any real-world identity, and is never used for advertising or cross-app tracking.

8. Cookies

The App itself does not use cookies. Third-party libraries used by the App may use technologies with similar functions for the purposes described above.

9. Data Security

All network communication between the App and our backend uses HTTPS/TLS encryption, and every backend operation goes through authenticated Cloud Functions — the App has no direct database access. Authentication tokens are held in the platform’s encrypted storage (Android EncryptedSharedPreferences, iOS Keychain). However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Data Retention

Your driving log on the device: Kept until you delete the sessions or uninstall the App.
Location and route points: Local only; deleted with the session or on uninstall.
Synced session records (Family Sync only): Retained while the family exists; removed when you delete your data as described in Section 11.
Imported PDF files: Not retained — parsed in memory and discarded.
Anonymous ID: Persists on your device until you delete your data or uninstall the App.
Crash logs: Retained by Firebase for up to 90 days.
Analytics events: Retained by Google Analytics for Firebase for up to 14 months, then deleted.
Purchase records: Retained by RevenueCat/Apple/Google per their policies to support purchase restoration.

11. Your Rights and Deleting Your Data

Access: You may request a copy of any data associated with your anonymous ID.
Deletion: You can delete everything from inside the App at any time — open Settings → Delete my data. This erases your local log and permanently deletes the server-side records tied to your anonymous ID. Full instructions are on our Delete Your Data page.
Correction: Every session in the log can be edited or deleted individually in the App.
Opt-out of sharing: You may use the App entirely offline by never enabling Family Sync.

To exercise any of these rights, contact us at info@kovanapps.com. We will respond within 30 days.

12. Children’s Privacy

Permit Hours is a record-keeping tool for parents, guardians, and supervising drivers; it is not directed to children and is not intended for use by anyone under 13. We do not knowingly collect personal information from children under 13. A learner driver’s display name is entered by the supervising adult and may be a first name, nickname, or initials. If you are a parent or guardian and believe a child under 13 has provided us with personal information, contact us at info@kovanapps.com and we will delete it immediately.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. You are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. Changes are effective immediately upon posting.

14. Contact Us

Kovan Apps Yazılım Ltd. Şti.
Üniversiteler Mah. 1597 Cad. No: 3/127 Bilkent, Çankaya, 06800 Ankara, TR
Email: info@kovanapps.com
Response Time: Within 30 days