Legal
Privacy policy
Effective from 29 October 2026
Your study data belongs to you. We do not sell it, we do not use third-party advertising or analytics tools, and your test results are visible only to you — and to a driving school you choose to join. Below is exactly what we process.
1. Controller
The controller of personal data is Autoškola MeGo, s.r.o., registered office Palackého třída 924/105, 612 00 Brno, Czech Republic, company ID (IČO) 23497297, entered in the Commercial Register kept by the Regional Court in Brno, Section C, File 146219, not registered for vat, e-mail info@ucitelautoskoly.cz. Contact this e-mail with anything concerning personal data. We have not appointed a data protection officer, as the law does not require it.
2. What data, why and on what basis
| Data | Purpose | Legal basis | How long |
|---|---|---|---|
| Account: e-mail, name, password (encrypted only), for Google sign-in also the name and e-mail of the Google account | Sign-in and account management | Contract (Art. 6(1)(b) GDPR) | Until the account is deleted |
| Progress: answers, test results, unfinished tests, settings | Saving progress, statistics for you | Contract | Until the account is deleted |
| Driving school: name, e-mail, progress summary, role and membership status | Overview for the driving school you join | Contract — sharing on your instruction | Until you leave or delete the account |
| Posts and votes under questions, reports | Publishing tips, moderation | Contract, legitimate interest (moderation) | Until the post or account is deleted |
| Duels: name, correct answers, time | Playing against an opponent | Contract | 7 days |
| Leaderboard: nickname (generated, or one you choose), points and tests per day, week, month and year | Public student leaderboard — motivation and showing how others prepare | Legitimate interest (Art. 6(1)(f) GDPR); you can object | Points for a period are replaced when it ends; nickname until the account is deleted |
| Subscription: Stripe customer ID, e-mail, plans, status and period, consent to the terms (time and version) | Selling and managing subscriptions, unlocking content, proof of consent | Contract, legal obligation, legitimate interest (defence of legal claims) | During the subscription, then as required by accounting and tax law (up to 10 years) |
| Consultation: name, e-mail, phone, preferred time, topic, note, test results summary (if you attach it) | Arranging and providing the consultation | Pre-contractual steps, contract | 2 years from last contact |
| Error reports on a question: report text, question | Fixing content | Legitimate interest (content quality) | Until resolved, at most 2 years |
| Technical data: IP address, browser type, request time | Security, protecting forms from abuse (rate limiting), troubleshooting | Legitimate interest (security) | Server logs usually 30 days, anti-abuse record a few days at most |
Public statistics (such as the hardest questions) are calculated as an anonymous aggregate of all answers, not linked to any person.
We do not use automated decision-making or profiling with legal effects. The exam readiness score is only an indicative calculation from your results, for you.
3. Who receives the data
Data is processed by these processors and recipients, always only to the extent needed for the service:
- Google Ireland Ltd. / Google LLC (Firebase and Google Cloud) — website hosting, sign-in, database, server functions and audio storage. The database, server functions and storage run in the Frankfurt data centre (EU).
- Stripe Payments Europe Ltd. (Ireland) — card payments, receipts, subscription management. Stripe processes card data as an independent controller under its own policy (stripe.com/privacy).
- Resend, Inc. (USA) — sending consultation order e-mails.
- The driving school you join with its code — name, e-mail and progress summary. The school is an independent controller of this data.
- Other users and the public — your name on your posts and in duels; on the leaderboard only your nickname and points, never your name or e-mail.
- MeGo e-shop (megobrno.cz, same operator) — a discount code is created there for the ALL IN bundle. The code carries neither your e-mail nor your name.
- Public authorities — only where the law requires it.
4. Transfers outside the EU
Some processors (Google LLC, Stripe, Inc., Resend, Inc.) are based in the USA or may access data from there. Transfers rely on the European Commission adequacy decision (EU–US Data Privacy Framework) under which they are certified, and on standard contractual clauses.
5. Your rights
You have the right of access to your data, rectification, erasure, restriction of processing, data portability and the right to object to processing based on legitimate interest. Send your request to info@ucitelautoskoly.cz from the e-mail of your account; we will handle it within one month. If you object to the leaderboard, we remove you from it.
You can delete your account yourself in the app settings: the sign-in account and saved progress are deleted immediately. Other records linked to the account (individual test results, driving school membership, posts) we delete or anonymise within 30 days on request. Payment records must be kept for the period required by law.
You also have the right to lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, uoou.gov.cz.
6. Security
Access to data is governed by database rules: nobody but you reads your progress, access to paid content is written only by the server after payment is confirmed, and paid content is served only after the subscription is verified. Communication is encrypted (HTTPS) and Google stores passwords only in encrypted form.
7. Cookies
We only use strictly necessary browser storage, with no advertising or analytics cookies. Details are on the Cookies page.
8. Changes
We update this policy when processing changes. We announce material changes in the app or by e-mail. This version is effective from 29 October 2026.