MRDRIVER – STUDENT PRIVACY POLICY
Last updated 19 April 2025
MrDriver ("Company," "we," "us," "our") respects your privacy and is committed to protecting the personal information that you ("Student," "you," "your") share with us when you use the MrDriver Students mobile application, related websites and services (collectively, the "Platform").
This Privacy Policy explains what data we collect, why we collect it, how we use and disclose it, and what choices and rights you have.
We follow the federal Personal Information Protection and Electronic Documents Act ("PIPEDA"), Ontario's Consumer Protection Act, 2002, and any other applicable Canadian privacy legislation.
1. Scope
This Policy applies only to the Student‑facing version of the MrDriver Platform. A separate privacy statement applies to Instructors.
2. What Information We Collect
| Category | Examples | Source |
|---|---|---|
| Account Data | Name, email, phone, password, preferred language | Provided by you at registration |
| Profile Data | Driver‑licence information (licence number, class, issuing province, expiry), learning goals, avatar photo | Provided by you |
| Booking Data | Lesson date, time, location, selected Instructor, notes | Generated through your activity |
| Payment Data | Last four digits of card, card expiry month/year, transaction amounts | Collected via Stripe (we never see full card numbers) |
| Usage Data | Log‑in timestamps, feature clicks, crash logs, device OS, IP address | Collected automatically by Firebase Analytics & Crashlytics |
| Chat Data | Messages and attachments exchanged with Instructors via the in‑App chat | Generated through your use of the chat feature |
| Location Data (optional) | GPS location during "find Instructor near me" and when you enable real‑time Lesson tracking | With your in‑App permission |
| Support Data | Chat transcripts, emails, attachments | Generated when you contact support |
We do not knowingly collect information from children under 13. If we learn we have done so, we will delete it.
3. Why We Collect & How We Use Your Data
| Purpose | Legal Basis* |
|---|---|
| Create and manage your account | Consent (PIPEDA s.4.3) |
| Facilitate Lesson bookings and communicate with Instructors | Consent; Contract performance |
| Process payments, issue credits or refunds | Consent; Contract performance; Legal obligation (tax compliance) |
| Send transactional notifications (confirmations, reminders, changes) | Consent; Legitimate interests (service reliability) |
| Provide customer support and resolve disputes | Consent; Legitimate interests |
| Improve and secure the Platform (analytics, debugging, fraud prevention) | Legitimate interests |
| Send marketing messages (promotions, surveys) only if you opt‑in | Express consent (CASL) |
| Comply with laws and respond to lawful requests | Legal obligation |
*"Legal basis" terminology is provided for clarity; under PIPEDA we rely primarily on informed consent.
4. How We Share Your Information
We never sell your personal information. We share it only as needed:
- Instructors. Your first name, profile details and lesson notes are disclosed to the Instructor you book so they can deliver the Lesson. Communication occurs via the in‑App chat; we do not share your phone number with Instructors.
- Service Providers.
- Stripe: payment processing.
- Google Firebase: authentication, analytics, crash reporting, push notifications.
- Mapbox/Google Maps: geolocation and routing (if you enable location services).
- Legal & Safety. We may disclose information if required by law, court order or to protect our rights, property or safety (e.g., fraud investigation, insurance claim, traffic‑collision report).
- Business Transfers. If we restructure or sell our business, your data may transfer to the successor entity, subject to this Policy.
5. International Transfers
Our servers are hosted in Canada, but some third‑party processors (e.g., Stripe, Firebase) store or access data from the United States or other countries. When they do so, your data is subject to the laws of those jurisdictions. We use contractual and technical measures to protect it, but local authorities may lawfully access it.
6. How We Store & Secure Your Data
- Encryption. All traffic is encrypted in transit (TLS 1.2+); sensitive fields in Stripe are encrypted at rest.
- Access Controls. Employee access is role‑based and logged.
- Back‑ups. Encrypted daily backups are stored in Canadian data centres.
- Incident Response. We maintain a breach‑response plan and will notify affected users and regulators as required by law.
7. Data Retention
We keep your personal information for as long as your account is active plus two (2) years to comply with record‑keeping obligations and facilitate disputes. Aggregate, non‑identifiable data may be retained indefinitely.
8. Your Choices & Rights
- Access & Correction. You can view and update most data in the App settings, or email support@mrdriver.ca to request a copy or correction.
- Withdrawal of Consent. You may withdraw consent at any time; this may limit your ability to use the Platform.
- Deletion. You may request account deletion; we will anonymise or delete personal data unless we must retain it to meet legal obligations.
- Marketing Opt‑out. You can unsubscribe from marketing emails using the link in each message or in the App settings.
- Cookies/Tracking. Most browsers allow you to block or delete cookies; disabling analytics cookies may affect functionality.
To exercise any right, email support@mrdriver.ca. We will respond within 30 days.
9. Cookies & Similar Technologies
The App and website use:
- Essential cookies – required for login and security.
- Analytics cookies – Google/Firebase Analytics to measure feature usage.
- Push tokens – to deliver lesson reminders.
You can disable analytics cookies in the App settings or browser Do‑Not‑Track signal.
10. Children's Privacy
The Platform is not directed to children under 13. Students aged 13–17 must have a parent or legal guardian create or approve the account and supervise Lesson bookings.
11. Changes to This Policy
We may update this Policy from time to time. Material changes will be announced by email and in‑App notice at least 15 days before they take effect. The "Last updated" date at the top reflects the latest revision.
12. Contact & Complaints
Privacy Officer
MrDriver
145 ½ Church Street, Unit 5 Office 32
Toronto ON M5B 1Y4 Canada
✉️ support@mrdriver.ca
☎️ 1‑647-523-2391
If we cannot resolve your concern, you may contact the Office of the Privacy Commissioner of Canada (OPC) at 1‑800‑282‑1376 or priv.gc.ca.
By using the MrDriver Students App, you acknowledge that you have read and understood this Privacy Policy.