Privacy Policy

1. Who we are

Prava 24 is a study app for the theoretical part of the driving licence exam in the Republic of Uzbekistan. The app and this website are operated by [COMPANY LEGAL NAME], registered at [REGISTERED ADDRESS, Tashkent, Republic of Uzbekistan], [TAX ID (STIR/INN)] (“we”, “us”). We are the owner and operator of the personal data described below.

Contact for any privacy question or request: support@pravayhq.uz or our Telegram support bot @pravayhq_support_bot.

Prava 24 is an independent learning product. It is not affiliated with, endorsed by or acting on behalf of any government agency.

2. What this policy covers

This policy covers the Prava 24 mobile apps for Android and iOS, the website pravayhq.uz, our Telegram sign-in and support bots, and our support channels. We process personal data in accordance with the Law of the Republic of Uzbekistan “On Personal Data” and other applicable law. By creating an account you consent to the processing described here; you can withdraw your consent at any time by deleting your account (see section 7).

3. Data we collect

3.1 Account and sign-in data

• Email address — if you sign in with an email code, Google or Apple. Apple may give us a private relay address if you choose “Hide My Email”.
• Sign-in identifiers — your Google account ID, Apple ID, or Telegram user ID, depending on how you sign in.
• Telegram sign-in — when you sign in through our Telegram bot and share your contact, we receive your phone number, Telegram user ID and Telegram username (if you have one).
• Profile — an automatically generated username, and your first and last name if you provide them (or if Apple/Google share them at sign-in); the learning goal and timeline you choose during onboarding.
• One-time sign-in codes — a 6-digit code sent to your email, stored with an expiry time until it is used or replaced.
• Account status — Premium status and its end date, block status, and records that link duplicate accounts of the same person (for example, when the same device first signs in to one account and later creates another via Telegram).

3.2 Learning and game data

• Exam and practice attempts: type (ticket, mock exam, topic, marathon, mistakes review), the answers you chose, score and time.
• Questions you answered incorrectly, questions you saved, daily limits usage.
• Games: daily challenge attempts, time-attack and survival sessions, duel matches and answers, your rating (ELO) and statistics. Your username, rating and results are visible to other users in duels and on the leaderboard.

3.3 AI features

When you ask the AI chat a question or request an AI explanation, the text of your request, the related exam question and your app language are sent to our AI providers (section 5) to generate the answer. On our servers we store usage counters (number of requests and tokens per day) to apply daily limits; we do not keep a history of your AI conversations in our database. Answers may be cached briefly in server memory to respond faster.

3.4 Purchases

• Orders: the Premium plan, price, discount or promo code used, and status. Payments: payment provider, provider transaction ID, amount, currency, status, time, and the technical response returned by the provider.
• Payme and Click: you pay in the provider’s app or page; we do not receive your card number.
• Paylov: the card details you enter are passed directly to Paylov to process the payment and are not stored by us. We store the phone number to which Paylov sent the SMS confirmation code.
• Apple In-App Purchase (iOS): payment is handled by Apple. We use RevenueCat to verify your purchase; RevenueCat receives your app user ID and purchase receipts.

3.5 Device, session and security data

• Device ID, device name and model, platform, OS version and app version; IP address and the approximate location (country and city) derived from it; session tokens and activity timestamps.
• Security audit records of sign-ins and account events (time, IP address, country, device ID, browser or app user agent).

3.6 Notifications and in-app messages

• Push notification token (Expo push token), device type and app version; your notification preferences; delivery and read status of notifications we send you.
• Which in-app banners were shown to you and whether you tapped them.
• The group of Premium offers assigned to you: we may show different sets of Premium plans or prices to different groups of users to evaluate offers; we record which group you were assigned to.

3.7 Diagnostics and marketing measurement in the app

• Crash reports (Sentry): when the app crashes or hits an error, a report with technical details (stack trace, device model, OS and app version) is sent to Sentry. The app is configured not to attach personal data such as IP address or user details by default.
• Meta (Facebook) App Events SDK: the app reports standard app events (such as install, app launch and purchases) to Meta so we can measure the effectiveness of our advertising. Together with these events, Meta may receive your device’s advertising identifier — on Android, unless you have reset or deleted it in system settings; on iOS, only if you have allowed tracking under Apple’s App Tracking Transparency.

3.8 Support

If you contact us, we receive your message and the contact details you use (email address or Telegram account).

4. How we use your data

We do not sell your personal data and we do not use it for automated decisions that have legal effects on you.

5. Service providers and other recipients

We share data only with providers that help us run the service, and only what they need:

We may also disclose data when required by law or by a lawful request of a competent authority of the Republic of Uzbekistan, to protect our rights or users’ safety, or as part of a merger or sale of the business (in which case this policy continues to apply).

6. Where your data is stored

Our main database and servers are located at [SERVER LOCATION — e.g. a data centre in the Republic of Uzbekistan]. Some of the providers listed above (AI providers, Sentry, Meta, RevenueCat, Resend, ipinfo.io, Expo, Google, Apple) process data on servers outside Uzbekistan. We transfer only the data needed for the specific function, and you consent to such transfers by using these features.

7. How long we keep data and what account deletion does

We keep your data while your account exists and you use the service. In particular:

• One-time sign-in codes expire after a short time and are replaced when a new code is requested.
• Expired sign-in sessions are removed automatically; Telegram sign-in requests are deleted daily.
• Payment and order records are kept for [PERIOD REQUIRED BY TAX AND ACCOUNTING LAW] even after account deletion, because the law requires it.
• Security records, notification logs and learning history currently have no separate automatic deletion schedule and are kept while the account record exists.

What happens when you delete your account

You can delete your account in the app (Profile → Settings → Delete account) or on our account deletion page. Deletion takes effect immediately:

• you are signed out on all devices and all sessions are revoked;
• nobody can sign in to the account any more, by any sign-in method.

Please note: today, deletion is a deactivation (“soft delete”). The account record and the data linked to it (email, sign-in identifiers, phone number, learning history and purchase records) remain in our database, marked as deleted, and are not anonymised automatically. Because the record remains, the same email, Google or Apple account cannot be used to register again, and we can restore the account (including progress and Premium) if you ask us to.

If you want your personal data permanently erased, write to support@pravayhq.uz from the email linked to your account (or contact @pravayhq_support_bot from the Telegram account you sign in with). We will erase or irreversibly anonymise your data within [30] days, except records we are legally required to keep (such as payment records), and confirm when it is done. Copies held by providers listed in section 5 are deleted according to their own retention schedules.

8. Your rights and choices

• Access and copy — ask us what data we hold about you.
• Correction — update your profile in the app or ask us to correct inaccurate data.
• Deletion — delete your account as described in section 7 and request full erasure.
• Withdraw consent — delete your account or stop using a feature (for example, turn off notifications in the app or in system settings).
• Advertising identifier — reset or delete it on Android (Settings → Privacy → Ads) or deny tracking on iOS (Settings → Privacy & Security → Tracking).
• Complaint — you may complain to the authorised state body for personal data protection of the Republic of Uzbekistan.

Send requests to support@pravayhq.uz. We may ask you to confirm that you own the account. We respond within [30] days.

9. Children

The service is intended for people preparing for the driving licence exam and is not directed to children under 16. We do not knowingly collect data from children under 16. If you believe a child has given us personal data, contact us and we will delete it.

10. Security

Data is transmitted over encrypted connections (HTTPS). Passwords, where they exist, are stored only as salted hashes; sign-in tokens expire and are rotated; administrative access is restricted to authorised staff and logged. No system is perfectly secure, so we cannot guarantee absolute security, but we will notify you and the competent authorities of a breach where the law requires it.

11. This website

This website does not use cookies, analytics or advertising trackers. Your theme and language choices are saved only in your browser’s local storage. Our web server keeps standard access logs (IP address, browser user agent, requested page, time) for security and to count clicks on “download” links; these logs are kept for [N] days. The account deletion page sends your email and confirmation code directly to our API and keeps the resulting sign-in token only in the page’s memory.

12. Changes and contact

We will update this policy when our practices change and will show the new effective date at the top. For significant changes we will also notify you in the app. Questions: support@pravayhq.uz.