CDL Test Prep: Permit by State
Legal

Privacy Policy

Last updated 14 October 2026

CDL Test Prep: Permit by State is a study app developed by HDFoundry. This policy explains in plain English what data the app collects, why, who receives it, and how to ask us to delete it. Effective date: 14 October 2026.

The short version

There are no user accounts and no sign-up, and the app never asks for your name or email. When you first open it, the app creates a random anonymous install ID and a device token. We use them to run the app, not to identify you. Your study progress is stored on your device. The app shows ads, uses Google Firebase for analytics and crash reports, and offers a one-time purchase. We never receive your payment card details.

Data we collect, and why

Data the app sends to our server

  • Anonymous install ID and device token. Created by the app on first launch. Used to recognise the same installation, restore a purchase, send you notifications, and prevent abuse.
  • Question reports. If you report a question, the text you write, the question concerned, and your install ID are sent so we can review and fix the content. You are notified by push when it is fixed. Please do not put personal details in a report.
  • Study statistics. Study activity such as practice and exam results and which questions you answer is sent to our server to improve question quality. It is tied to your install ID, not to your name.
  • Basic device and app information. App version, platform (iOS or Android), operating system version and language, sent with these requests.

Google Firebase

The app uses these Firebase services (see Firebase privacy and security information):

  • Analytics collects usage events (screens viewed, features used) and device and app information such as device model, operating system, app version and approximate location derived from your IP address. It uses an app instance ID and, where you allow it, the advertising ID.
  • Crashlytics collects crash reports and diagnostic data: stack traces, device model, operating system version, memory and storage state, and the app state at the time of the crash.
  • Performance Monitoring collects performance traces, such as app start time and network request duration, along with device and app information.
  • Remote Config downloads settings from us (for example maintenance or update notices). It sends the app instance ID and basic device and app information to select the right settings.
  • Cloud Messaging assigns a push token (FCM token) to your device so we can send notifications, such as telling you a reported question was fixed. You can turn notifications off in your device settings.

Advertising

The app is free to use with ads. Ads are served through Unity LevelPlay mediation, which requests ads from several ad networks (see Unity's Privacy Policy). To show and measure ads, LevelPlay and its networks receive your advertising ID (the Android Advertising ID, or the iOS IDFA if you allow tracking), your IP address and approximate location, device information, and ad interaction data such as which ads were shown, clicked or completed. They may use this to show personalised ads and to measure and prevent fraud.

Consent and opting out.

  • iOS: the app asks for App Tracking Transparency permission before ads load. If you decline, the IDFA is not used. You can change this any time in iOS Settings, Privacy & Security, Tracking.
  • Android: in Settings, Google, Ads, you can reset or delete your advertising ID and opt out of ads personalisation.
  • In the app: open Settings and use the ad privacy entry to review or change your personalised ads choice.

Opting out does not remove ads. It makes them less relevant to you.

In-app purchase

The app offers a one-time purchase called "CDL Pass", processed by Google Play or the Apple App Store. Payment is handled entirely by the store, so we never receive your card or billing details. After a purchase, the app sends the purchase token or transaction ID to our server to verify it with the store and unlock the pass. One purchase can be linked to up to 2 installs of the app, so you can use it on a second device or after reinstalling. See Google's Privacy Policy and Apple's Privacy Policy for how the stores handle your data.

Study progress and offline use

Questions are stored on your device for offline study and your study progress is kept on the device. Uninstalling the app removes that local data.

How long we keep data

Question reports, study statistics and purchase verification records are kept only as long as needed to run and improve the app, to honour your purchase, and to meet legal obligations, and are then deleted or anonymised. Firebase and advertising data are kept under the retention periods set by those providers. Data on your device stays until you uninstall the app or clear its storage.

Security

Data between the app and our server is sent over HTTPS. No method of transmission or storage is completely secure, but we limit access to the data we hold and keep secrets out of the app.

Sharing

We do not sell your personal information. Data is shared only with the service providers described above (Google Firebase, Unity LevelPlay and its ad networks, Google Play and Apple), when required by law, or to protect our rights and prevent fraud.

International transfers

We and our providers process data in the United States and other countries, which may have different data protection laws from yours. Where required, transfers rely on safeguards offered by those providers.

Children

The app is for people aged 18 and over and is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided data, contact us and we will delete it.

Your rights and deletion requests

Depending on where you live, you may have the right to access, correct, delete or restrict use of your data, to object to its use, and to withdraw consent (for example for personalised ads, as described above). Because we do not know who you are, we need a way to find your records:

  • Email [email protected] with the subject "Data deletion request".
  • Include your device's purchase receipt (the Google Play order number or the App Store receipt) if you bought the CDL Pass, plus your device platform and approximate dates of use. We use these to locate the install records linked to you.
  • Do not send passwords or payment card numbers.

We will reply within a reasonable time, and within any period the law requires. Data held by Google, Unity or the ad networks can also be managed through those providers' own tools.

Government affiliation

CDL Test Prep: Permit by State is an independent study aid, not affiliated with any government agency, state DMV, FMCSA, the U.S. DOT, or AAMVA.

Changes to this policy

We may update this policy when the app or its data practices change. The effective date at the top of this page shows when it was last updated.

Contact

Questions about this policy: [email protected].