Get the app
Draft for reviewThis page is a draft that our solicitor hasn’t reviewed yet, so it may change. Text in [square brackets] is still to be confirmed.

Privacy policy

Who we are

DTSwap is run by [COMPANY NAME], a company registered in [England and Wales] (company number [NUMBER]), registered office [ADDRESS]. We are the controller of your personal data. Contact: support@dtswap.co.uk. [ICO registration number: NUMBER.]

DTSwap is an independent service. It is not affiliated with, endorsed by or connected to the Driver and Vehicle Standards Agency (DVSA) or GOV.UK. We never contact DVSA or use its booking system on your behalf.

What we collect and why

What Why Lawful basis [solicitor to confirm]
Mobile number To sign you in with a one-time code, and because it must match your DVSA booking Contract
First name and email address To run your account, and to email you if a notification can’t reach your phone Contract
Your test details: centre, original centre, date, time, test type, changes used, preferred dates and centres To find learners you can swap with under DVSA’s rules Contract
Your DVSA booking reference To give it to the learner you’ve matched with on your call day, which DVSA’s swap process requires Contract
A screenshot or PDF of your booking To check your booking is real before other learners see it Legitimate interests (preventing fake listings)
Your swipes, matches, the preset messages you send, your call plan and outcome To run matches and the swap Contract
Reports you make or receive, strikes, and our notes To keep the service safe and deal with no-shows and misuse Legitimate interests
Membership status (from the App Store, Google Play or Stripe) To give members access Contract
Push notification token To send you swap updates if you allow notifications Contract / consent through your device setting
Crash and performance reports, without your name, number or booking details To fix bugs Legitimate interests

We never ask for your driving licence number, theory test certificate number, address or payment card details. Card payments are handled by Apple, Google or Stripe; we only learn whether your membership is active.

Who can see your information

  • Other learners see your test centre, date, time and test type, how many swaps you’ve completed and any strikes, but never your name, phone number or email. The learner you match with sees your booking reference on your call day only, and it’s hidden again when the match ends.
  • Our team can see account details, listings, matches and proofs to check bookings, handle reports and resolve disputes. Admin access needs two-factor sign-in and every admin action is logged.
  • Service providers process data for us under contract:
Provider What for Where
Supabase Database, sign-in, file storage UK (London region)
Twilio Sending sign-in codes by SMS [USA: confirm transfer safeguards]
Expo (650 Industries) Push notifications, app updates USA
Resend Email notifications [confirm region]
Stripe Web payments UK/EU and USA
Apple, Google, RevenueCat In-app purchases USA / global
Sentry Crash reports EU (Germany)
Vercel Hosting the website and web app Global
Cloudflare Domain and email forwarding Global

[Solicitor: describe safeguards for transfers outside the UK, e.g. the UK International Data Transfer Agreement / Addendum or the UK–US data bridge, per provider.]

We don’t sell your data, show ads or track you across other apps or websites.

How long we keep it

  • Booking screenshots: deleted 30 days after we’ve reviewed them.
  • Booking references: kept encrypted while your listing exists; deleted with your account.
  • Listings close automatically once the test date has passed.
  • Your account and everything linked to it: until you delete your account. [Solicitor: confirm whether to delete inactive accounts after a period, e.g. 12 months.]
  • Payment records are kept by Apple, Google or Stripe as the law requires.

Your rights

You can access, correct, delete or object to our use of your data, ask us to restrict it, or ask for a copy. Delete your account any time in the app (Account → Delete my account) or at dtswap.co.uk. Store memberships must be cancelled in your App Store or Google Play settings, and we’ll remind you. Contact support@dtswap.co.uk for anything else. You can complain to the Information Commissioner’s Office (ico.org.uk).

Security

Booking references are encrypted in our database, sign-in sessions are encrypted on your phone, and all connections use HTTPS. Access to data is restricted by role.

Children

DTSwap is for learner drivers aged [16/17] and over. [Solicitor: confirm minimum age and whether the ICO Children’s Code applies.]

This website

This website doesn’t use cookies, analytics or tracking. Its fonts are served from our own domain, so loading a page doesn’t send your IP address to Google or anyone else. Our host, Vercel, keeps standard server logs to run and protect the service. [Solicitor: confirm Vercel’s log retention wording.]

Changes

We’ll tell you in the app before any important change to this policy. Last updated: [DATE].