PermitoPrivacy Policy
This policy covers the Permito app and the website permito.app. Permito is published by FireX Co., Ltd.; we wrote this policy to be short and plain. If something is unclear, write to us at support@permito.app.
The short version
- We collect five things: a random device ID and your purchase history (to run your pass), a separate random analytics ID with anonymous usage events (to understand how the app is used), and crash data (only the type of error, the screen and the app version, to fix crashes). All five are linked to you in the sense Apple uses, because they are kept under an ID.
- We do not use anything to track you across other companies’ apps or websites.
- No ads. No ad, attribution or third-party analytics SDKs. The app sends usage events only to our own server. We do not sell your data.
- You can turn usage sharing off, or reset the analytics ID, in Settings.
- Your progress, answers and settings stay on your phone.
- Anyone under 13 is stopped at setup and nothing is saved.
What we collect
| Data | What it is | Why | Linked to you | Used for tracking |
|---|---|---|---|---|
| Device ID (User ID) | A random ID the app makes on your phone. It is also the ID our purchase provider, RevenueCat, uses for you. | App functionality: knowing which passes belong to this phone. | Yes | No |
| Purchase history | Which passes were bought with that ID. RevenueCat keeps this record. | App functionality: restoring a pass you bought. | Yes | No |
| Analytics ID (Device ID) | A second random ID the app makes for itself the first time it opens and keeps in its settings on your phone. It is not the device ID above, it is not the ID RevenueCat uses, and it is never sent to RevenueCat or stored next to purchase data. | Analytics: telling how many different people use the app and whether they come back. | Yes | No |
| Product interaction | Which screens and features are used (for example onboarding steps, practice and mock exam sessions and their scores, paywall views), with the app version, platform, app language and your state. Never your name or anything you type. | Analytics: improving the app. | Yes | No |
| Crash data | If the app hits an error and shows its error screen: the type of error (for example TypeError), which screen it was on, and the app version. Never the error text, your answers or anything you type. | App functionality: finding and fixing crashes. | Yes | No |
Nothing else is collected. No name, email, phone number, location, contacts, photos, health data, financial details, browsing history or advertising ID. There is no account to create.
These answers are the same ones we give Apple in the App Store privacy details and in the app’s privacy manifest, and the same data is declared in Google Play’s Data safety form.
What stays on your phone
Your practice answers, exam results, bookmarks, streak, study plan, exam date, profile names, age range and settings are stored in a database on your phone. We never receive them. Reminders, including the one a few days before a pass ends, are scheduled on the phone and do not use a push token. The note that a Permit Pass already got its 30 extra days is kept in the same database on your phone.
The questions you answer and the results you get stay on the phone. Only counts such as how many questions a practice session had and how many were right leave it, as usage events.
If you tap Contact us or Report a problem, the app opens an email that you can read and edit before you send it. A support email includes the first 8 characters of your device ID, the app version, your plan, your phone model, the iOS or Android version and your language. A question report includes the question number and your state. Nothing is sent unless you send the email.
Who else handles data
- Apple and Google process your payment and keep their own purchase records under their own policies. We never see your card or Apple Account details.
- RevenueCat receives your device ID and purchase receipts so it can tell the app which pass you own.
- Cloudflare hosts this website and handles ordinary web server logs (such as IP address and page requested) when you visit it. The website has no ads.
- Our own usage server on Cloudflare receives the app’s anonymous usage events and the analytics ID in the app, to improve the app. The ID is used only to understand how the app is used, for example whether people come back. It is not shared with anyone, not combined with purchase data and not used for ads or tracking. We do not store your IP address with these events. You can reset the ID or turn this off in Settings, under Privacy.
- Google Analytics counts visits to this website (pages viewed, rough location, device type, where the visit came from) so we know which pages help. It sets first-party cookies on permito.app. We turned off Google signals and ad personalization, so the data is not used for ads. This is the website only. It is separate from the app’s usage events above and never receives the analytics ID.
We do not sell personal information, and we do not share it for advertising.
Children and teens
Permito is for learners age 13 and up. It is not directed to children under 13 and is not in the App Store Kids category.
- Under 13: the app asks for an age range during setup. If it is under 13, setup stops and nothing you entered is saved.
- 13 to 17: the most private settings are the default. There are no ads, no tracking and no data sales at any age. The age range is kept on the phone and is never sent to us and is not part of any usage event.
- Parents: there is no parent account and no parent login. A learner can send a progress report to a parent. Passes are bought through Apple or Google, so the store’s own family controls, such as Ask to Buy, apply.
If you believe a child under 13 has given us information, write to support@permito.app and we will delete it. If your phone shares an age range through Apple’s age tools, the app uses it only to set defaults on the phone.
Delete your data
- On your phone: in the app, open Settings, then Your data, then Reset progress. This removes your answers, reviews, mock exam results, bookmarks and streak. Deleting the app removes everything stored on the phone.
- Usage data: turn off Share usage data in Settings and the app sends nothing and forgets the analytics ID. Reset analytics ID makes a new one, so earlier events cannot be tied to what you do next. We cannot tell which person an analytics ID belongs to, so we cannot look one up by name or email.
- What we keep under your device ID: the device ID and purchase record. To have them deleted, email support@permito.app from the same phone using Contact us in Settings (it adds the first 8 characters of your ID), or tell us that code. We will delete them within 45 days. Apple and Google keep their own payment records, which we cannot delete.
If a record has to stay for tax or legal reasons, we keep only that part and tell you.
How long we keep it
The device ID and purchase record stay for as long as they are needed to restore your purchases and to meet legal and accounting duties, or until you ask us to delete them. Usage events are kept for up to 3 months and then deleted automatically. Data on your phone stays until you reset progress or delete the app.
California (CCPA and CPRA)
In the past 12 months we collected three categories of personal information: identifiers (the device ID and the analytics ID), commercial information (purchase history) and internet or app activity (usage events). We use them only to run and improve the app. We do not sell personal information, do not share it for cross-context behavioral advertising and do not collect sensitive personal information.
California residents can ask what we hold, ask us to delete or correct it, and will not be treated differently for asking. Email support@permito.app. An authorized agent can write on your behalf. We offer the same rights to everyone in the United States, whether or not a state law requires it.
Other US state laws
Several states, including Colorado, Connecticut, Oregon, Texas, Virginia and others, give residents rights to access, correct and delete data and to opt out of targeted ads and sales. We do none of the latter, and you can use the access and deletion routes above from any state. Some states add protections for teens; the design above (no ads, no tracking, minimal data) is how we meet them. Under state app store age laws, Apple or Google handles age checks and parent consent for downloads and purchases.
Security
Data sent between the app and our providers travels over encrypted connections. No system is perfectly secure, and we keep very little to protect.
Changes
If this policy changes in a way that matters, we will update the date above and, for larger changes, say so in the app. The App Store privacy details will be updated at the same time.
Contact
support@permito.app
FireX Co., Ltd., 302-46, 7 Yonggudae-ro 2790beon-gil, Suji-gu, Yongin-si, Gyeonggi-do, Republic of Korea