Privacy Policy

Avtotesta (“we”, “us”) is an app for preparing for the driving licence theory exam in Uzbekistan: exam tickets, topic tests, a mock exam, road signs, video lessons and news. This policy explains what information the Avtotesta Android application (the “app”) collects, how it is used and shared, how long it is kept and what choices you have.

This policy covers the app only. The Avtotesta website (avtotesta.uz) and the Avtotesta Telegram bot are separate services: signing in there uses your Telegram account and phone number, which the app never asks for.

The app is designed to work without an account and mostly offline. This is everything it sends to our server:

• Device ID. On first launch the app creates an identifier for this installation. It is derived from Android’s app-specific identifier (ANDROID_ID) by one-way hashing (SHA-256), or generated at random if that is unavailable, so the Android identifier itself is never sent or stored. The Device ID replaces a login: it links your phone to your Avtotesta access, including PRO if you buy it, and it stays the same if you reinstall the app on the same phone.
• Basic device information. The device manufacturer and model (for example “Samsung SM-A155F”), the Android version, the app version and the platform (“android”), together with the date the Device ID was first registered and the last time the app renewed its access. The app sends these when it registers and when it renews its access token — roughly once a month.
• Language. The interface language you chose (Uzbek in Latin or Cyrillic script, or Russian), so that content and messages come back in that language.
• Purchase records. Only if you buy PRO: the plan, its price, the order status, when the order was created and paid, the payment invoice number at checkout.uz, the name of the payment method used (for example Click or Payme) and the resulting PRO period. We never receive your card number or wallet login.
• Connection data. Like any internet service, our server receives your IP address and standard request details (such as the time of the request) whenever the app connects. The IP address is used to protect the service from abuse (rate limiting) and may appear in technical server logs. It is not saved to your account and is not used to work out your location.

Information kept only on your phone

• The question bank, road signs and their pictures, downloaded so the app works without a connection.
• Your learning progress: the tests and exams you took, your answers and scores, your mistakes, saved (bookmarked) questions and statistics.
• Settings, such as the interface language, and sync information (for example when content was last updated and when your PRO ends).
• The Device ID and the access token, in Android’s encrypted secure storage.

Your progress is never sent to our server, so we cannot see your answers or results.

What we do not collect

The app does not collect or ask for: your name, phone number, e-mail address, Telegram account, password, precise or approximate location, contacts, photos, videos or other files, camera or microphone input, SMS or call logs, the list of apps on your phone, or the advertising ID.

• To let you use the app without signing up, and to recognise your phone again after a reinstall.
• To deliver the right content: the free question set, or — with PRO — the full question bank with explanations; road signs, news and video lessons.
• To process PRO purchases, confirm each payment with the payment provider and turn PRO on.
• To help you when you contact us: the Device ID on the app’s Profile screen lets our team find your access, for example to check a payment.
• To keep the service secure and working: preventing abuse, blocking accounts that misuse the service, investigating errors and keeping access tokens valid.

We do not use your information for advertising, profiling or automated decision-making, and we do not sell it.

We do not sell, rent or trade your information. It is shared only in these cases:

• Payments. When you buy PRO, our server creates an invoice at checkout.uz containing only the amount and a description of the order (the plan name and order number) — no personal details. You then pay on checkout.uz’s own page; the payment details you enter there go to checkout.uz and the payment system you choose, not to us.
• Video lessons. Some lessons are hosted on YouTube. When you play one, your device connects to YouTube directly (see Third-party services).
• Hosting. Our servers may be run by a hosting provider that stores data on our behalf.
• Legal reasons. When the law or a valid request from a competent authority requires it, or when it is needed to protect the rights and safety of our users and the service.

Within Avtotesta, only authorised staff can see account records — for example the device information and purchase records described above — and only to run the service and help users.

• All communication between the app and our server is encrypted (HTTPS). The released app refuses unencrypted connections.
• The Android identifier is hashed before use, so we never hold the original value.
• The Device ID and the access token are kept in Android’s secure storage, encrypted with the Android Keystore, and are left out of Android cloud backups and device-to-device transfers.
• Your progress and the downloaded content are stored in the app’s private storage, which other apps cannot read, and are not included in Android cloud backups.
• Access tokens expire after 90 days and are renewed automatically.
• Account and purchase records are stored in our database, which only authorised staff can access. Account creation is rate-limited, and every payment is confirmed directly with checkout.uz before PRO is turned on.

No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

• The app has no registration or sign-in screen and never asks for a password, phone number, e-mail or a social login.
• On first launch, the app exchanges its Device ID for an access token from our server, and the server creates an anonymous account for the installation. That account holds only your language, an account status and timestamps; the device information described above and any PRO purchase are linked to it.
• The Device ID is shown on the Profile screen with a copy button. It works like a key to your access: share it only with Avtotesta support.
• Reinstalling the app on the same phone brings back the same Device ID and your PRO. A factory reset or a new phone creates a new Device ID — contact us with your old Device ID if you need help with PRO you paid for.
• Because your progress is kept only on the phone, it is not restored after a reinstall or on another device.

The app uses only these Android permissions:

All of these are “normal” permissions that Android grants at installation; none of them gives access to personal data, and the app never shows a permission prompt. The app does not request location, camera, microphone, contacts, photos and media, storage, phone, SMS, calendar or notification permissions, and it explicitly removes the storage, microphone and “display over other apps” permissions that its libraries could otherwise add.

The app contains no advertising, analytics, crash-reporting or tracking SDKs — no Google Analytics, Firebase, Crashlytics, AdMob or Facebook SDK. It works with these third parties only:

• checkout.uz — processes PRO payments. Its page opens inside the app only when you choose to pay. How it handles your payment details is governed by its own terms and privacy policy and by those of the payment system you use (Click, Payme, Uzcard, Humo).
• YouTube (Google) — some video lessons are embedded from YouTube in its privacy-enhanced mode (youtube-nocookie.com). When you play such a lesson, YouTube receives your IP address and device and browser information and may store its own data in the player, under the Google Privacy Policy. Other video lessons are played directly from the address where they are hosted.
• Google Play — distributes the app and processes data about your download under Google’s own policies. Google gives us only aggregated statistics, such as install numbers and crash reports, through Google Play Console.

• The app is free to use. Optional PRO access — the full question bank with explanations and more — can be bought for a fixed period.
• Payments go through checkout.uz, whose page opens inside the app. You can pay with Click, Payme or an Uzcard or Humo card, depending on what the payment page offers. A payment app such as Click or Payme may open outside Avtotesta to finish the payment.
• We never see or store your card number, expiry date, security code or wallet password. We keep only the purchase record described in Information we collect, and we confirm each payment directly with checkout.uz before turning PRO on.
• PRO is linked to your Device ID. It is not renewed automatically: it simply ends when the paid period is over.

The app itself uses no cookies and no advertising identifiers. On your phone it keeps a private database (SQLite) for content and progress, a folder of downloaded pictures, and Android’s secure storage for the Device ID and access token — as described in Information we collect.

The checkout.uz payment page and the YouTube player run in in-app web views and may use their own cookies or web storage, under their own policies.

You can delete everything the app stores on your phone at any time: Settings → Apps → Avtotesta → Storage → Clear storage, or uninstall the app.

The app is meant for people preparing for the driving licence exam and is not directed at children under 13. We do not knowingly collect personal information from children, and the app does not ask anyone for their name, contact details or age. If you believe a child has made a purchase or shared information through the app, contact us and we will delete the related data.

• Information on your phone stays there until you clear the app’s storage or uninstall it.
• Your account and device records on our server are kept while you use the app, and deleted when you ask us to (see Data deletion).
• Purchase records may be kept longer where the law requires it for accounting or tax, or to resolve disputes — and only as long as required.
• Technical server logs are kept only as long as needed for security and troubleshooting.

You can have your Avtotesta data deleted at any time. There is no sign-up, so deleting your data also deletes your account.

Delete the data on your phone

Open Settings → Apps → Avtotesta → Storage → Clear storage, or uninstall the app. This removes your progress, the downloaded content, the Device ID and the access token from the phone.

Ask us to delete your account and server data

1. Open the app, go to the Profile tab and copy your Device ID. If you have already uninstalled the app, install it again on the same phone — it shows the same Device ID.
2. Send the Device ID to us on Telegram (@avtotest_uz) with the words “Delete my data”.
3. We confirm your request and delete the data within 30 days.

What is deleted

Your anonymous account, the device records linked to it (Device ID, device model, Android version, app version and dates) and any remaining PRO period.

What may be kept

Payment records (order, amount, date and the checkout.uz invoice number) where we must keep them for accounting, tax or legal reasons or to resolve a dispute, only as long as required. They contain no card details.

A deleted PRO period cannot be restored. If you open the app again on the same phone afterwards, it starts with a new, empty account.

Depending on the law that applies to you — including the Law of the Republic of Uzbekistan “On Personal Data” — you may have the right to:

• know what personal data we hold about you and receive a copy of it;
• have inaccurate data corrected;
• have your data deleted;
• withdraw your consent or object to the processing of your data;
• complain to the authority responsible for personal data protection.

To use any of these rights, contact us and include your Device ID: the app knows nothing else about you, so the Device ID is the only way to find your data. We answer within 30 days.

We may update this policy when the app or the law changes. The current version is always on this page, with its effective date at the top. If a change is significant, we will also announce it in the app’s news section or in the release notes on Google Play.

For questions, requests or complaints about privacy, contact us:

• Telegram: @avtotest_uz
• Telegram bot: @avtotest_uz_bot
• Website: avtotesta.uz

If your request is about your data, please include the Device ID from the app’s Profile screen.