Privacy Policy

The short version

• Lesson Flow helps independent driving instructors run their lessons, payments and learner progress.
• We only collect what the app needs to work. We don’t sell data, show adverts or use your data to train AI models.
• You can download everything we hold about you, or delete your account, at any time from inside the app.

Who we are

Lesson Flow (“we”, “us”) runs the Lesson Flow app at lessonflow.uk. Contact us at hello@lessonflow.uk.

Instructors: for your own account details we are the data controller.

Learners: your instructor decides what to record about you and is the data controller for that information. Lesson Flow stores and processes it on their behalf as a data processor. If you have a question about what your instructor holds, ask them first — we’ll help them answer.

What we collect

Instructors

• Name, email, phone number, school name, hourly rate and working hours
• Your sign-in details (passwords are stored hashed by our authentication provider — we can’t see them)
• Notification settings, and a push subscription for each device where you turn notifications on

Learners (entered by an instructor, or by you on an instructor’s booking page)

• Name, email, phone number and, if given, driving licence number
• Lessons: dates, times, pickup locations and status
• Lesson reports, skill progress levels, test date and test centre
• Payments and receipts, including prepaid blocks of lessons
• Lesson requests and any reasons given for declining them
• If you use the learner portal: your sign-in email and push subscriptions for your devices

Contact form

• If you message us at lessonflow.uk/contact: your name, email, whether you’re an instructor or learner, and your message. We use it only to reply, and delete it when it’s no longer needed.

Technical data

• Basic logs our hosting providers keep for security and reliability (for example IP address, browser and time of request)
• Error reports when something breaks, so we can fix it. These include the page and the error message, not your lesson content.

We don’t take card payments in the app. If you pay your instructor, Lesson Flow only records that a payment was made, its amount and method.

How we use it

• To run the app: showing your diary, sending lesson confirmations, reminders, receipts and reports
• To send notifications you’ve switched on (email and, if you allow it, push notifications on your device)
• To keep the service secure and working, and to fix errors
• To contact instructors about their account, billing and important changes

We never sell personal data, use it for advertising, or share it except with the providers listed below.

Legal basis

• Contract — to provide the service an instructor has signed up for
• Legitimate interests — security, preventing misuse, fixing errors and improving the app
• Consent — push notifications (you can turn these off at any time on each device)
• Legal obligation — keeping records where the law requires it

Providers we use

Some of these providers may process data outside the UK. Where they do, the transfer is protected by UK-approved safeguards such as the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework.

How long we keep it

• While an instructor’s account is open, we keep their data and their learners’ records so the app works.
• When an instructor deletes their account in Settings, their school, learners, lessons, payments and reports are deleted straight away. Backups held by our database provider roll off within a short period after that.
• Instructors are responsible for keeping their own financial records for tax. Use “Export” on the Payments page to download them before deleting your account.
• Learners can delete their portal login at any time from the Updates page. The instructor keeps their own lesson records unless you ask them to remove them.

Your rights

Under UK GDPR you can ask to access, correct, delete, restrict or move your data, and object to how it’s used.

• Download your data — Settings → Account (instructors) or Updates → Your account (learners)
• Delete your account — in the same place
• For anything else, email hello@lessonflow.uk. We reply within one month.

You can also complain to the Information Commissioner’s Office at ico.org.uk.

Cookies and storage

We only use what’s needed to keep you signed in and the app working on your device. No advertising or tracking cookies. See the Cookie Policy.

Security

All traffic is encrypted (HTTPS). Every table is protected by row-level security, so an instructor can only ever see their own learners, and a learner only their own lessons. Calendar feed links are private and can be replaced at any time in Settings. No system is perfectly secure, but we take care to keep your data safe and will tell affected users promptly if something goes wrong.

Changes

If we make a significant change we’ll email instructors before it takes effect. The date at the top shows the latest version.