路感 Roadfeel 隐私政策

生效日期：2026-11-06 · 最后更新：2026-10-30

我们是谁

路感（Roadfeel）由 Dongmei Yang（个人）运营（下称「我们」）。有问题或请求，请写信到 support@roadfeel.app。

本政策适用于 roadfeel.app（包括 roadfeel.app/app/ 上的路感网页应用）和路感 iPhone 应用。

一句话版本

• 账号是可选的。不登录时，你的学习进度和设置只存在这台设备上，我们看不到。在网页上登录后，我们在服务器上保存一份你的进度，用来同步到你的其他设备；你随时可以删除账号和这份进度。
• 在网页上付款，卖方是 Creem：付款页由它运行，银行卡由它处理。我们保存你的邮箱和购买记录，用来在你的其他设备上恢复购买、办理退款和保留记录。
• 在 iPhone 应用里付款，由 Apple 收款，我们拿不到这笔购买的任何个人信息。
• 不卖数据，没有广告。我们不出售你的信息，不拿它做定向广告，路感也不显示广告。
• 分享和推荐：用朋友码买的，我们只记下用了哪个码；从分享链接来买的，只算进匿名的总数；从合作伙伴的推荐链接来的，由 Creem 算给推荐人。我们不把你的姓名或邮箱告诉分享的人或合作伙伴。
• 还有几家公司参与：Cloudflare、Resend 和我们的邮箱服务商帮我们运行路感，Creem 和 Apple 负责收款。下面逐一列出。
• 你说了算。你可以清除设备上的全部数据，也可以要求我们告诉你我们有你哪些信息，或要求更正、删除。

只留在你设备上的数据

下面这些内容存在你设备上浏览器的本地存储（localStorage）里；iPhone 应用则存在它自己在设备上的存储里。不登录时，它们不会发给我们，只有网页上的这几个例外：

• 应用每天会拿许可凭证向我们的服务器核对一次；
• 付款还没完成时，应用会向服务器查询付款状态，直到模块解锁（见下一张表）；
• 你去付款时，如果这台设备上存着朋友码，或者最近 30 天是从分享卡的链接进来的，应用会把这个朋友码，或者「分享」这个类别，一起发给服务器（见下一张表和「网站统计」）。「分享」只加进去付款次数的总数，不转给 Creem，也不记进购买记录。

在网页上登录以后，你的学习进度和设置还会同步到我们的服务器（见「我们收集什么」表里的「账号和进度副本」），这台设备上的许可凭证也会交给服务器，挂到你的账号上。最近的搜索、出错记录、声音、触感和 3D 画质只留在这台设备上，不同步。

内容	用途
学习进度：学完的课、答题记录和复习安排、模拟考分数、已掌握的考点、学习的日子、练车记录、模拟器和考场实景练习的成绩、你自己标记的「我考过了」、最近的搜索	下次打开能接着学
设置：语言、在哪个州考、学习目标、考试日期（选填）、「你的情况」（比如未满 18 岁、刚到美国）、声音、显示模式、3D 画质	让应用显示适合你的规则和课程
网页上已付费模块的许可凭证：购买编号、州和档位、签发日期，以及由你的邮箱生成的单向代码（不是邮箱本身）。在 iPhone 应用里，购买由 Apple 记录	解锁付费模块，离线也能用
网页上最多 30 天内尚未完成的付款，包括 请家人代付（未满 18 岁的显示为 请家长付款）用的一个秘密代码	你或替你付款的人付完款后自动解锁
朋友码：你从朋友分享的链接打开路感时，链接里的码。最多保存 30 天；你买了，或者这个码用不了时删除	付款时给你朋友价
出错记录：应用最近遇到的 10 个错误	只会随你发出的问题报告一起发送，而且「附上技术信息」要保持勾选。这一项默认是勾选的，发送前你能看到要发的全部内容
导入进度前的原有进度：从文件或另一台设备导入进度之前，应用会在你的设备上保留一份原有进度	方便你撤销这次导入。14 天后自动删除，不会上传

打开 3D 场景前，应用会在本机读取显卡型号、内存、处理器核数和屏幕尺寸，用来挑一个流畅的画质档位。这些信息不会离开你的设备。

我们收集什么、为什么、保存多久

信息	什么时候	用途	保存多久	还有谁经手
邮箱	在网页上付款时（你在 Creem 的付款页填写）、恢复购买时、登录时，或你写信给我们时	登录验证码、恢复码、退款、客服、账号长期不用时删除前的提醒、防止欺诈（包括朋友码的「自己推荐自己」）	随购买记录（下一行）保存；登录用的邮箱随账号保存（见「账号和进度副本」一行）；或按客服邮件的期限（见下文）	Creem、Cloudflare、Resend
购买记录：购买编号、州、档位、金额、币种、日期、这笔付款的交易编号（Creem 的订单号和结账编号）、是否由别人代付（请家人代付）、付款时用的优惠码（如有）、退款或争议状态	网页付款完成时	你的使用许可、退款、记账和纳税，以及核对优惠码的折扣、按优惠码统计销售	从记录之日起保存 7 年（Creem 要求商户把售出记录保存 7 年），之后删除	Creem；存放在 Cloudflare 的数据库里
朋友码：你在网页上的购买对应的朋友码；朋友用你的码付款时，他的购买记录会关联到这个码，以及这次使用的状态（待定、已过退款期、作废）；你得到的免费升级，记成一条金额为 0 的购买记录	你第一次打开「邀请朋友」时生成；朋友用码付款时关联	给朋友立减；数有几位朋友付了款、是否过了退款期，并发放你的免费升级；防止自己推荐自己和其他滥用（比较付款邮箱是否相同）	随相关的购买记录保存，最长 7 年	Cloudflare（数据库）；Creem 收到朋友价，以及结账信息里的码
姓名、账单地址和付款信息，以及用于反欺诈的设备和网络信息	在 Creem 的付款页上（网页），或在 Apple 的购买界面里（iPhone 应用）	付款、防止欺诈	按 Creem 或 Apple 的隐私政策。我们从来拿不到你的银行卡信息	Creem 和与它合作的支付公司；Apple
恢复购买请求：你的邮箱和一次性恢复码（我们只保存恢复码的单向代码）	你点 恢复购买 时	确认你能收到这个邮箱的邮件，再解锁	恢复码只能用一次，30 分钟内有效；过期约一天后删除记录	Resend 负责发信，保留 30 天副本
账号和进度副本：你登录用的邮箱；你的学习进度和设置（上文「只留在你设备上的数据」表里前两行的内容，不含最近的搜索、声音、触感和 3D 画质），压缩保存；账号的创建日期和最后使用的日期；哪些购买挂在这个账号上	你在网页上登录时，之后每次同步时	让你在多台设备上接着学；让买过的跟着账号	到你删除账号为止（见「你的选择和权利」）。连续 24 个月没有使用这个账号（没有登录，也没有同步）的，我们先发邮件提醒你；提醒后 30 天内仍没有使用的，删除账号和进度副本。购买记录按上文另行保存	Cloudflare（存放）
登录验证码：你邮箱的单向代码和验证码的单向代码	你点「发送验证码」时	确认你能收到这个邮箱的邮件	验证码 15 分钟内有效，只能用一次，输错 5 次作废；过期约一天后删除记录	Resend 负责发信，保留 30 天副本
登录会话：一个随机令牌的单向代码，以及创建日期和最后使用的日期	登录时	保持登录	最长 180 天（每天第一次使用时重新计算）；退出登录或删除账号时立即删除	Cloudflare
IP 地址和基本请求信息（浏览器、页面、时间）	浏览器每次加载路感，或浏览器、应用连接我们的服务器时	提供网站、安全、限制滥用	我们从不保存原始 IP 地址。限流只保存它的加密单向代码（登录和恢复购买时，还有你邮箱的加密单向代码），最长 2 天	Cloudflare，按它自己的政策
每日许可核对：你的许可凭证	网页上每天自动一次	让已退款或被拒付的购买失效	不保存，上面的限流代码除外	Cloudflare
你发给我们的邮件，和用邮件发来的问题报告：你的邮箱、你写的内容；保留勾选时还有技术信息（应用版本、语言、州、屏幕尺寸、浏览器、时间、最近的错误）；你另外勾选时还有学习进度摘要（只有数量）	你写信或发报告时	回复你、修问题	最后一次回复后最多 24 个月	Cloudflare（邮件转发）和存放我们收件箱的邮箱服务商
在网页应用里用 发送 交来的问题报告和建议：你选的类型、你写的内容、你留的回复邮箱（选填），以及你是从哪一课的哪一步或哪道题打开的，从搜索打开的还有当时的搜索词（发送前你能看到）；保留勾选时还有技术信息（同上一行）和最近的错误；你另外勾选时还有学习进度摘要（只有数量）	你在网页应用（roadfeel.app）的问题报告表单里点 发送 时	改正内容、修问题；你留了邮箱的，回复你。表单还会带上一个在你设备上随机生成的码，用来限制一台设备每小时能发几次：它不和报告存在一起，限流只保存它的加密单向代码，最长 2 天	收到后保存 12 个月，到期自动删除	存在我们放在 Cloudflare 的数据库里。问题报告由运营者 Dongmei Yang 本人，以及她请来帮忙维护路感的人查看；维护时会用 AI 工具（Anthropic 的 Claude）读取报告。
我们的服务器日志：只有事件名称和计数，没有邮箱、IP 地址、恢复码或凭证	服务器运行时	发现和修复错误	最多 7 天	Cloudflare
内测登录 Cookie（__Host-rf_beta）	仅限内测期间	记住你的邀请码	30 天	无
匿名统计：只有每天的总数（见下文「网站统计」）	本政策生效后，在网站或应用里打开页面或做这些事时	知道哪些内容有用、哪里要改	约 13 个月	存在我们放在 Cloudflare 的数据库里

朋友码：你只能看到有几位朋友付了款、几位过了退款期，看不到他们是谁；朋友也看不到你的邮箱。

进度副本：服务器只把它原样压缩保存、发回给你登录的设备，不拿它做统计或别的用途。

付款

网页：Creem

• Creem（Armitage Labs OÜ，位于爱沙尼亚）以「记账卖方」（merchant of record）的身份在网页上销售路感的付费模块。也就是说，卖方是 Creem：付款页由它运行，钱由它收，销售税由它计算和缴纳，收据也由它发邮件给你。
• Creem 在它的付款页上收集你的姓名、邮箱、账单地址和付款信息，以及它用来防止欺诈的设备和网络信息。我们从来看不到你的银行卡信息。
• Creem 会把你的姓名、邮箱和国家、你买了什么，以及这笔订单在 Creem 的编号告诉我们。我们保存你的邮箱和上文所说的购买记录，不保存你的姓名和国家。
• Creem 是一家独立的公司，按《Creem 隐私声明》和《Creem 买方条款》自行决定怎样使用它收集的信息。

合作伙伴推荐链接（Creem 联盟）

• 有的合作伙伴（例如驾校、教练）通过 Creem 的联盟计划推荐路感：你从他们的链接来、在网页上购买，Creem 从这笔销售里付给他们佣金。你付的价格不变。
• 推荐链接先打开 Creem 的网站。Creem 在你的浏览器里、它自己的域名下存一个推荐 Cookie（有效 60 天），再把你带到路感，网址后面带着 Creem 的推荐标记（creem_ref）。60 天内你在同一个浏览器里用 Creem 的付款页付款，Creem 就把这笔算给那位合作伙伴。
• 我们不读取、不保存这个推荐标记，也不把你的姓名、邮箱或学习进度交给合作伙伴。按 Creem 的说明，合作伙伴在 Creem 后台看到的是点击数、带来的顾客人数、销售额和佣金。
• 这个 Cookie 是 Creem 设的，按《Creem 隐私声明》处理。不想被算进推荐，可以直接打开 roadfeel.app，不点推荐链接，或者在浏览器里清除 creem.io 的 Cookie。

iPhone 应用：Apple

• 在 iPhone 应用里购买，走 Apple 的 App Store。由 Apple 收款，你的付款信息按 Apple 自己的条款和《Apple 隐私政策》处理。
• 应用在你的设备上向 Apple 核对购买。我们拿不到这些购买的任何个人信息：应用只会把它们计入「网站统计」一节说的匿名计数（开始付款和付款成功的次数）。

Stripe：目前不用。以后网页收款可能会用；如果要用，我们会先更新本政策。

我们和谁共享信息

• 服务商：替我们处理信息的 Cloudflare（托管、安全、存放购买记录、账号和进度副本、朋友码、匿名统计和问题报告的数据库、邮件转发）、Resend（登录验证码，和网页购买的恢复购买邮件）、我们的邮箱服务商（客服收件箱），以及 Anthropic（AI 工具 Claude 的提供方：维护时用它读取问题报告，只在读报告时经手）。
• Creem 和 Apple：它们销售路感的付费模块（见「付款」）。在网页上，我们会把你要买的东西告诉 Creem，好让它的付款页按这个收费；用了朋友码时，还有朋友价和这个码。
• 合作伙伴（例如驾校、教练）：我们不把你的任何信息交给他们。推荐算给谁，由 Creem 用它自己的推荐 Cookie 来算（见「付款」）。
• 朋友码的主人：只看到有几位朋友付了款、几位过了退款期，看不到你是谁。
• 法律要求时，或为了保护他人安全、防止欺诈、维护我们的权利。
• 路感被出售，或转到我们拥有的公司名下时。本政策会继续适用于你的信息。

按加州法律的定义，我们不「出售」个人信息，也不为跨情境行为广告「共享」个人信息；我们也不把个人信息提供给别人做他们自己的营销。

我们不做的事

• 不要你的姓名、电话、住址、精确位置、通讯录或照片。
• 我们自己不用广告或追踪工具，路感不显示广告。（从合作伙伴推荐链接来的，Creem 会设一个推荐 Cookie，见「付款」。）
• 不跨网站、跨应用追踪你。

Cookie 和类似技术

• 学习进度存在浏览器的本地存储里（见上文），不在 Cookie 里。我们不用广告或统计 Cookie。
• 在网页上登录后，__Host-rf_s Cookie 让你保持登录，最长 180 天，退出时删除。它是登录所必需的，只用来认出你的登录。
• 内测期间，__Host-rf_beta Cookie 让你保持登录 30 天。
• Cloudflare 可能设置严格必要的安全 Cookie。Creem 的付款页会用它自己的 Cookie 和设备信息来完成付款和防止欺诈。你从合作伙伴的推荐链接来的，Creem 还会在它自己的域名下存一个推荐 Cookie，有效 60 天（见「付款」）。

网站统计

自本政策生效之日起，我们在自己的服务器上统计匿名的每日总数，用来知道哪些内容有用、哪里要改。统计这几类：

• 访问：每天有多少台设备打开网站或应用、其中多少是第一次来、第 1/3/7/14/30 天回来的有多少；每次用了多久（按「不到 1 分钟」「1–5 分钟」这样的区间）；设备大类（手机、平板、电脑，浏览器、主屏幕 App 还是 iPhone 应用）。
• 来源：访问来自哪个网站（只记网站名，比如 google.com）、链接里的活动标签（utm 参数）、每次访问的第一个页面。
• 使用：每个页面或屏幕打开几次；哪些按钮被点了几次；网站页面读到多深；每一课开始和学完的次数；每类题答对和答错的次数；模拟考分数落在哪个区间；搜索有没有找到结果（不记搜索的内容）。
• 付费：付费页打开几次、在哪里打开、点了哪个选项、去付款和付款成功的次数，其中多少来自分享链接、多少用了朋友码（只有总数）。
• 登录和邀请：发了几次登录验证码、登录成功几次（新账号还是老账号）、删除了几个账号；朋友链接打开、朋友码生成、使用、付款、过退款期、发放升级的次数；分享卡被点了几次。都只有总数。
• 质量：页面加载和点按后的反应快不快、画面会不会突然跳动（每项只记好、一般、差三档，手机、平板、电脑分开计），以及出错的类型（只记错误类型、文件和行号，不记内容）。
• 改进实验：我们有时会给两组人看两种写法，看哪种更清楚。应用在你的设备上随机记一个组别（比如 A 或 B），只统计每组的人数和结果。

我们只保存每天的总数：不保存 IP 地址，不设 Cookie，不保存浏览器版本或设备型号，也没有任何能把这些数字对应到某个人的标识。为了不重复计数，应用会在你的设备上记下哪些计数今天已经发过、第一次使用的日期和实验组别；你是从分享卡的链接来的，还会记下「分享」这个类别和日期，30 天后不再使用。被识别为网络爬虫的访问不计数。汇总数据保留约 13 个月。

去付款、付款成功、退款、登录和朋友码这几项，是服务器处理这些请求时自己数的总数，设置里的开关管不到它们；它们同样对应不到人。

你可以关掉：在应用的「设置 → 匿名统计」里关掉就不再发送。选了「未满 18 岁」的，匿名统计默认是关的，要自己在设置里打开才会发送。浏览器开了「全球隐私控制」（GPC）或「请勿追踪」时，应用和网站自动不发送。

「请勿追踪」（DNT）和「全球隐私控制」（GPC）

• 浏览器发出「请勿追踪」或 GPC 信号时：应用和网站不发送匿名计数，也不记分享来源；我们的服务器也不为这次访问计数（服务器处理付款时数的去付款、付款成功这类总数除外）。
• 路感本来就不会长期跨网站、跨应用追踪你；除了下面说的两个有限的例外，也不允许别人借路感这样做；我们不出售、也不共享个人信息。将来如果情况变了，我们仍会把 GPC 信号当作「选择退出」请求处理，并先更新本政策。
• 你使用路感时，有没有其他公司跨网站收集你的活动信息？只有两个有限的例外：① 你在网页上付款时，Creem 和与它合作的支付公司会在 Creem 的付款页上收集设备和付款信息，用来防止欺诈；② 你从合作伙伴的推荐链接来的，Creem 会用它自己的推荐 Cookie 记下这次点击，在你之后付款时把这笔算给合作伙伴（见「付款」）。这个 Cookie 在你打开路感之前就由 Creem 设好了，我们这边的 GPC 处理管不到它。

iPhone 应用

• iPhone 应用里目前不能登录，也没有朋友码：学习进度和设置只存在你设备上的应用里。应用里的分享卡由你自己用系统的「分享」发出，我们不经手。
• 购买通过 Apple 进行（见「付款」）。
• 它和网站发送同样的匿名计数（见「网站统计」）。未满 18 岁时默认关闭（按你在应用里选的年龄段，或 iOS 告诉应用的年龄段），你可以在「设置 → 匿名统计」里打开或关掉；iOS 告诉应用你未满 13 岁时，应用一律不发送。
• 在法律要求应用询问的地方，iOS 可能会把你的年龄段告诉应用（Apple 的 Declared Age Range，声明年龄范围）。应用只把它存在你的设备上，只用于匿名计数：13 岁以下一律不发送，13 到 17 岁默认关闭。
• 问题报告会在你的「邮件」App 里打开，由你自己发送。指向其他网站的链接在 Safari 里打开。

13 岁以下儿童

• 路感不以 13 岁以下儿童为对象，我们不会有意收集他们的个人信息。使用免费课程不会把任何个人信息发给我们。13 岁以下请不要登录，也不要购买。
• 如果 13 岁以下的孩子写信给我们，我们可能回复一次，之后删除对方的邮箱和来信。
• 如果我们发现手里还有 13 岁以下儿童的其他个人信息，会尽快删除；这个孩子有账号的，连同账号和进度副本一起删除。
• 家长和监护人可以写信到 support@roadfeel.app。

青少年（13–17 岁）

• 路感对你和对其他人一样：不登录时，学习进度只存在你的设备上；登录是可选的。登录后，进度副本里也有你在设置里选的「我的情况」。
• 如果我们知道你未满 18 岁，我们只在严格必要的范围内使用你的信息：提供你要的东西（比如你的购买和恢复码）、保障路感的安全、遵守法律。我们绝不出售你的信息，不用它做广告，也不给你发营销邮件。
• 想请家长付款？在网页上用 请家长付款：Creem 只卖给成年人，所以由你的父母或监护人来买。付款链接里没有你的姓名或邮箱。在 iPhone 应用里，Apple 的「购买前询问」可能会先把你的购买请求发给家长批准。
• 选了「未满 18 岁」的，这台设备上不显示「邀请朋友」。
• 路感没有「发布让别人看到的内容」的功能，所以没有需要删除的公开内容。

我们怎么保护信息

• 所有连接都走 HTTPS。浏览器对所有 .app 网站强制使用 HTTPS。
• 我们拿不到你的银行卡信息：网页付款由 Creem 处理，iPhone 应用里的购买由 Apple 处理。
• 没有密码可偷：登录用邮件验证码，我们不设密码。登录验证码和恢复码只能用一次、很快失效、只以加密单向代码保存，尝试次数也有限制；登录会话也只存单向代码。
• 我们不保存原始 IP 地址，服务器日志里没有邮箱、IP 地址、恢复码和凭证。
• 购买记录存放在 Cloudflare 的 D1 数据库里，数据在存储时是加密的。
• 没有绝对安全的系统。如果发生数据泄露并影响到你的个人信息，我们会及时通知你，不晚于法律要求的期限。

你设备上的学习进度没有加密，能用你浏览器的人都能看到。建议给设备设锁屏。服务器上的进度副本存放在 Cloudflare 的 D1 数据库里，存储时加密。

你的选择和权利

• 你设备上的数据：
• 「设置 → 清空学习进度」会清除学习进度、模拟器成绩、最近的搜索和出错记录，保留语言等设置和许可凭证。登录时，清空也会同步到你的账号和其他设备（那台设备在你清空之后又学过的，会保留下来）。只想清这台设备的，用「退出登录 → 退出并清除这台设备上的进度」。
• 想全部清除（包括许可凭证），请在浏览器设置里删除本网站的数据。付费模块以后可以用邮箱恢复。
• 在 iPhone 上，如果 7 天没打开，Safari 可能会清除网站数据。把路感「添加到主屏幕」可以避免；许可凭证随时可以用邮箱恢复。
• 在 iPhone 应用里，删除应用会清除它在你设备上保存的内容。点 从 App Store 恢复购买，可以找回用同一个 Apple 账户买过的东西。
• 删除账号：在网页的「设置 → 账号 → 删除账号」。我们立即删除你的账号、进度副本和所有登录会话；数据库备份里的副本最迟 30 天内过期。购买记录按上文保留（税法要求），但不再和账号关联，你仍可用付款邮箱恢复购买。
• 我们这边：你可以要求查看我们保存的你的信息，要求更正或删除。请用付款或登录时用的邮箱写信到 support@roadfeel.app。为了保护你，我们可能先往那个邮箱发一个验证码。我们会在 45 天内答复。
• 从我们的记录里删除你的邮箱：我们会在 30 天内删除，只保留税法要求的匿名交易记录（日期、模块和金额）。删除之后，这笔购买就不能再用邮箱恢复，退款也可能更难核实。用这个邮箱登录的账号，也一起删除。
• 加州：《加州消费者隐私法》（CCPA）只适用于规模大得多的企业，路感目前不在其列。但上面这些请求，我们对所有人都照样处理。我们不把个人信息提供给别人做他们的直接营销（《加州民法典》§1798.83）。
• 纽约州和其他州：无论你住在哪里，上面这些请求都可以提。

运营地区

路感为美国驾照而做，由一个住在美国以外的人运营，所以我们回复你的邮件或查询购买记录时，是在那里读取这些信息。Cloudflare 是全球网络，你的连接可能经过美国以外的服务器。Creem 位于爱沙尼亚。Creem、Apple 和 Resend 按它们自己的政策在美国、欧盟和其他国家处理信息。

政策变更

• 修改本政策时，我们会公布新版本，并更新「最后更新」日期。
• 重要变化（比如加入统计、账号或新的信息类型），会在生效前在网站和应用里提示。如果改变了我们使用你付款邮箱的方式，我们还会发邮件告诉你。

联系方式

Dongmei Yang（个人）· 路感 Roadfeel · support@roadfeel.app

Roadfeel Privacy Policy

Effective date: 2026-11-06 · Last updated: 2026-10-30

Who we are

Roadfeel (路感) is run by Dongmei Yang, an individual ("we", "us"). For questions or requests, email support@roadfeel.app.

This policy covers roadfeel.app, including the Roadfeel web app at roadfeel.app/app/, and the Roadfeel iPhone app.

The short version

• Accounts are optional. If you don't sign in, your progress and settings stay on your device and we can't see them. If you sign in on the website, we keep a copy of your progress on our server to sync it to your other devices, and you can delete your account and that copy at any time.
• If you pay on the website, Creem is the seller: it runs the checkout and handles your card. We keep your email address and a record of what you bought, so we can restore it on your other devices, give refunds, and keep records.
• If you pay in the iPhone app, Apple handles the payment, and we get no personal information about it.
• No selling, no ads. We don't sell your information, we don't share it for targeted advertising, and Roadfeel shows no ads.
• Sharing and referrals: if you buy with a friend code, we note only which code was used; if you came through a share link, the purchase only adds to anonymous totals. If you came from a partner's referral link, Creem credits the partner. We never tell the person who shared, or the partner, your name or email.
• A few other companies are involved: Cloudflare, Resend and our email provider help us run Roadfeel, and Creem and Apple take payments. They're listed below.
• You're in control. You can erase everything on your device, and you can ask us what we hold about you, or ask us to correct or delete it.

What stays on your device

Roadfeel saves these in your browser's storage (localStorage) on your device; the iPhone app keeps them in its own storage on your device. If you don't sign in, they aren't sent to us, with these exceptions on the website:

• the app checks your licenses with our server once a day;
• it asks our server about a payment in progress until the module unlocks (see the next table);
• when you go to pay, if this device holds a friend code, or came here through a share card's link in the last 30 days, the app sends that friend code, or the kind "share", along with it (see the next table and "Analytics"). "Share" only adds to the total of checkouts started; it isn't passed to Creem or kept in a purchase record.

If you sign in on the website, your learning progress and settings also sync to our server (see "Account and progress copy" in the table under "What we collect"), and the licenses on this device go to the server to be attached to your account. Recent searches, the error log, sound, haptics and 3D quality stay on this device and don't sync.

What	Why
Learning progress: lessons finished, your answers and review schedule, mock-test scores, mastered topics, study days, practice-drive log, simulator and test-area results, "I passed" marks you add, recent searches	So you can pick up where you left off
Settings: language, the state you're testing in, goals, your test date (optional), "your situation" (for example, under 18 or new to the US), sound, display mode, 3D quality	So the app shows the right rules and lessons
Licenses for modules you've paid for on the website: a purchase number, the state and tier, the issue date, and a one-way code derived from your email address (not the address itself). In the iPhone app, Apple keeps track of your purchases instead	So paid modules unlock, even offline
Payments in progress on the website for up to 30 days, including a secret code for Ask family to pay (Ask a parent to pay if you're under 18)	So the module unlocks after you, or whoever pays for you, finishes paying
Friend code: the code in a friend's link you opened Roadfeel with. Kept up to 30 days; removed once you buy, or if the code can't be used	The friend price when you pay
Error log: the last 10 errors the app hit	Sent only inside a problem report you send, while the "technical info" box is ticked. The box is ticked by default, and you see exactly what will be sent first
Your earlier progress, before an import: before you import progress (from a file or another device), the app keeps a copy of your existing progress on your device	So you can undo the import. It's deleted automatically after 14 days and is never uploaded

Before a 3D scene, the app reads your device's graphics chip name, memory, processor cores and screen size to pick a smooth quality level. This stays on your device.

What we collect, why, and how long we keep it

Information	When	Why	How long we keep it	Who else handles it
Email address	When you buy on the website (you type it on Creem's checkout page), restore a purchase, sign in, or email us	Sign-in codes, restore codes, refunds, support, a reminder before we delete an account that hasn't been used for a long time, preventing fraud (including self-referral with friend codes)	With your purchase record (next row); the email you sign in with, with your account (see the "Account and progress copy" row); or as for support emails (below)	Creem, Cloudflare, Resend
Purchase record: purchase number, state, tier, amount, currency, date, the payment's reference numbers (Creem's order and checkout numbers), whether someone else paid for you (Ask family to pay), the discount code used at checkout (if any), and refund or dispute status	When a website payment completes	Your license, refunds, accounting and taxes, and checking a discount code's discount and counting sales by code	7 years from the day we record it (Creem requires its merchants to keep sales records for 7 years), then deleted	Creem; stored in Cloudflare's database
Friend codes: the friend code that belongs to your website purchase; when a friend pays with your code, their purchase record is linked to it, with where that use stands (pending, past the refund window, void); a free upgrade you earn is recorded as a purchase of $0	Made the first time you open Invite a friend; linked when a friend pays with it	The friend's discount; counting how many friends paid and kept their purchase past the refund window, and giving your free upgrade; preventing self-referral and other abuse (by checking whether payment emails match)	With the purchase records they belong to, up to 7 years	Cloudflare (the database); Creem receives the friend price, and the code in the checkout's details
Name, billing address and payment details, plus device and connection details used for fraud checks	On Creem's checkout page (website), or in Apple's purchase sheet (iPhone app)	Payment and fraud prevention	Under Creem's or Apple's privacy policy. We never receive your card details	Creem and the payment companies it works with; Apple
Restore request: your email and a one-time code (we store only a one-way code of it)	When you choose Restore purchase	To check that you can read that email before unlocking	The code works once, for 30 minutes; the record is deleted about a day after it expires	Resend delivers the email and keeps a copy for 30 days
Account and progress copy: the email you sign in with; your learning progress and settings (the first two rows of the table under "What stays on your device", without recent searches, sound, haptics or 3D quality), stored compressed; the date the account was made and the day it was last used; which purchases are attached to it	When you sign in on the website, and each time it syncs	So you can continue on more than one device, and so your purchases follow your account	Until you delete your account (see "Your choices and rights"). If an account goes unused for 24 months in a row (no sign-in and no sync), we email you a reminder first; if it's still unused 30 days after that, we delete the account and its progress copy. Purchase records are kept separately, as above	Cloudflare (storage)
Sign-in code: a one-way code of your email address and of the code	When you choose Send code	To check that you can read that email	The code works once, for 15 minutes, and stops after 5 wrong tries; the record is deleted about a day after it expires	Resend delivers the email and keeps a copy for 30 days
Sign-in session: a one-way code of a random token, with the date it was made and the day it was last used	When you sign in	Keeping you signed in	Up to 180 days, counted again from the first use each day; deleted at once when you sign out or delete your account	Cloudflare
IP address and basic request details (browser, page, time)	Every time your browser loads Roadfeel, or your browser or the app talks to our server	Delivering the site, security, limiting abuse	We never store your raw IP address. Our rate limiter keeps a keyed one-way code of it (and, when you sign in or restore a purchase, of your email address) for up to 2 days	Cloudflare, under its own policies
Daily license check: your license tokens	Once a day, automatically, on the website	So refunded or charged-back purchases stop working	Not stored, beyond the rate limiter above	Cloudflare
Emails, and problem reports sent by email: your email address, your message, and, if you leave the box ticked, technical details (app version, language, state, screen size, browser, time and recent errors) and, if you tick it, a progress summary (counts only)	When you write to us or send a report	To reply and fix problems	Up to 24 months after our last reply	Cloudflare (email routing) and our email provider, which hosts our inbox
Problem reports and suggestions you send with Send in the web app: the type you picked, your message, the reply email if you give one, and the lesson step or question you opened the form from, or, if you opened it from a search, what you searched for (shown before you send); with the box left ticked, technical details (as in the row above) and recent errors; if you tick it, a progress summary (counts only)	When you tap Send in the web app's problem-report form (roadfeel.app)	To correct content and fix problems, and to reply if you left an email. The form also sends a random code made on your device, to limit how many reports one device can send an hour: it isn't stored with the report, and the rate limit keeps only a one-way encrypted code of it, for at most 2 days	12 months from when it arrives, then deleted automatically	Stored in our database at Cloudflare. Reports are read by the operator, Dongmei Yang, and people she asks to help maintain Roadfeel. They may use an AI tool (Anthropic's Claude) to read them.
Our server logs: event names and counts only, with no email addresses, IP addresses, codes or tokens	When our server runs	Finding and fixing errors	Up to 7 days	Cloudflare
Beta sign-in cookie (__Host-rf_beta)	During the private beta only	Remembering your invite code	30 days	None
Anonymous counts: daily totals only (see "Analytics" below)	Once this policy takes effect, when you open a page or do these things on the website or in the app	Learning what helps and what to fix	About 13 months	Kept in our database on Cloudflare

Friend codes: you only see how many friends paid and how many are past the refund window, never who they are; your friends never see your email.

Progress copy: our server only stores it, compressed, and sends it back to the devices you sign in on. We don't use it for counts or anything else.

Payments

On the website: Creem

• Creem (Armitage Labs OÜ, in Estonia) sells our paid modules on the website as the merchant of record. That means Creem is the seller: it runs the checkout page, takes the payment, charges and pays sales tax, and emails you the receipt.
• On its checkout page, Creem collects your name, email address, billing address and payment details, plus device and connection details it uses to prevent fraud. We never see your card details.
• Creem sends us your name, email address and country, what you bought, and Creem's reference numbers for the order. We keep your email address and the purchase record described above. We don't keep your name or country.
• Creem decides how it uses what it collects, as a separate company, under the Creem Privacy Notice and Creem's Buyer Terms.

Partner referral links (Creem's affiliate program)

• Some partners, such as driving schools and instructors, recommend Roadfeel through Creem's affiliate program: if you come from their link and buy on the website, Creem pays them a commission out of that sale. Your price is the same.
• A referral link opens Creem's website first. Creem stores a referral cookie in your browser, on its own domain, for 60 days, then sends you on to Roadfeel with Creem's referral token (creem_ref) in the address. If you pay on Creem's checkout page in the same browser within those 60 days, Creem credits that partner.
• We don't read or keep the referral token, and we never give partners your name, email or progress. As Creem describes it, partners see clicks, the number of customers referred, revenue and commissions in Creem's dashboard.
• Creem sets this cookie and handles it under the Creem Privacy Notice. To stay out of referrals, open roadfeel.app directly instead of a referral link, or clear creem.io's cookies in your browser.

In the iPhone app: Apple

• Purchases in the iPhone app go through Apple's App Store. Apple takes the payment and handles your payment details under its own terms and the Apple Privacy Policy.
• The app checks your purchases with Apple on your device. We get no personal information about them: the app only adds to the anonymous counts described under "Analytics" (how many checkouts start and succeed).

Stripe: we don't use Stripe at the moment. We may use it for website payments later; if we do, we'll update this policy first.

Who we share information with

• Service providers that process information for us: Cloudflare (hosting, security, the database for our purchase records, accounts and progress copies, friend codes, anonymous counts and problem reports, email routing), Resend (sign-in codes, and restore emails for website purchases), our email provider (our support inbox) and Anthropic (the provider of the AI tool Claude, used in maintenance to read problem reports; it handles them only while they are read).
• Creem and Apple, which sell our paid modules (see "Payments"). On the website, we send Creem what you're buying, so its checkout page can charge for it, and, with a friend code, the friend price and the code.
• Partners (such as driving schools and instructors): we give them none of your information. Creem works out which partner a purchase is credited to, with its own referral cookie (see "Payments").
• The owner of a friend code sees only how many friends paid and how many are past the refund window, never who you are.
• When the law requires it, or to protect someone's safety, to prevent fraud, or to protect our rights.
• If Roadfeel is sold or moves to a company we own. This policy would keep applying to your information.

We don't sell personal information or share it for cross-context behavioral advertising, as California law uses those words, and we don't disclose it to others for their own marketing.

What we don't do

• We don't ask for your name, phone number, home address, precise location, contacts or photos.
• We don't use advertising or tracking tools ourselves, and Roadfeel shows no ads. (If you come from a partner's referral link, Creem sets a referral cookie: see "Payments".)
• We don't track you across other websites or apps.

Cookies and similar technology

• Roadfeel saves your progress in your browser's local storage (see above), not in cookies. We don't use advertising or analytics cookies.
• If you sign in on the website, the __Host-rf_s cookie keeps you signed in for up to 180 days and is deleted when you sign out. It's needed for signing in and does nothing else.
• During the private beta, the __Host-rf_beta cookie keeps you signed in for 30 days.
• Cloudflare may set strictly necessary security cookies. Creem's checkout page uses its own cookies and device information for payments and fraud prevention. If you come from a partner's referral link, Creem also stores a referral cookie on its own domain, for 60 days (see "Payments").

Analytics

From the day this policy takes effect, our own server keeps anonymous daily totals, so we can see what helps and what to fix. We count:

• Visits: how many devices open the site or the app each day, how many of them are new, how many come back on days 1, 3, 7, 14 and 30; how long each visit lasts (in ranges like "under 1 minute" or "1–5 minutes"); the kind of device (phone, tablet or computer; browser, Home Screen app or iPhone app).
• Where visits come from: the referring site's name only (like google.com), campaign tags in links (utm parameters), and the first page of each visit.
• Use: how often each page or screen is opened; which buttons are tapped and how often; how far down site pages people read; how many times each lesson is started and finished; right and wrong answers per question topic; which range mock-test scores fall in; whether a search found anything (not what was searched).
• Purchases: how often the paywall opens, from where, which option is chosen, and how many checkouts start and succeed, and how many of them came through a share link or used a friend code (totals only).
• Sign-in and invites: how many sign-in codes are sent, how many sign-ins succeed (new or returning accounts), how many accounts are deleted; how many friend links are opened and how many friend codes are made, used, paid with, kept past the refund window and rewarded; how often share cards are tapped. Totals only.
• Quality: how quickly pages load and respond to a tap, and whether the layout suddenly jumps (each only as good, fair or poor, counted separately for phones, tablets and computers), and the kind of error (its type, file and line only, never its contents).
• Experiments: sometimes we show two versions of something to two groups to see which is clearer. The app picks a group at random (like A or B) and keeps it on your device; we count only each group's totals.

We keep daily totals only: no IP addresses, no cookies, no browser versions or device models, and nothing that could tie a number to a person. So that nothing is counted twice, the app notes on your device which counts it has already sent today, the day you first used it, and your experiment groups, and, if you came through a share card's link, the kind "share" and the day, which it stops using after 30 days. Visits we recognize as web crawlers aren't counted. We keep the totals for about 13 months.

Checkouts, payments, refunds, sign-ins and friend codes are also counted by our server itself as it handles those requests, so the Settings switch doesn't cover them; they're still totals that can't be tied to anyone.

You can turn it off: in the app, Settings → Anonymous counts. If you choose "under 18", anonymous counts start off and are sent only if you turn them on in Settings. When your browser sends Global Privacy Control (GPC) or Do Not Track, the app and the site send nothing.

Do Not Track and Global Privacy Control

• When your browser sends Do Not Track or Global Privacy Control, the app and the site send no anonymous counts and don't note a share link; our server doesn't count that visit either (except the totals it keeps as it handles payments, such as checkouts started and paid).
• Roadfeel doesn't track you over time across other websites or apps, and apart from the two limited exceptions below, we don't let anyone else do that through Roadfeel. We don't sell or share personal information. If that ever changes, we'll still treat a Global Privacy Control signal as a request to opt out, and we'll update this policy first.
• Do other companies collect information about your activity across websites when you use Roadfeel? Only in two limited cases: (1) when you pay on the website, Creem and the payment companies it works with collect device and payment information on Creem's checkout page and use it to prevent fraud; (2) if you come from a partner's referral link, Creem notes that click with its own referral cookie and, if you pay later, credits that partner (see "Payments"). Creem sets that cookie before you reach Roadfeel, so our handling of GPC can't reach it.

The iPhone app

• In the iPhone app you can't sign in or use friend codes yet: your progress and settings stay in the app, on your device. The app's share cards go out through the system share sheet, sent by you; we don't handle them.
• Purchases go through Apple (see "Payments").
• It sends the same anonymous counts as the website (see "Analytics"). They're off by default under 18 (by the age range you chose in the app, or the one iOS shares), and you can turn them on or off in Settings → Anonymous counts; the app sends none when iOS tells it you're under 13.
• Where a law requires apps to ask, iOS may tell the app your age range (Apple's Declared Age Range). The app keeps it on your device and uses it only for anonymous counts: none at all under 13, and off by default from 13 to 17.
• Problem reports open in your Mail app, and you send them yourself. Links to other websites open in Safari.

Children under 13

• Roadfeel isn't directed to children under 13, and we don't knowingly collect personal information from them. Using the free lessons doesn't send us any personal information. Children under 13 shouldn't sign in or buy anything.
• If a child under 13 emails us, we may reply once and will then delete the email address and message.
• If we learn that we have any other personal information from a child under 13, we delete it promptly, including their account and progress copy if they have one.
• Parents and guardians can reach us at support@roadfeel.app.

Teens (13 to 17)

• Roadfeel works the same way for you: if you don't sign in, your progress stays on your device; signing in is optional. If you sign in, your progress copy includes the "About you" choice in Settings.
• If we know you're under 18, we use your information only as strictly necessary to give you what you asked for (such as your purchase and restore codes), to keep Roadfeel secure, and to follow the law. We never sell it or use it for advertising, and we don't send you marketing.
• Want a parent to pay? On the website, use Ask a parent to pay: Creem sells only to adults, so your parent or guardian makes the purchase. The payment link doesn't include your name or email. In the iPhone app, Apple's Ask to Buy may send your purchase to a parent to approve first.
• Invite a friend isn't shown on a device where you chose "under 18".
• Roadfeel has no feature for posting content that other people can see, so there's nothing public to remove.

How we protect information

• Every connection uses HTTPS. Browsers enforce this for all .app websites.
• We never receive card details: Creem handles website payments, and Apple handles purchases in the iPhone app.
• There are no passwords to steal: you sign in with a code sent by email, and there's no password at all. Sign-in and restore codes work once, expire quickly, are stored only as keyed one-way codes, and attempts are limited; sign-in sessions are stored only as one-way codes too.
• We don't store raw IP addresses, and our server logs leave out email addresses, IP addresses, codes and tokens.
• Purchase records are kept in Cloudflare's D1 database, which encrypts data at rest.
• No system is perfectly secure. If a breach affects your personal information, we'll tell you without unreasonable delay, and within the time the law requires.

Your progress on your device isn't encrypted, so anyone who can use your browser can see it. A screen lock helps. Your progress copy on our server is kept in Cloudflare's D1 database, which encrypts data at rest.

Your choices and rights

• On your device:
• *Settings → Clear progress* erases your learning progress, simulator results, recent searches and error log. It keeps your language and similar settings, and your licenses. While you're signed in, clearing also syncs to your account and your other devices (what another device learned after you cleared is kept). To clear only this device, use Sign out → Sign out and clear this device.
• To erase everything, including licenses, clear this site's data in your browser settings. You can restore paid modules later with your email.
• On iPhone, Safari may erase a website's data if you don't open it for 7 days. Adding Roadfeel to your Home Screen avoids this, and your licenses can always be restored by email.
• In the iPhone app, deleting the app erases what it saved on your device. Restore App Store purchases brings back purchases made with the same Apple Account.
• Deleting your account: Settings → Account → Delete account, on the website. We delete your account, your progress copy and all your sign-in sessions at once; copies in our database backups expire within 30 days. Purchase records are kept as described above, because tax law requires it, but they're no longer linked to the account, and you can still restore them with the email you paid with.
• With us: you can ask to see the information we hold about you, to correct it, or to delete it. Email support@roadfeel.app from the address you paid or signed in with. To protect you, we may send a code to that address first. We'll answer within 45 days.
• Deleting your email from our records: we remove it within 30 days and keep only the anonymous transaction record (date, module and amount) that tax law requires. After that, you can't restore that purchase by email, and a refund may be harder to verify. An account you sign in to with that email is deleted too.
• California: the California Consumer Privacy Act applies only to much larger businesses, and Roadfeel isn't one today. We still honor the requests above for everyone. We don't disclose personal information to others for their direct marketing (California Civil Code §1798.83).
• New York and other states: the same requests are open to everyone, wherever you live.

Where we operate

Roadfeel is made for US driver's licenses. It's run by one person who lives outside the United States, so when we answer your email or look up a purchase, we read that information from there. Cloudflare runs a global network, so your connection may pass through servers outside the US. Creem is based in Estonia. Creem, Apple and Resend process information in the US, the EU and other countries under their own policies.

Changes to this policy

• When we change this policy, we'll post the new version and update the "Last updated" date.
• If a change matters, for example adding analytics, accounts or a new kind of information, we'll put a notice on the site and in the app before it takes effect. If it changes how we use the email you paid with, we'll also email you.

Contact

Dongmei Yang (Roadfeel) · support@roadfeel.app