Privacy Policy

Road To DSE by RoadToDSE

Effective date: 27 September 2026

This Privacy Policy explains how RoadToDSE ("we", "us", "our") collects, uses, and shares information when you use the Road To DSE mobile application and related services (the "Service").

Road To DSE 1.5.0 introduces Apple, Google and email accounts. The account features described below apply when you use that version or a later version. Earlier versions continue to use iCloud/CloudKit.

1. Information We Collect

Your account: the email address you sign in with (for Sign in with Apple, this may be a private relay address Apple creates), and an identifier from Apple or Google if you sign in with them. We never see your Apple or Google password.
Profile information you choose to provide, such as your name, username, school, DSE year, district, and subjects. Your name, school and study data are saved to your account so they are the same on every device you sign in on; who else can see each profile field is up to your visibility settings.
Study activity data, including study sessions, subjects, and progress used to generate analytics and rankings.
Study activity and app interactions used to calculate your progress and personalise the Service. Data saved to your account is linked to that account; it is not used for advertising tracking.
Forum content you post (posts, comments, likes, and interactions). Forum content is public by default.
Device and app diagnostic data (such as app version and error logs) to keep the Service reliable.

2. How We Use Information

Provide and operate the Service and its features.
Generate study analytics, rankings, and insights.
Moderate public content and keep the community safe.
Improve performance, stability, and user experience.

3. Public Information

Forum posts and comments are public. Do not post sensitive personal information. Your username and content may be visible to other users.

4. Sharing and Service Providers

We use these service providers, which process data on our behalf: Supabase, which hosts your account and the Service's data on servers in Singapore; Apple and Google, when you choose to sign in with them; and Resend, which delivers verification and password-reset emails. Earlier versions of the app store data in Apple iCloud/CloudKit. That data remains there during the migration. We copy existing public community records to Supabase as part of the migration and use your iCloud account to verify ownership before linking an imported profile to your new account. We do not use any third-party analytics or advertising SDK, and we do not sell your personal data.

5. International Data Transfers

Your account and the Service's data are stored in Singapore. Apple, Google and Resend may process the data they handle in other locations where they operate. Where required by law, we use appropriate safeguards for cross-border data transfers.

6. Your Choices and Rights

You can choose what you post publicly in the forum and adjust profile visibility settings where available. Depending on your location (including Hong Kong, the United States, and the EU/EEA), you may have rights to access, correct, or delete your information, or to object to certain processing. Contact us to make a request.

You can delete your account at any time in the app: Settings, then Delete Account. This permanently deletes your Supabase account and the data saved in it — your profile and username, study data, friends, study groups you run, rankings, forum posts and comments, and quote wall entries — and, if you signed in with Apple, disconnects Road To DSE from your Apple ID. Deleting your account does not cancel an App Store subscription; manage that in your device's Settings.

During the transition, records created by earlier app versions may also remain in CloudKit. Deleting a new account does not currently remove those older CloudKit copies. Contact us if you need help with data stored by an earlier version.

7. Data Retention

We keep your information until you delete your account or ask us to delete it, or as long as needed to comply with legal obligations. When an account is deleted we keep only a random identifier recording that its profile was deleted, so that data from older versions of the app is never restored. Backup copies kept by our hosting provider for disaster recovery expire on its normal schedule. We may retain de-identified or aggregated data for analytics.

8. Security

We use reasonable safeguards to protect your data. No method of transmission or storage is 100% secure.

9. Children

The Service is not intended for children under 13. If you believe a child has provided information to us, contact us.

10. Changes to This Policy

We may update this Policy from time to time. If changes are material, we will provide notice within the app or on our website.