Privacy Policy
How DriverWell collects, uses, and protects your personal data
Last updated: 24 March 2026
1. Introduction
DriverWell ("we", "us", "our") is a mental health and wellbeing platform designed specifically for professional drivers. We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding your personal information.
Data Controller
DriverWell, operated by Peter McKenna
Website: driverwell.co.uk
Contact: [email protected]
2. Data We Collect
We collect the minimum amount of personal data necessary to provide our services. We do not sell your data to third parties.
Account Information
- Name (as provided by your login provider)
- Email address
- Login method (e.g. Google)
- Account creation date
Legal basis: Contract performance (Art. 6(1)(b) UK GDPR)
Health & Wellbeing Data
- Mood check-in entries (mood score, alertness, stress level, optional notes)
- Fatigue logs (driving/rest minutes)
- Blood glucose readings (if you use the diabetes tracker)
- Wellness logs (hydration, exercise, sleep, back pain scores)
- Meal plans
Legal basis: Explicit consent (Art. 9(2)(a) UK GDPR) — health data is a special category
Community & Communication Data
- Forum posts and replies (using your chosen display name, not your real name)
- AI chat conversations with RoadMate
- Push notification preferences
Legal basis: Legitimate interest (Art. 6(1)(f) UK GDPR)
Technical Data
- Anonymous page view analytics (page visited, timestamp, session ID)
- Browser type and device information (for responsive design)
- Push notification subscription endpoint (if you opt in)
Legal basis: Legitimate interest (Art. 6(1)(f) UK GDPR)
3. How We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide mood tracking and wellbeing features | Health & wellbeing data | Consent |
| Display your check-in streaks and achievements | Mood entry timestamps | Contract |
| Enable peer support forum | Display name, post content | Legitimate interest |
| Provide AI chat support (RoadMate) | Chat messages | Consent |
| Send check-in reminders (if opted in) | Push subscription | Consent |
| Improve the platform (anonymous analytics) | Page views, session data | Legitimate interest |
| Employer fleet management (if linked) | Vehicle type, employer link | Consent |
4. Data Storage & Security
Your data is stored securely using industry-standard measures:
- Encryption in transit: All data is transmitted over HTTPS (TLS 1.2+)
- Secure authentication: We use OAuth 2.0 for login — we never store your password
- Database security: Data is stored in encrypted databases with access controls
- Minimal data collection: We only collect what is necessary to provide our services
- No third-party advertising: We do not share your data with advertisers
5. Data Retention
We retain your personal data only for as long as necessary to provide our services:
| Data Type | Retention Period |
|---|---|
| Account information | Until you delete your account |
| Mood & health data | Until you delete your account or request erasure |
| Forum posts | Until you delete your account (anonymised display names retained) |
| AI chat conversations | Until you delete the conversation or your account |
| Analytics data | Aggregated and anonymised — retained indefinitely |
| Push notification subscriptions | Until you unsubscribe or delete your account |
6. Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights regarding your personal data:
Right of Access
Request a copy of all personal data we hold about you. Use the 'Download My Data' feature in your account settings.
Right to Erasure
Request deletion of your account and all associated data. Use the 'Delete My Account' feature in your account settings.
Right to Rectification
Request correction of inaccurate personal data. Contact us to update your information.
Right to Restrict Processing
Request that we limit how we use your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format (JSON). Available via 'Download My Data'.
Right to Object
Object to processing based on legitimate interest. Contact us to exercise this right.
To exercise any of these rights, email us at [email protected]. We will respond within 30 days as required by law.
7. Third-Party Services
We use a limited number of third-party services to operate DriverWell:
| Service | Purpose | Data Shared |
|---|---|---|
| OAuth Provider (Google) | User authentication | Name, email (from your Google account) |
| AI Language Model | RoadMate AI chat | Chat messages (processed, not stored by provider) |
| Web Push Service | Push notifications | Browser push endpoint (no personal data) |
We do not use any advertising networks, social media trackers, or third-party analytics platforms that track individual users.
8. Children's Privacy
DriverWell is designed for professional drivers aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have collected data from a minor, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes through the platform. The "last updated" date at the top of this page indicates when the policy was last revised.
10. Complaints
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK's data protection authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
We encourage you to contact us first at [email protected] so we can try to resolve your concern.
11. Contact Us
For any questions about this Privacy Policy or your personal data, please contact:
Peter McKenna
DriverWell — Data Controller
Email: [email protected]
Website: driverwell.co.uk