PassPal

Privacy Notice

Last updated: 2026

1. Who we are

This Privacy Notice explains how Pass Pal ("Pass Pal", "PassPal", "we", "us", "our") handles personal data collected through the PassPal service ("Service"). For the personal data described in this notice, Pass Pal acts as the data controller.

2. Personal data we collect

  • Account data — name, email address, and login credentials you provide when signing up.
  • Profile and preferences — the exam track you select, display name, and settings you configure.
  • Usage and study data — questions attempted, answers given, scores, attempt history, and streaks that let us provide reports and personalize practice.
  • Support communications — messages and information you send us when you request help.
  • Technical data — device identifiers, browser type, IP address, and basic telemetry needed to operate and secure the Service.
  • Marketing attribution — where a visit or signup came from (e.g. UTM parameters or referral tags), where you provide them.

Payment card details are collected and stored by Stripe, our payment processor, and are never seen or stored by Pass Pal.

3. How we use your data and legal bases

  • Provide the Service (creating your account, saving progress, showing reports) — legal basis: performance of a contract.
  • Security and fraud prevention — legal basis: legitimate interests in keeping the Service safe.
  • Improve the Service (understanding which questions and topics are hardest) — legal basis: legitimate interests.
  • Customer support — legal basis: performance of a contract and legitimate interests.
  • Marketing communications (only where you opt in or where permitted by law) — legal basis: consent or legitimate interests.
  • Legal compliance (record-keeping, responding to lawful requests) — legal basis: legal obligation.

4. Who we share your data with

  • Service providers and subprocessors we use to run the Service, such as hosting, database, authentication, email delivery, and analytics providers, under appropriate data protection terms.
  • Stripe, our payment processor, for payment processing, tax calculation, invoicing, and handling refunds and disputes. See Stripe's privacy notice for details.
  • Professional advisers (legal, accounting) where necessary.
  • Authorities where required by law or to protect our rights.

We do not sell your personal data.

5. International transfers

Some of our service providers may be located outside your country. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or applicable adequacy decisions.

6. Data retention

We keep your account and study data for as long as your account is active. If you close your account, we delete or anonymize your personal data within a reasonable period, except where we need to keep it to comply with legal, tax, or accounting obligations, or to resolve disputes.

7. Your rights

Depending on your location, you may have the right to:

  • access the personal data we hold about you;
  • correct inaccurate data;
  • request deletion of your data;
  • restrict or object to certain processing;
  • request a portable copy of your data;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with your local data protection authority (if you are in the UK or EEA).

To exercise these rights, contact us through the app. We aim to respond within one month.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and secure hosting. No system is perfectly secure, but we work continuously to protect the information you entrust to us.

9. Cookies

We use a small number of cookies and similar technologies that are strictly necessary to keep you signed in and to remember your preferences (such as your theme). If we later add analytics or marketing cookies, we will ask for your consent where required.

10. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be reflected by an updated "last updated" date and, where appropriate, additional notice within the Service.

11. Contact

For privacy questions or to exercise your rights, please contact Pass Pal through the in-app support channels.