Privacy Policy

What we collect

• Your name and email address when you register.
• Authentication data. This is a securely hashed password, or, if you sign in with Google, your Google account ID and basic profile (name, email) supplied by Google OAuth.
• Your activity: practice and mock-exam attempts, answers, and scores, so we can show your progress and weak-area reports.
• Payment records: the plan purchased, amount, currency, status, and the processor's transaction reference.

Collected automatically

Our servers and Cloudflare record standard access logs: your IP address, browser user-agent, the page requested, the time, and the referring page. We use these to keep the service secure and running; we do not use them for advertising.

What we do not collect

We never see or store your card details. All payments are handled entirely by Flutterwave, a PCI-DSS–compliant payment processor. Your card number never touches our servers.

Third parties we share data with

We use a small number of trusted processors, only as needed to run the service:

• Flutterwave: processes card payments.
• Resend: sends our email, both account emails and study emails.
• Cloudflare: content delivery, security, and privacy-friendly analytics.
• Hostinger: hosts our servers.
• Google: only if you choose “Sign in with Google,” to authenticate you.
• LinkedIn: advertising measurement (see “Cookies & analytics” below).

We do not sell your personal data. The only data shared for advertising is the LinkedIn measurement signal described under “Cookies & analytics”. We do not share your account details, your answers or your results with advertisers.

How we use your data

• To provide the service and your account.
• To track and display your practice and mock progress.
• To process your payment and grant access.
• To send essential account emails (e.g. password resets). We do not send marketing email without your consent.

Study emails

We send practice reminders and, later, a daily practice question only with your consent: the box you tick when you create your account, the yes link in the one invitation we send to accounts that predate the box, or the switch in your account settings. We record when you consented and from where.

To learn what helps, about one account in five gets its first reminders a few weeks later than the others, for a fixed period, while we compare the results. We compare the two groups by counts only.

We record when each study email was sent and whether its link was clicked, through the link itself. We do not use tracking images. We send no more than four reminders to any account in any thirty days.

You can stop study emails at any time with the unsubscribe link in any of them, or from your account settings. We never re-enable them on our own; only you can, from your settings.

If you add your exam date, we use it only to show a countdown on your Account page.

The daily question is live: on weekdays we email one practice question, with its four options as links. The email carries no answer. When you tap an option while signed in, we store your answer as a practice answer, so it counts in your progress like an answer on the site. The two kinds of study email have their own switches on your Account page, "Daily question" and "Reminders", and every email has a link that stops just that kind as well as one that stops all study emails.

Data retention

We keep your account, activity, and payment records for as long as your account exists, so we can provide the lifetime access you purchased. Payment records are kept for at least six years to meet tax and accounting obligations, and support emails for about two years. When you ask us to delete your account, we remove your personal data except where we are legally required to keep certain records. The record of your email preferences (when you consented, from where, and when you unsubscribed) is kept for as long as your account exists, because it is what stops us emailing you.

Your rights

You may request access to, correction of, deletion of, or an export (a copy in a portable format) of your personal data at any time. Email [email protected] and we’ll respond.

Cookies & analytics

We use essential session cookies to keep you logged in and to secure your forms. We also use the LinkedIn Insight Tag, which sets LinkedIn cookies, lets LinkedIn record visits to our website, and tells us when someone starts the free questions, creates an account, or makes a purchase, so we can measure whether our advertising works. It does not send your answers, your scores, or anything you enter in the practice questions. Alongside it we use Cloudflare Web Analytics, which measures aggregate traffic without cookies and without profiling individuals. You can block the LinkedIn tag with any ad blocker or browser tracking protection, and the site works normally without it.

Children

Pass My PMP is not directed at children under 16. If we learn we hold personal data on someone under 16, we will delete it.

Contact

Privacy requests: [email protected].