Privacy Policy

What we collect

• Your name and email address when you register.
• Authentication data — a securely hashed password, or, if you sign in with Google, your Google account ID and basic profile (name, email) supplied by Google OAuth.
• Your activity — practice and mock-exam attempts, answers, and scores, so we can show your progress and weak-area reports.
• Payment records — the plan purchased, amount, currency, status, and the processor's transaction reference.

Collected automatically

Our servers and Cloudflare record standard access logs: your IP address, browser user-agent, the page requested, the time, and the referring page. We use these to keep the service secure and running; we do not use them for advertising.

What we do not collect

We never see or store your card details. All payments are handled entirely by Flutterwave, a PCI-DSS–compliant payment processor. Your card number never touches our servers.

Third parties we share data with

We use a small number of trusted processors, only as needed to run the service:

• Flutterwave — processes card payments.
• Resend — sends transactional email (e.g. password resets).
• Cloudflare — content delivery, security, and privacy-friendly analytics.
• Hostinger — hosts our servers.
• Google — only if you choose “Sign in with Google,” to authenticate you.

We do not sell your personal data, and we do not share it for advertising.

How we use your data

• To provide the service and your account.
• To track and display your practice and mock progress.
• To process your payment and grant access.
• To send essential account emails (e.g. password resets). We do not send marketing email without your consent.

Data retention

We keep your account, activity, and payment records for as long as your account exists, so we can provide the lifetime access you purchased. Payment records are kept for at least six years to meet tax and accounting obligations, and support emails for about two years. When you ask us to delete your account, we remove your personal data except where we are legally required to keep certain records.

Your rights

You may request access to, correction of, deletion of, or an export (a copy in a portable format) of your personal data at any time. Email [email protected] and we’ll respond.

Cookies & analytics

We use only essential session cookies needed to keep you logged in and secure your forms — no advertising or third-party tracking cookies. We use Cloudflare Web Analytics, which measures aggregate traffic without cookies and without tracking or profiling individuals.

Children

Pass My PMP is not directed at children under 16. If we learn we hold personal data on someone under 16, we will delete it.

Contact

Privacy requests: [email protected].