Privacy Notice

1. Who is responsible for your data

PassPrep is an independently operated Malaysian educational platform. PassPrep is independently operated in Malaysia by its owner, who is responsible for the personal data described in this notice. For any privacy question or request, contact support@passprep.app.

2. What we collect

• Account data — your email address, display name and password (stored only as a secure hash by our authentication provider).
• Study data — your practice sessions, answers, scores, bookmarks, progress analytics and any question reports or feedback you submit.
• Subscription data — your subscription status, billing period dates and Stripe customer reference. Your card details are held by Stripe, not by PassPrep.
• Preferences — settings you choose in the app, such as study reminder preferences. These are stored with your account.
• Support correspondence — emails you send to our support address.
• Technical data — security and audit logs, error reports and anonymous performance measurements needed to run the platform safely.

3. How we use it

We use this data to operate your account and subscription, deliver practice sessions and analytics, respond to support requests, improve the question bank, keep the platform secure and meet legal obligations. We do not sell personal data, and we do not use it for third-party advertising.

4. Service providers

PassPrep runs on a small set of service providers, each of which processes data only to provide its service to us:

• Supabase — Database, authentication and file storage for the platform.
• Stripe — Subscription payment processing. Card details are entered on Stripe's own checkout and never reach PassPrep.
• Vercel — Application hosting and anonymous performance measurement (Speed Insights).
• Sentry — Error monitoring so we can find and fix faults. Events are scrubbed of cookies, request bodies and secret-shaped values before storage.
• Resend — Sending account emails such as sign-up confirmation and password reset.
• Proton Mail — Hosting the support mailbox that receives your enquiries.

5. Where your data is stored

These providers store and process data on infrastructure that may be located outside Malaysia. Where that happens, the data remains protected by the provider's security measures and our agreements with them.

6. Cookies

PassPrep uses cookies that are essential for signing you in and keeping your session secure. Anonymous performance measurement and error monitoring may set supporting values. We do not use advertising or third-party marketing tracking cookies.

7. How long we keep data

• Account and study data — kept while your account exists and removed when you delete your account.
• Security and audit logs — kept for 12 months.
• Support correspondence — kept for 24 months after an enquiry is closed.
• Question reports and feedback — kept while they remain useful for improving content quality.
• Billing and accounting records — kept for as long as Malaysian legal, tax and accounting obligations require.
• Backups — deleted data leaves backup copies through the normal backup rotation cycle.

8. Your choices and requests

You can view and update your account details in the app, and delete your account from the account page (see the Terms of Service for when deletion is temporarily unavailable during an active subscription). To ask for a copy of your data, request a correction, or raise any other privacy request or complaint, email support@passprep.app and we will respond as described on the Contact and Complaints page.

9. Security

Access to personal data is restricted by authentication and row-level authorization controls, payments are handled entirely by Stripe, and error reports are scrubbed of sensitive values before storage. No online platform can guarantee absolute security, but we design for it first.

10. Age limit

PassPrep is for users aged 18 and over. We do not knowingly collect personal data from children.

11. Changes to this notice

We may update this notice from time to time. The effective date at the top of this page shows when the current version was published, and we will take reasonable steps to notify account holders of material changes.

12. Contact

Privacy questions, requests and complaints: support@passprep.app.