Privacy policy

• Your account email address and an encrypted password hash, so you can sign in and we can contact you about your account.
• Your study activity — which questions you answered, whether each answer was correct, when you answered it, your per-topic accuracy, your spaced-repetition schedule, and your mock exam and hazard perception scores.
• Your purchase status — whether you have bought full access, when, and a reference to the transaction from our payment provider.
• Basic technical data needed to run the service securely, such as server logs and error reports.

We do not ask for your name, address, date of birth, driving licence number or any official test details.

• To create and secure your account (necessary to provide the service you asked for).
• To track your progress, work out your weak topics, schedule reviews and produce your readiness signal — this is the core of the product.
• To give you access to the features you have paid for.
• To keep the service working, diagnose faults and prevent abuse (our legitimate interest).

Payments are handled by our payment provider (Stripe). Your card details go directly to them and are never seen, processed or stored by us. We receive only confirmation that a payment succeeded, the amount, the currency and a transaction reference. Stripe processes that data as its own controller under its own privacy policy.

We do not sell your data and we do not share it with advertisers. We use a small number of service providers who process data on our behalf:

• Our hosting and database provider, which stores your account and progress data.
• Our payment provider, for processing the one-time purchase.
• Email delivery, for account emails such as confirmation and password resets.

We may also disclose data where we are legally required to. Your study data is stored under access rules that mean only your signed-in account can read it.

We keep your account and progress data for as long as your account exists, since the entire point is a long-term record of your progress. Delete your account and we remove your personal data and study history within 30 days, except for minimal transaction records we must retain for accounting and tax purposes.

Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our use of it. Email support@passfasttheory.app and we will respond within one month. You can also complain to the Information Commissioner (ico.org.uk) if you think we have got something wrong.

We use only what is essential: a secure sign-in token stored in your browser so you stay logged in. We do not use advertising or cross-site tracking cookies.

If we change this policy materially we will tell you in the app or by email. Questions go to support@passfasttheory.app.