Privacy Policy

Overview

PassPrep ("we", "us") provides free practice tests for official exams (driving, professional licensing, citizenship and more) through the website passprep.tech and the PassPrep mobile app. This policy covers both.

In short: an account is optional. If you do not sign in, we do not ask for your name, email, or any personal identity, and your study progress stays on your device. If you choose to sign in, we store your email and your progress so it syncs across your devices — and you can delete your account (and everything in it) yourself at any time. The website does not currently show ads (if we add them in future — for example Google AdSense — this policy covers them); the free mobile app shows ads via Google (AdMob).

What We Do NOT Collect

Unless you choose to create an account, we collect none of the following: no account, no sign-up, no login, no name, email, phone number or other contact information. No precise or approximate location. No photos, contacts, files, or microphone/camera access. No payment information (there are no in-app purchases). (If you do create an account, the only personal item we store is your email — see "Accounts & Cross-Device Sync".)

Accounts Are Optional

You never need an account. If you do not sign in — the default — everything in "What We Do NOT Collect" still applies: no name, no email, no login, and your study progress stays only on your device. Signing in is a free extra that adds one thing and one thing only: syncing your progress across your devices.

Accounts & Cross-Device Sync

If you choose to create an account, we store two things on our servers (a hosted database, Turso): your email address, and your study data — your practice/quiz progress, mock-exam history, and your "wrong answers" review list. We store this so that when you sign in on another phone or computer, your progress is there too.

We ask for nothing else. No name, no password (see "How Signing In Works" below), no phone number, no payment details. Your email is used only to sign you in (and, if you turn them on, to send study reminders — see "Email Reminders"). We never sell or share it, and we never use it to advertise to you.

When you sign in on a new device for the first time, we combine that device's local progress with what is already in your account — keeping the further-along result for each item — so no device's work is lost.

How Signing In Works

Signing in is passwordless. You enter your email, we send you a one-time sign-in link, and clicking it signs you in. We do not create or store any password. After you sign in, your browser holds a signed session cookie that tells our server you are signed in (so your sync works). This cookie identifies your account for sync only — it is not used to track you across other sites and is not shared with advertisers.

Signing out only ends the session on this device — your synced data and on-device progress are kept; only deleting your account removes cloud data.

Email Reminders

This is optional and off by default. If you turn on email study reminders, we use the email address on your account (the same address used for the passwordless sign-in link) to send them, and we store your reminder choices — which reminders you enabled, an exam date if you set one, and your time zone (used only to pick a sensible send time). We only ever email about your own studying: a countdown to an exam you set, a nudge to review your saved wrong answers, or a heads-up before a license you told us about is due to renew. We send at most one email a day, every reminder email has a one-click unsubscribe link, and you can turn any or all reminders off at any time from your account — that stops them immediately.

License renewal reminders — data minimization: if you add licenses so we can remind you before they expire, we store ONLY the license type you pick (for example "driver's license" or "CNA") and the renewal date you enter. We never ask for or store a license number, a photo of your card, or any other document or identifier. This is used solely to send your own renewal reminder — never sold, never shared, never used for advertising. You can remove any license from the list, or delete your whole account, at any time, and it is removed from our servers.

We never guess a date for you: if you don't enter an exam or renewal date, we simply don't send that reminder. Reminder emails are delivered by Resend on our behalf (see Service Providers). None of this applies if you are not signed in — anonymous use collects nothing (see Accounts Are Optional).

Deleting Your Account

You can delete your account yourself at any time from your account page. Deleting it permanently removes your email and all of the study data we synced for you from our servers. There is no waiting period and you do not need to contact us. (Your on-device data is separate — clearing your browser or app storage removes that copy.)

Service Providers (Sub-processors)

To send the sign-in link and any reminder emails, we use Resend, an email delivery service, which processes the recipient email address and message solely to deliver it on our behalf. Our database and site hosting are provided by Turso and Vercel. These providers act as our processors under our instructions and offer GDPR-aligned data protection; we do not authorize them to use your data for their own purposes.

Data Stored on Your Device (App)

The app saves the following locally so it works offline and remembers your place: your practice/quiz progress and mock-exam history, your "wrong answers" review list, and your interface-language choice and daily-reminder time.

This never leaves your device and is removed when you uninstall the app or clear its storage.

Data Sent to Our Servers (App)

The question bank is fetched online. To serve questions and grade answers, the app sends to passprep.tech the exam/region and topic you are studying, and the option you selected when you answer (so the server can return whether it was correct and the explanation).

The app authenticates with a short-lived, anonymous session token (rate-limited by network address). This token is not tied to any personal identity and is not used to profile or track you across other apps or websites. We do not attach your name, account, or advertising ID to these requests.

Analytics (Website)

On the website we use two analytics tools to understand aggregate traffic — such as how many people visit a page: Vercel Web Analytics (cookieless, no personally identifiable information) and Google Analytics 4, which uses cookies to measure usage. Neither is used to identify you personally; Google processes the Analytics data under its own Privacy Policy (policies.google.com/privacy). The app uses no analytics SDK.

Advertising

Website: we do not currently show ads on the website. If we introduce advertising in the future (for example Google AdSense), third-party vendors including Google may use cookies to serve ads based on your prior visits to this and other websites, and you would then be able to opt out of personalized advertising at Google's Ads Settings (g.co/adsettings).

App: the free app shows ads via Google AdMob (Google Mobile Ads SDK). To serve ads, Google may process your device's advertising identifier and general device/ad-interaction information. You can reset or limit your advertising ID in your device settings (Android: Settings → Google → Ads).

Google acts as an independent third party for advertising; its handling of this data is governed by Google's Privacy Policy (policies.google.com/privacy).

Cookies & Your Choices (Website)

You can disable or delete cookies through your browser settings at any time. Visitors in regions such as the EU/EEA may be shown a consent prompt for advertising and may decline non-essential cookies.

Notifications (App)

If you turn on the optional daily study reminder, it is scheduled as a local notification on your device. No reminder data is sent to us or to any server.

Children's Privacy

PassPrep is intended for a general audience preparing for adult licensing/citizenship exams. It is not directed to children under 13 and we do not knowingly collect data from children.

Data Retention & Deletion

On-device data is removed when you uninstall the app or clear its storage. Anonymous server requests are not linked to your identity. If you created an account, your email and synced study data are kept only while the account exists — you can delete the account yourself at any time and everything in it is permanently removed from our servers (see "Deleting Your Account").

Security

All network requests use encrypted transport (HTTPS/TLS).

Changes

We may update this policy; the effective date above will change and the new version will be posted at this URL.

Contact

If you have questions about this policy, contact us at ning.wang.see@gmail.com.