Privacy Policy

This Privacy Policy describes how information is handled for the Passy website at www.passyprep.com and for the Passy exam-preparation apps on Android and iOS (together, the “Apps”).

This policy covers:

• the Passy website at www.passyprep.com;
• the Passy mobile applications listed under Apps covered by this policy, on Android and iOS; and
• related services those Apps call, including store billing and an explanation request when you use that feature.

Website practices and mobile-app practices are not the same. The website’s free practice and study-plan tools run in the browser and do not create a Passy account. Optional website analytics, when a deployment turns them on, can include Google Analytics 4, Vercel Web Analytics, and a first-party event endpoint. The mobile Apps do not use those website analytics products. The Passy Web Privacy page is the longer website notice. The sections below describe the Apps unless a sentence says it is about the website.

Passy is the product brand for the website and the exam-preparation apps. TRENDING MOBAPPS SRL (“we” and “us”) is the company responsible for this policy and for the processing it describes. On Google Play, the developer name for the Android apps is GGX2 Studio. For privacy requests, contact contact@passyprep.com.

This Privacy Policy applies to the Passy website and the Passy exam-preparation apps listed below.

• ACCUPLACER Study App 2026
• ASVAB Exam Prep 2026
• ATI TEAS
• CMA (AAMA)
• NHA CCMA
• CNA Exam Prep 2026
• CNOR
• CompTIA A+
• CompTIA Security+
• EPPP Part 1–Knowledge
• GED
• HESI A2
• ASWB Bachelors / BSW
• ASWB Masters / MSW
• ASWB Clinical / LCSW
• NCE Exam Prep | 2026
• NCLEX-RN
• NCLEX-PN
• NCMHCE
• NREMT EMT
• PMP
• PTCB / PTCE
• RBT Exam Prep 2026
• Real Estate
• ServSafe

Passy is designed so that most study information stays on your device. The Apps do not create a Passy user account. That does not mean the Apps process no information. The categories below reflect the current Apps.

Information you provide (stored on your device)

If you use onboarding or settings, the Apps may store on your device study preferences such as an intended exam timeframe, a self-assessed readiness level, a daily study-time preference, a focus area, an optional exam date, short onboarding check-in answers, a generated study-plan outline, and similar preparation choices. These records are kept in a local database on the device. They are not uploaded to a Passy account, because the Apps do not have accounts.

Study activity and progress (stored on your device)

As you practice, the Apps may store question attempts, selected answers, scores, session history, mistake lists, bookmarks, flashcard results, mock-exam progress, daily goals, and similar progress statistics in the same on-device database. Cached explanations may also be stored locally.

Subscription and access status (stored on your device)

If you unlock paid features, the Apps may store an entitlement or access status locally so the device can show the correct features. Founding-access or in-app offer flags may also be stored locally. See Purchases and Subscriptions below for how Apple and Google handle payments when store billing is used.

Notification permission (on your device and in the OS)

The Apps may ask the operating system for permission to send notifications and may store that choice locally. If permission is granted, the current Apps can schedule a local study reminder on the device. That reminder is created on the device. It is not sent to a Passy account.

Remote push-token registration is off unless that App is configured to request one. In that case the App asks Expo for a push token and stores the token on the device. The App does not upload that token to a Passy account, because the Apps do not have accounts.

Information sent when optional AI explanations are enabled

When you ask for an explanation, the App may send that request to a Passy explanation service hosted on Vercel. The request may include Passy question content (the stem, any passage, and answer choices), identifiers for the exam and question, the explanation mode you chose, Passy’s editorial explanation, and the answer you selected where that mode needs it. The request does not include your name, email address, or a Passy account identifier. The service also receives standard technical data that an API receives, including your IP address and ordinary network metadata. We do not state that the service never retains the request, and we do not publish a fixed retention period for those logs.

Information you send if you contact us

If you email us or send a message through Passy’s contact form, we receive the address you send from, the message, and any name, exam, device, or other details you include. We may process that information to respond to your request, provide support, resolve issues, and comply with legal or privacy requests.

In the current Apps, Passy does not:

• create a user account, username, or password;
• collect an email address or phone number as an in-app profile field (you may still email us yourself);
• access your contacts, photos, camera, or microphone;
• request precise location;
• read health records or connect to HealthKit or similar stores;
• collect advertising identifiers (such as IDFA or GAID) or use ad networks;
• send product-analytics events to an analytics vendor (in-app analytics calls are accepted and not transmitted);
• send crash reports to a crash-reporting SDK (errors are logged locally on the device); or
• register a remote push token unless that option is turned on for the App, as described under Notifications.

We do not claim that the Apps process no personal data. Study dates, answers, and optional AI requests can be personal data in context.

We use information as follows:

• to provide and operate the Apps’ study features on your device;
• to keep your progress, preferences, and exam date on that device;
• to personalize on-device preparation features you choose to use;
• to provide AI-supported explanations when that feature is enabled and you request it;
• to remember paid-feature entitlement on the device, and to work with Apple or Google when store purchases are offered;
• to schedule a local study reminder on the device when you allow notifications, and, only when remote push is turned on for that App, to obtain a remote push token;
• to respond when you contact us, including to provide support, resolve issues, and comply with legal or privacy requests;
• to maintain security and integrity of the Services (for example, rejecting malformed AI responses); and
• to comply with law and enforce these terms where required.

We do not currently use mobile-app analytics to measure aggregate usage off the device, because the Apps do not transmit analytics events.

Where the GDPR or UK GDPR applies, we process personal data on these bases, mapped to actual processing:

• Performance of a contract — providing the Apps you choose to use, including on-device study features and, when you request it, an explanation.
• Legitimate interests — operating a stable product, preventing abuse of the explanation service, understanding support requests, and improving the Apps in ways that do not currently involve off-device analytics. You may object as described below.
• Consent — optional operating-system notification permission, and any other processing for which the OS or the App asks you to agree. We do not treat all processing as consent-based. You can withdraw OS permission in device settings.
• Legal obligation — where we must keep or disclose information to comply with law (for example, if a valid legal request relates to a support email you sent).

Some features may require a paid subscription or other in-app purchase. When you buy through the Apple App Store or Google Play, that store processes the payment. Passy does not receive your full payment card number from those stores. Apple or Google may process your store account, product, and purchase records under their own policies. The App can read purchase status on the device so it can unlock features, and it stores that entitlement locally. The Apps do not keep a Passy account of your purchases on our servers.

Manage, cancel, or request refunds for store purchases through your Apple or Google account settings and the applicable store rules, together with any rights you have under mandatory consumer law. Deleting the App does not by itself cancel a store subscription.

The Apps may offer an explanation feature sometimes called AI Rescue or a similar name.

• If the explanation service is not included, the feature may be unavailable, or the App may show Passy’s editorial explanation on the device without sending that content off the device.
• When the explanation service is included, it is hosted on Vercel. When you request an explanation, the App sends the question material described under Information We Collect to that service.

We do not send your name or email with that request. The payload can include the answer you selected. We minimize what is sent to what the explanation feature needs. We do not use that request to build an advertising profile.

This policy does not name a separate model provider for that service. If that changes, we will update this policy.

AI-supported text can be wrong. It is study support, not professional advice. See the Terms of Use.

Notification permission is optional. You can deny the operating-system prompt and you can later disable notifications in your device settings (iOS Settings or Android app notifications). You can also turn the in-app study-reminder preference off.

When permission is granted and the reminder preference is on, the Apps schedule a local reminder on the device. The Apps do not register a remote push token unless that option is turned on. In that case the App can request a token and store it on the device, as described under Information We Collect.

The current Apps include an analytics interface that accepts events and does not send them to Passy or to a third-party analytics provider. The Apps do not use Google Analytics, Firebase Analytics, Mixpanel, Amplitude, Segment, or a similar mobile measurement SDK.

Errors may be printed to the local device log. The Apps do not include a crash-reporting SDK such as Sentry or Crashlytics. Your operating system may still offer its own crash or diagnostic prompts under Apple’s or Google’s policies.

Website analytics on www.passyprep.com are separate and are not a description of the Apps.

We share information only as described here:

• Infrastructure providers — when optional AI explanations are enabled, the explanation host (including Vercel as hosting infrastructure) processes the request payload and standard network data to return a response.
• Operating systems — Apple and Google process information as part of running the Apps on iOS and Android. If an App requests a remote push token, Expo processes that token request. The Apps do not request one unless that option is turned on.
• Payment platforms — Apple and Google, when you buy through their stores.
• Communications — if you email contact@passyprep.com, that message is processed as email.
• Legal — if we are required to disclose information by law, regulation, or valid legal process, or to protect the rights, safety, or integrity of users or Passy.
• Business transaction — if we transfer all or part of our business, information reasonably needed to continue the Services may transfer subject to this policy or a successor notice.

We do not share App information with a mobile advertising network or a mobile analytics vendor, because those SDKs are not in the current Apps.

In the current Apps, Passy does not sell personal data and does not share personal data for cross-context behavioral advertising. The Apps do not include ad networks.

If we ever introduce advertising or a sale of personal data, we will update this policy and the applicable store disclosures first.

On-device data. Study records, preferences, exam date, local entitlement, and cached explanations remain on your device until you delete the App, clear the App’s storage using your operating system, or use an in-app reset if the App provides one.

Passy servers. The current Apps do not keep a user account profile on a Passy server. Optional explanation requests are processed to return a response. We do not publish a fixed retention period for those server logs. If you want us to review whether any explanation-request logs remain with our processors, contact us.

Store purchases. Apple and Google retain purchase records as needed for their billing, tax, and consumer-law purposes.

Support email. Correspondence is kept as reasonably needed to handle your request and our records.

We aim to delete or anonymize information when it is no longer needed for the purposes above, unless a longer period is required by law.

You can:

• delete on-device study data by clearing the App’s storage in your device settings or by uninstalling the App;
• change or remove an exam date and other preferences in the App;
• turn off notification permission in the operating system;
• stop using optional AI explanations if you do not want question content sent to the explanation service;
• manage store subscriptions in your Apple or Google account; and
• email contact@passyprep.com to request access, correction, or deletion of personal information we hold (for example, support email, or a review of explanation-service logs if you used that feature).

The Apps do not provide a Passy user account. There is therefore no in-app “delete my account” control. Uninstalling the App deletes the local database on that device. It does not cancel an Apple or Google subscription by itself.

If we later add accounts, we will update this policy and provide an appropriate deletion mechanism.

We use reasonable technical and organizational measures appropriate to a device-local study app, including keeping study records in the App’s local store and using HTTPS when the App calls the explanation service. No method of storage or transmission is completely secure. We do not promise that information cannot be accessed, disclosed, altered, or destroyed.

TRENDING MOBAPPS SRL is established in the European Union (Romania). Apple, Google, Vercel, and email infrastructure may process information in other countries, including outside the European Economic Area and the United Kingdom.

When personal data is transferred internationally, we take steps designed to provide an appropriate level of protection as required by applicable law.

Passy exam-preparation Apps are designed for people preparing for professional, academic, or vocational exams. They are not directed at children, and we do not knowingly collect personal information from children in the Apps.

If you believe a child has provided personal information to us (for example, by emailing support), contact contact@passyprep.com and we will take appropriate steps, including deleting information we hold where required. Where a minor is permitted to use the Apps under local law, a parent or guardian should review this policy. We do not impose a universal age of 18 in this notice.

If the GDPR or UK GDPR applies to you, you may have the right to request access, correction, deletion, restriction of processing, objection to processing based on legitimate interests, and data portability, and to withdraw consent where processing is based on consent (withdrawal does not affect prior lawful processing).

You also have the right to lodge a complaint with a supervisory authority, including in your EU Member State or, in the UK, the Information Commissioner’s Office. You may contact us first at contact@passyprep.com so we can try to resolve your request.

Some U.S. state laws provide privacy rights such as access, correction, deletion, and portability, and, in some cases, the right to opt out of sale or sharing of personal information or certain targeted advertising. Those laws apply only if we are covered by them and only to the extent of their scope. This section does not claim that every U.S. state statute applies to Passy.

In the current Apps we do not sell personal information or share it for cross-context behavioral advertising. To make a request that may be available to you under a law that applies, email contact@passyprep.com. We may need to verify the request. Because the Apps have no account, we may only be able to act on information we actually hold (such as email you sent us).

We may update this Privacy Policy when the Apps or our practices change. The “Last updated” date at the top will change when we publish a revision. For material changes, we will take additional steps where required by law, such as providing a more prominent notice or requesting consent.

If we add accounts, off-device analytics, advertising, or server-side profiles, we will update this policy so it still describes those practices.

The Passy mobile applications are provided by TRENDING MOBAPPS SRL.

For privacy requests and questions about this policy, use the Contact page or email contact@passyprep.com.

Contact us→contact@passyprep.com