ExamPass

Privacy Policy

Last updated: June 28, 2026

1. About this document

This Privacy Policy describes how the ExamPass app, developed by ExamPass ("we", "our"), collects, uses, and protects user information ("you"). By using the app, you agree to the practices described here.

This document was prepared in compliance with applicable data protection laws, including the GDPR (EU), the LGPD (Brazil), and the requirements of the App Store (Apple) and Google Play (Google).

2. Data we collect

Data you provide:

  • Email address (used for authentication)
  • Preferred content language

Data generated by app usage:

  • Study session history (mode, date, score)
  • Answers given to each question
  • Verified purchase records (product ID, date)
  • AI explanation usage (daily counter)
  • Push notification token (FCM/APNs), if permission granted

Data we do NOT collect:

  • Geographic location
  • Contact list
  • Camera or microphone
  • Biometric data
  • Data from other installed apps

3. Purpose of processing

  • Authenticate users and maintain active sessions
  • Verify and record purchases made through the stores
  • Personalize study history and progress
  • Generate AI explanations for exam questions
  • Send study notifications (only with permission)
  • Comply with legal obligations and prevent fraud

4. Data sharing

We do not sell or share your data with third parties for marketing purposes. We share only with:

  • Apple Inc. / Google LLC — to verify purchases made through their respective stores.
  • Supabase Inc. — database and authentication platform where your data is stored, hosted in the us-east-1 region (AWS).
  • Amazon Web Services (AWS) — AI explanation processing via Amazon Bedrock. Question texts are sent to generate explanations and are not retained by AWS after processing.

5. Data retention

Your data is retained while your account is active. After account deletion, all personal data is erased from our systems within 30 days. Transaction records may be retained for an additional legal period as required by applicable tax law.

6. Your rights

You have the right to:

  • Access: know what data we hold about you
  • Correction: update incomplete or incorrect data
  • Deletion: delete your account and all associated data — available directly in the app (Profile → Delete account)
  • Portability: request your data in a structured format
  • Withdraw consent: disable push notifications at any time in device settings

7. Security

We use TLS encryption for all communications. Passwords are not stored in plain text — we use Supabase authentication with bcrypt hashing. Database access is protected by row-level security (RLS) policies.

8. Children

ExamPass is intended for users 13 years of age or older. We do not knowingly collect data from children under 13. If we become aware of such collection, the data will be deleted immediately.

9. Changes to this policy

We may update this policy periodically. We will notify users of significant changes by email or in-app notification. The "last updated" date at the top of this page reflects the most recent version.

10. Contact

For questions, requests, or to exercise your rights, contact our Data Protection Officer:

Email: [email protected]