Privacy Policy

1. Information we collect

Account information

When you create an account, we collect your name, email address, and — if you use Google Sign-In — your Google account identifier. We collect only what you provide.

Exam preferences

During onboarding we collect the exam you are preparing for (IELTS Academic or General Training), your destination country, target band score, and exam date. This is used to personalise your training plan and readiness scoring.

Study activity

We record your question responses, session duration, response timing, and accuracy data to calculate your readiness score, adapt question difficulty, and track your progress over time.

Writing submissions

If you use the Writing practice feature (Pro), the text you write is sent to OpenAI’s API to generate your AI feedback. Writing submissions are stored in your account history so you can review feedback over time.

Speaking audio

The Speaking practice feature (Phase 2, Pro) requires microphone access. Audio from Speaking sessions is streamed to our Cloud Functions and then to OpenAI’s Realtime API for real-time assessment. Audio is not stored permanently — only the session transcript is saved. You can revoke microphone permission at any time in your device settings.

Uploaded study materials

Pro subscribers may upload PDF, Word, or text files to personalise their question bank. You retain ownership of everything you upload.

Subscription information

We record your subscription status (free or Pro) via RevenueCat. We never see or store your payment card details — all billing is handled directly by the Apple App Store or Google Play.

Device and usage data

We collect your device type, operating system version, app version, and timezone (used for accurate streak tracking and notifications). We use Firebase Analytics to collect anonymised usage data to help improve the app.

Approximate location (for pricing)

When you first create an account, we use your IP address to detect your region for pricing purposes (for example, ₦9,000/mo for Nigerian users). After your currency is set, your IP address is not retained.

2. How we use your information

We use your information to provide and improve PassQuest. Specifically, we use it to:

• run your account and deliver personalised questions and feedback;
• calculate your readiness score and generate your training plan;
• manage your subscription via RevenueCat;
• send practice reminders and exam countdown notifications (only if you grant permission);
• display advertising through Google AdMob on the free tier;
• improve the app through anonymised usage analysis.

We do not sell your personal data to third parties for their own marketing purposes.

3. Third-party services

PassQuest uses the following third-party services to operate. Each processes your data on our behalf, bound by a data processing agreement:

• Firebase (Google LLC) — authentication, database, cloud functions, file storage, and analytics.
• OpenAI — AI question generation, Writing feedback (gpt-4o-mini), Speaking assessment (Realtime API, Phase 2), and audio generation (TTS, Phase 2). Your API key is stored only in our Cloud Function environment, never in the app.
• RevenueCat — subscription management and Pro status verification.
• Google AdMob — in-app advertising for free-tier users only. Pro subscribers see no ads and no advertising data is collected for them.
• Google Sign-In — optional authentication.
• ip-api.com — a single request at account creation to detect your region for pricing. Not used again after that.

We do not use Facebook SDK, third-party marketing trackers, or any additional analytics services beyond Firebase.

4. Advertising

Free-tier users see advertising through Google AdMob. Ads appear in three places only: a banner on the home screen, a brief interstitial between sessions (no more than once per session), and an optional rewarded ad when your hearts run out. Ads never appear mid-question, during Writing tasks, on the paywall screen, or during onboarding.

On iOS, we request permission through Apple’s App Tracking Transparency framework before accessing your advertising identifier. You can decline and still use the app fully. On Android, you can opt out of personalised ads in your device settings.

5. Data retention

We retain your account and exam progress data for as long as your account is active. Writing session history is kept until you delete your account. Speaking session transcripts are deleted after 90 days. Subscription records are kept for seven years for tax compliance. Anonymised, aggregate usage data may be retained indefinitely.

When you delete your account, all personal data is removed within 30 days. See “Your rights” below for how to request deletion.

6. Data storage and transfers

Your data is stored on Google Firebase infrastructure, primarily in the United States. By using PassQuest, you acknowledge that your data may be processed outside your home country. All data in transit is encrypted using TLS 1.2 or higher. Data at rest is encrypted with AES-256.

Where your data is transferred outside Nigeria, we ensure the transfer is subject to appropriate safeguards as required by the Nigeria Data Protection Act 2023 (NDPA) and the General Application and Implementation Directive (GAID) effective September 2025. For users in the UK and EU, transfers to the US are made on the basis of Standard Contractual Clauses.

7. Your rights

For all users

You can update your name and email in Settings at any time. You can export your question history and progress data by tapping Settings → Export My Data. You can delete your account and all associated data from within the app at Settings → Account → Delete Account. We will complete deletion within 30 days. This in-app deletion satisfies Apple’s App Store Guideline 5.1.1(v) requirement.

For users in Nigeria (NDPA 2023)

You have the right to access, correct, and delete your personal data, and to withdraw consent for processing at any time. You may lodge a complaint with the Nigeria Data Protection Commission at ndpc.gov.ng.

For users in the UK and EU (GDPR)

You have the rights of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interests. You may lodge a complaint with your local supervisory authority (e.g. the ICO in the UK).

For California residents (CCPA)

You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell your personal information.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Children

PassQuest is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us at [email protected] and we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes via an in-app notice and by updating the “Last updated” date above. Continued use of the app after a change constitutes acceptance. This policy is always available at passquest.app/privacy and in the app under Settings → Privacy Policy.