1. Information we collect
We collect only the information needed to run your account and track your exam preparation:
•
Account details — email address, display name (if provided), and authentication credentials managed through Firebase Auth.
•
Study activity — lesson attempts, question answers, weak-area lists, mock exam scores, time spent studying, and exam date preferences.
•
Purchase records — trade access purchases, access window dates, Stripe customer and payment reference IDs, and amounts paid. We do not store full credit card numbers.
•
Technical data — basic device and browser information needed to deliver the service and diagnose errors.
2. How we use your information
We use personal information to:
•
Create and secure your account.
•
Provide lessons, progress tracking, readiness scores, and mock exams.
•
Process payments and manage trade access windows.
•
Send transactional emails such as verification, password reset, and purchase receipts.
•
Improve content quality and fix technical issues.
•
Comply with legal obligations.
3. Where your data is stored
Learner profiles, study progress, question content, and payment metadata are stored in PostgreSQL databases hosted on Neon.
Authentication credentials (email and password hash, or OAuth tokens) are processed by Firebase Auth. Firebase may store credential data in the United States or other regions. Study records and identifiable learner data remain in our application database.
Payment card data is processed by Stripe under PCI DSS standards. Card numbers are not stored in our application.
4. When we share information
We do not sell your personal information. We share data only with service providers that help us operate the app, such as hosting, authentication, and payment processors. These providers may only use your information to perform services for us and must protect it appropriately.
We may disclose information if required by law or to protect the rights, safety, and security of our users and the public.
5. How long we keep information
We retain your account and study data while your account is active so you can continue preparing for your exam.
You can delete your account anytime from Account settings in the app. We remove study progress and profile data promptly. Purchase records may be anonymized and retained where required for legal, tax, or fraud-prevention purposes.
6. Your rights and choices
Under PIPEDA, you may:
•
Access the personal information we hold about you through your account dashboard.
•
Request correction of inaccurate information.
•
Request deletion of your account and associated study data.
•
Withdraw consent for optional marketing communications at any time.
7. Marketing communications
We may send promotional emails only if you have given express consent, in compliance with Canada’s Anti-Spam Legislation (CASL).
Transactional messages — such as email verification, password resets, and purchase confirmations — do not require separate marketing consent.
Every marketing email includes a way to unsubscribe.
8. Security
We use industry-standard safeguards including encrypted connections (HTTPS), access controls, and secure payment processing through Stripe.
No method of transmission or storage is completely secure. Please use a strong, unique password and keep your login credentials confidential.
9. Children
Our service is intended for apprentices and adult learners preparing for trade certification exams. It is not directed at children under 13, and we do not knowingly collect personal information from children.
10. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. Continued use of the service after changes take effect means you accept the revised policy.
11. Contact us
For privacy questions or data requests, email support@passredsealexam.ca. You can also delete your account in-app under Account settings.