PassPulse
<!-- DRAFT: This document is a working draft and has not been reviewed by legal counsel. Review and finalize before public launch. -->

Privacy Policy

Last updated: May 2026

PassPulse ("we," "us," "our") is operated by [PLACEHOLDER: Legal entity name]. This Privacy Policy explains how we collect, use, and protect information when you use PassPulse.


1. Information We Collect

1.1 Account Information

When you register, we collect your email address, full name, and (optionally) your target exam date and study preferences.

1.2 Usage and Performance Data

We collect data about your study activity, including questions answered, answer selections, time spent, session history, and performance scores. This data powers your Readiness Score, adaptive recommendations, and progress analytics.

1.3 Payment Information

Payments are processed by Stripe, Inc. We do not store your full card number, CVV, or payment credentials. Stripe may retain payment data pursuant to their own privacy policy. We store only your Stripe customer ID and subscription status.

1.4 AI Tutor Conversations

Messages you send to the AI Tutor are transmitted to our AI provider to generate responses. We may retain conversation history to provide continuity within your session. We do not sell conversation data.

1.5 Technical Data

We automatically collect IP address, browser type, device type, and usage logs for security and operational purposes.


2. How We Use Your Information

We use your information to:

  • Provide and improve the Service
  • Personalize your study experience and adaptive recommendations
  • Process subscription payments and send billing notifications
  • Send transactional emails (welcome, receipts, billing reminders)
  • Respond to support requests
  • Monitor for fraud and security threats
  • Comply with legal obligations

We do not sell your personal data to third parties.


3. Service Providers

We share data only with trusted service providers acting on our behalf:

| Provider | Purpose | Data Shared | |----------|---------|-------------| | Supabase | Database and authentication | Account, usage, performance data | | Stripe | Payment processing | Name, email, billing data | | Resend | Transactional email | Name, email | | Google (Gemini API) | AI question generation | Question content (no PII) | | Anthropic (Claude API) | AI Tutor responses | Tutor messages, question context | | Vercel | Hosting and infrastructure | Usage logs |


4. Data Retention

We retain your account and performance data for as long as your account is active. If you request account deletion, we will delete or anonymize your personal data within 30 days, subject to legal retention requirements.


5. Your Rights

Depending on your location, you may have rights to:

  • Access and export your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Withdraw consent

To exercise these rights, email info@passpulse.pro.


6. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal data from children.


7. Security

We use industry-standard measures including encryption in transit (TLS), encrypted storage, and access controls. No system is 100% secure; we encourage you to use a strong password and keep it confidential.


8. Cookies

We use cookies and similar technologies as described in our Cookie Policy.


9. Changes to This Policy

We will notify you of material changes via email or in-app notice. Continued use of the Service after changes take effect constitutes acceptance.


10. Contact

For privacy questions or data requests, contact us at info@passpulse.pro.