Passaroo ("we", "us", "our") respects your privacy. This Privacy Policy explains what data we
collect, how we use it, and your rights under the Australian Privacy Principles and applicable law.
Account info: name, email, password hash (when you sign up with email) or your
display name and email from Google / Apple / Microsoft Sign-In.
Study data: your exam attempts, answers, scores, flashcards, study streak, XP
and tier-related counters.
Device data: a stable device identifier (used to detect fraud, enforce single
active session and stop bot abuse), OS version, app version, and approximate timezone.
Subscription data: tier, billing period, RevenueCat App User ID, and entitlement
expiry — synced from the Apple App Store / Google Play purchase event.
AI usage data: we keep counters of how many AI explanations and tutor messages
you've used per day so that we can enforce fair-use limits.
Push tokens: if you opt in to notifications, we store your device push token.
Ad identifiers: on iOS, only after you grant App Tracking Transparency consent.
On Android, Google's Advertising ID is used by Google AdMob to serve ads. You can reset/limit this
from your OS settings.
3. How we use your data
To provide the core service (track progress, save bookmarks, generate AI explanations).
To enforce fair-use limits and protect against abuse, scraping, and account sharing.
To manage your subscription and process renewals/cancellations via Apple App Store, Google
Play, and RevenueCat.
To send you study reminders, streak protection alerts, and product updates (only if you opt in
to notifications).
To serve relevant ads (free tier only) via Google AdMob.
To improve our content (which questions are most missed) — aggregated and anonymised.
4. Third-party services we use
MongoDB Atlas — database hosting.
Railway — backend hosting.
Google (AdMob, Firebase Cloud Messaging) — ads + push notifications.
RevenueCat — subscription management.
Apple, Google, Microsoft — OAuth sign-in (we receive your email and display
name only, never your password).
Google Gemini (via Emergent) — AI explanations and tutor responses. Your study
content is sent to the AI provider to generate replies; replies are not used to retrain models.
5. Children
Passaroo is intended for users aged 16+. If we learn that a child under 16 has created an account,
we will delete their data.
6. International transfers
Your data may be processed on servers outside of Australia (e.g., in the US, Europe, or
Singapore — wherever our cloud providers operate). We rely on standard contractual clauses where
required.
7. Data retention
We keep your account and study data while your account is active. You can delete your account from
Profile → Delete My Account & Data; this triggers an immediate hard-delete. Some records (e.g.,
purchase receipts for tax compliance) may be retained for the legally required period — see
“What we keep” in section 8 below.
8. How to delete your Passaroo account & data
You can permanently delete your Passaroo account and the personal data associated
with it at any time. Two options are available:
Option 1 — Delete from inside the Passaroo app (recommended, instant)
Open the Passaroo app on your phone or tablet.
Make sure you are signed in to the account you want to delete.
Tap the Profile tab at the bottom of the screen.
Scroll to the Account section.
Tap Delete My Account & Data.
Confirm the action in the warning dialog. You will be signed out automatically. The action cannot
be undone.
Option 2 — Request deletion by email
If you no longer have access to the app, email us:
Body: The email address you used to sign up for Passaroo.
We verify your identity by replying to that email address. Once verified, we delete your account
within 7 business days and confirm completion by email.
What gets deleted
Your account (email, name, profile picture, password hash, OAuth identifiers).
All study data — exam attempts, scores, streaks, XP, bookmarked questions, flashcards.
All AI usage data — tutor chat history, AI explanation counters, fair-use counters.
Subscription linkage on our side. Note: deleting your account does NOT cancel your Apple App
Store / Google Play subscription — you must cancel that separately in App Store / Play settings
(see Refund & Cancellation Policy).
Device identifiers and push tokens associated with your account.
What we keep (and for how long)
Purchase receipts: retained for up to 7 years where required by Australian tax
law. After your account is deleted these receipts are anonymised against an internal reference
number with no link back to your personal identity.
Aggregated, anonymous analytics: retained indefinitely. This data cannot be
used to identify you.
Abuse / fraud logs: if your account was suspended for fraud or policy
violations, we retain a hashed device fingerprint for up to 24 months to prevent re-registration.
This record contains no personal data.
Email backups: support email threads are retained by our email provider for up
to 2 years per their retention policy.
Timing & backups
In-app deletion is immediate. Email-based deletion is completed within
7 business days of identity verification. Backups may retain a copy for up to
30 days after which they are overwritten by routine rotation.
9. Your rights
You can: access your data, correct it, port it (via account export), delete it, or withdraw
consent for marketing. Email app.hrsupport@gmail.com with your
request — we respond within 30 days.
10. Security
Passwords are hashed with bcrypt. Communications use TLS. We never sell your data.
11. Changes to this policy
Material changes are announced in the app and update the “Last updated” date above.
Continued use after changes take effect means you accept the new policy.
12. Australian Consumer Law
Nothing in this policy excludes or limits your rights under the Australian Privacy Principles or the
Australian Consumer Law.
13. Contact
Questions or complaints: app.hrsupport@gmail.com. Unresolved
complaints can be escalated to the Office of the Australian Information Commissioner (OAIC).