PassFirst is operated by Ricekernel Ltd. This policy explains what we collect, why, and the choices you have. The short version: we collect only what we need to run the app, and we never sell your data.
Who we are
PassFirst ("we", "us") is a certification test-prep app operated by Ricekernel Ltd. If you have any questions about this policy or your data, contact us at [email protected].
What we collect
- Account information. Your email address, and — if you sign in with Google or Apple — the basic profile identifier those providers return. We use a secure session cookie to keep you signed in.
- Payment information. When you purchase, payment is handled by our payment processors — Stripe on the web, and Apple or Google for in-app purchases. We receive a record of the purchase and its status; we never see or store your full card number.
- Practice activity. The questions you attempt, your answers, and your progress — so we can show your results, adapt what we serve next, and let you pick up where you left off.
- Usage & diagnostics. Anonymous, first-party analytics and error data (which screens load, which actions fire, and crash/error details) collected by our own in-house tooling. This is used to keep the app working and improve it — not sold or shared for advertising.
The AI tutor
When you use the AI tutor or voice features, the relevant question, your answer, and your messages are sent to our AI model providers (Anthropic, with OpenAI as a fallback) to generate a response. We send only what's needed to produce the tutoring reply. Your conversations are not used by those providers to train their models. The tutor is a study aid and can be wrong — always verify against the official source material for your credential.
How we use your data
- To provide the app: accounts, practice, results, and purchases.
- To keep it reliable and secure: diagnostics, error monitoring, fraud and abuse prevention.
- To communicate with you: account, verification, billing, and support emails.
- To improve the product: understanding which features help people pass.
We do not sell your personal data, and we do not use it for third-party advertising.
Who we share it with
We share data only with the service providers that make the app run — our cloud hosting, database, payment processors (Stripe, Apple, Google), email delivery, and AI model providers described above — and only to the extent they need it to perform that service. We may also disclose information if required by law.
Where your data is held
Ricekernel Ltd is based in New Zealand, and our infrastructure providers host data in the United States. By using PassFirst you understand your information may be processed in these locations.
Retention & your choices
- Access & deletion. You can delete your account at any time from Settings → Delete account in the app, which removes your account and associated personal data. You can also email [email protected] to request access or deletion.
- Retention. We keep your data while your account is active and as needed to provide the service, then delete or anonymize it, except where we must retain records (for example, transaction records) by law.
Children
PassFirst is intended for adults preparing for professional credentials and is not directed to children. We do not knowingly collect data from children.
Changes to this policy
We may update this policy as the product evolves. When we do, we'll revise the "Last updated" date above and, for material changes, notify you in the app or by email.
Contact
Questions about your privacy? Email [email protected].