Privacy Policy
This Privacy Policy explains how PPL Exam Prep (“we”, “us”, “the App”) collects, uses, and shares information when you use our mobile application and related services at ppl-prep.app and api.ppl-prep.app.
1. Who we are
PPL Exam Prep is a study app for PPL/LAPL theory exam preparation (practice questions and mock exams). Contact for privacy questions: admin@ppl-prep.app.
2. Information we collect
Depending on how you use the App, we may process:
- Account data: email address, display name, password (stored hashed), email verification status, account creation time.
- Google Sign-In: if you sign in with Google, we receive a Google ID token and store your Google account identifier and email (and name when provided by Google) to create or link your account.
- Learning data: practice answers, progress per subject, mock exam attempts, scores, and related study history needed to operate the App.
- Subscription / purchases: entitlement and subscription status for Pro features. Purchases are processed by Google Play; we receive purchase/entitlement events via RevenueCat webhooks (for example product identifiers and entitlement status), not your full payment card details.
- Technical data: authentication tokens, basic server logs (such as IP address, timestamps, and request metadata) used for security, debugging, and abuse prevention.
- Device-local data: the App may store session tokens and local preferences on your device (for example via on-device storage) so you stay signed in.
We do not sell your personal information.
3. How we use information
- Create and manage your account, including email verification and password reset.
- Provide practice, mock exams, progress, and profile features.
- Process and restore Pro entitlements after in-app purchases.
- Send transactional emails (verification, password reset, welcome) via Amazon SES.
- Secure the service, prevent fraud/abuse, and improve reliability.
- Comply with legal obligations when required.
4. Legal bases (EEA/UK users)
Where GDPR/UK GDPR applies, we process data under:
- Contract — to provide the App you requested.
- Legitimate interests — security, service improvement, and abuse prevention.
- Consent — where required (for example certain optional permissions or marketing, if we ever offer it; we currently send only transactional emails).
- Legal obligation — when the law requires us to retain or disclose information.
5. Sharing with service providers
We use processors that help us run the App:
- Hosting: cloud hosting for the API and website (currently UpCloud).
- Email: Amazon SES (and related bounce/complaint handling).
- Sign-in: Google Sign-In / Google Identity.
- Payments / entitlements: Google Play Billing and RevenueCat.
These providers process data on our behalf or as independent controllers where their own policies apply (for example Google’s handling of your Google Account and Play purchases).
6. International transfers
Our servers and providers may process data in countries other than yours. Where required, we rely on appropriate safeguards (such as standard contractual clauses used by providers) or other lawful transfer mechanisms.
7. Data retention
We keep account, learning, and subscription records while your account is active and as needed to provide the service. To request deletion of your account and associated data, use https://ppl-prep.app/delete-account or email admin@ppl-prep.app. We may retain limited information when required for legal, security, or accounting reasons (for example purchase records).
8. Security
We use industry-standard measures such as HTTPS/TLS, hashed passwords, and access controls. No method of transmission or storage is 100% secure.
9. Your rights
Depending on your location, you may have rights to:
- Access, correct, or delete personal data
- Object to or restrict certain processing
- Data portability
- Withdraw consent where processing is based on consent
- Lodge a complaint with a supervisory authority
To exercise these rights, contact admin@ppl-prep.app.
10. Children
The App is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided data, contact us and we will take appropriate steps.
11. Changes
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the App after an update means you accept the revised policy, where permitted by law.
12. Contact
Privacy requests: admin@ppl-prep.app
Website: https://ppl-prep.app