Privacy
Privacy policy
Last updated 22 August 2026
This explains what Passpoint collects, why, and the choices you have. We keep it plain and we keep it short, because we collect little.
Passpoint is an IELTS preparation product. In this policy, “we” and “Passpoint” mean the team behind Passpoint. If you have any question about your data, email us at hello@getonpasspoint.com.
What we collect
- Your email address, so we can create your account and send you a secure sign-in link. We use passwordless sign-in, so we do not store a password.
- Information you choose to add: your exam dates, the band scores you report after your test, and a testimonial if you write one. You give these to us on purpose, and you can leave them blank.
- Your work in the app: your answers, and the practice estimates our AI feedback produces, so we can show you your results.
- Basic device information (a coarse browser label) so we can limit how many devices use one account and discourage account sharing.
- How the site and app are used (pages viewed, general location, actions like starting a mock), through privacy-focused product analytics, so we can improve the product.
- We never see or store your card details. Payments are handled entirely by our payment provider.
Why we use it
- To run your account and give you access to what you bought.
- To send you sign-in links, and, if you add your exam dates, a reminder before the exam and a request for your scores afterwards.
- To understand what works and improve the strategy guide, practice, and feedback.
- To keep the service secure and prevent abuse.
We do not sell your data, and we do not use it for advertising by third parties.
Who processes it for us
We use a small set of trusted providers to run Passpoint. They process data only to provide their service to us:
- Supabase, for accounts and the database.
- Resend, to send account and reminder emails.
- Paystack, to process payments securely.
- PostHog (EU), for product and site analytics.
- Vercel, to host the site and app.
Some of these providers may process data on servers outside Nigeria. Where that happens, we rely on the provider’s own safeguards.
Cookies and analytics
We use essential cookies to keep you signed in, and privacy-focused analytics to see how the product is used. We do not use advertising or cross-site tracking cookies.
Your choices and rights
You can ask us to show you, correct, or delete the personal data we hold about you, at any time, by emailing hello@getonpasspoint.com. We will act on your request within a reasonable time. You can unsubscribe from non-essential emails at any point; we will still send the sign-in emails you need to use your account. Your testimonial is only ever shown with your explicit consent, and you can withdraw it by emailing us.
How long we keep it
We keep your data while your account is active, and delete it on request. Analytics data is kept in aggregate for a limited period.
Children
Passpoint is intended for people aged 16 and over. If you are younger, please use it with a parent or guardian.
Changes to this policy
If we change how we handle your data, we will update this page and change the date at the top.
Contact
Questions, requests, or concerns about your privacy: hello@getonpasspoint.com. If you are in Nigeria, you also have rights under the Nigeria Data Protection Act, and you may contact us first so we can help.