Privacy Policy

1. Who We Are

PassPrep ("we", "us", "our") operates the PassPrep platform at passpreponline.com.au — an online exam preparation service for Australian students preparing for private school scholarship and selective entry examinations.

If you have questions about this policy or how we handle your information, contact us at hello@passpreponline.com.au.

2. What Information We Collect

Account and contact information

• Email address (required to create an account or download resources)
• Name (optional, if provided during signup)
• Password (stored as a one-way hash — we cannot read your password)

Payment information

Subscription payments are processed by Stripe, Inc. We do not store your card number, CVV, or full payment details on our servers. Stripe provides us with a non-sensitive token and basic transaction records (amount, date, status). Stripe's privacy policy is available at stripe.com/au/privacy.

Usage and performance data

• Practice test results, scores, and answers
• Essay submissions and AI-generated feedback
• Time spent on sections and question-level performance
• Log data (IP address, browser type, pages visited, timestamps)

Communications

If you contact us by email or through a support ticket, we retain that correspondence to help resolve your query and improve our service.

3. How We Use Your Information

We use personal information to:

• Provide and maintain the PassPrep platform and your account
• Process subscription payments and manage billing
• Send your requested resources (such as our exam dates checklist)
• Send service-related communications (receipts, password resets, feature updates)
• Send educational content and PassPrep product updates by email — you can unsubscribe at any time
• Track and display your child's progress across practice tests and sections
• Generate AI-marked written expression feedback
• Improve the platform by analysing aggregate, de-identified usage patterns
• Respond to support requests
• Comply with our legal obligations

We will not use your personal information for purposes that are inconsistent with the reason it was collected, unless you consent or we are otherwise permitted or required by law.

4. Disclosure to Third Parties

We share personal information with the following categories of third-party service providers who help us operate the platform:

• Supabase — database hosting and authentication (data stored on servers in the United States)
• Stripe — payment processing (subject to Stripe's own privacy policy)
• Resend — transactional and marketing email delivery
• Vercel — web application hosting
• Anthropic — AI infrastructure used to power written expression feedback

All third-party providers are contractually required to protect your information and use it only for the purpose of providing services to us.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

We may disclose your information if required by Australian law, a court order, or government authority, or to protect the rights, property, or safety of PassPrep, our users, or the public.

Overseas disclosure

Some of our service providers store or process data outside Australia (primarily in the United States). Where this occurs, we take reasonable steps to ensure those providers are bound by privacy standards consistent with the Australian Privacy Principles. By using PassPrep, you consent to the transfer of your information to these overseas providers for the purposes described in this policy.

5. Children's Privacy

PassPrep is designed primarily for use by parents managing preparation for children in Years 5–8 (approximately 10–14 years of age). We do not knowingly collect personal information directly from children under 13 without verifiable parental consent.

Accounts should be created by a parent or guardian. By creating an account and using PassPrep on behalf of a child, you represent that you are that child's parent or legal guardian and consent to the collection and use of information as described in this policy.

Student performance data (test results, essay submissions) is associated with the parent's account and used only to provide the service.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. If you close your account, we will delete or de-identify your personal information within 90 days, except where we are required by law to retain certain records for a longer period (for example, financial transaction records).

Practice test data and essay submissions may be retained in de-identified, aggregated form to improve the platform after your account is closed.

7. Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access. These steps include encrypted data transmission (HTTPS), hashed password storage, and access controls limiting who can access personal data within our systems.

No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we will notify affected users and the Office of the Australian Information Commissioner (OAIC) in the event of a data breach that is likely to result in serious harm, as required by the Notifiable Data Breaches scheme.

8. Cookies and Tracking

PassPrep uses cookies and similar technologies to maintain your session, remember your preferences, and understand how the platform is used. Essential cookies are required for the service to function. You can disable non-essential cookies through your browser settings, though this may affect functionality.

9. Your Rights

Under the Privacy Act 1988 and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or out-of-date information
• Request deletion of your personal information (subject to our legal obligations)
• Unsubscribe from marketing emails at any time using the unsubscribe link in any email we send
• Make a complaint if you believe we have mishandled your information

To exercise any of these rights, contact us at hello@passpreponline.com.au. We will respond within 30 days.

10. Complaints

If you are not satisfied with our response to a privacy concern, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

11. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will notify you by email or by posting a notice on the platform. Continued use of PassPrep after changes are posted constitutes your acceptance of the updated policy.