passumiPrivacy policy
Last updated October 14, 2026
What this policy covers
This policy describes information handled when you use Passumi’s website and exam-practice tools. It applies to guest practice and registered accounts. Exam organisers operate their own services under their own privacy policies.
Account and practice information
If you register, we process the name, email address and authentication information supplied by you or your chosen sign-in provider. Practice records include the paper and question version, answers, flags, notes, elapsed time, scores and timestamps. Registered study features may also store bookmarks, mistakes and access entitlements.
Guest sessions and cookies
An essential signed cookie identifies a guest browser and lets it return to a saved attempt. Authentication cookies keep registered users signed in. Guest attempts can be linked to your account after sign-in. Clearing cookies or changing browsers can remove your ability to recover an unclaimed attempt.
Technical and security data
Requests may include IP addresses, browser details, referring pages and error or security logs. Guest-start rate limiting uses an HMAC digest rather than storing the raw IP in that rate-limit record. We use technical data to operate the service, prevent abuse and diagnose failures. This does not mean every infrastructure log is anonymised.
How we use information
We use information to provide and save practice sessions, calculate results, manage access, secure accounts, respond to requests and improve the service. Optional marketing communications require a separate choice where applicable. We do not use your practice score as an exam organiser’s assessment.
Service providers and payments
When enabled, hosting, database, email, authentication, analytics and payment providers process information needed for their role. Paid plans are not currently on sale. If payments become available, the payment processor will handle payment-card details; Passumi will retain the transaction and access records needed to administer the purchase. Provider configuration may change as the service develops.
Retention and protection
We retain account and study records while needed to provide the service and handle legitimate security, support or legal obligations. No fixed automatic deletion period is promised on this page. Access controls and other safeguards reduce risk, but no online system can guarantee absolute security.
Your choices and requests
You can control browser cookies, stop using guest practice, and use available account settings to manage your details. You may request access, correction or deletion through the contact page. We may need to verify that a request concerns your account. Applicable privacy rights depend on your location; some records may need to be retained to meet legal obligations.
Updates
We will revise this page when our data handling changes and show the revision date. Material changes will be communicated through the service where appropriate.