Privacy policy

PassNPPE (www.passnppe.ca) is an online study resource for the National Professional Practice Examination, operated from Ontario, Canada. We are responsible for the personal information described here. Our Privacy Officer is accountable for this policy and can be reached at hi@passnppe.ca.

• Account details: your email address, your name if you add one, and your password, which we store only as a secure one way hash. If you sign in with Google, we receive your Google account identifier, email address and name.
• Study activity: your answers, practice sessions and exam attempts, scores, reading progress, flashcard reviews, and any highlights and notes you save.
• Security information: the IP address and browser type used for sign in sessions and important account events, such as sign ins, password changes and plan changes.
• Launch list: your email address, if you ask to be told when Pro launches. We send one confirmation when you join and one email at launch, each with an unsubscribe link.
• Messages: anything you send us by email.
• Payments, once billing opens: payments are processed by Stripe. We receive your name, email, the amount and a payment reference. We never see or store your full card number.

• We do not sell or rent your personal information.
• We do not show advertising and we do not use advertising or third party analytics trackers.
• We use one essential cookie to keep you signed in. Display preferences such as night mode, text size and your reading position are stored in your own browser.

• To run your account and keep your progress in sync across devices.
• To provide the service: practice, the exam simulator, the study guide, flashcards and results.
• To send account emails, such as email verification, password resets and, once billing opens, receipts.
• To keep accounts secure and prevent fraud and abuse.
• To answer your questions and requests.
• To improve our content, using study activity in aggregate, for example to find questions many people find unclear.
• To meet legal obligations, such as keeping purchase records for tax purposes.

We send marketing emails only if you ask for them, and every one includes a way to unsubscribe. Account emails that you need to use the service are not marketing.

By creating an account or joining the launch list, you consent to the uses described here. You can withdraw consent at any time by deleting your account or asking us to, although we then cannot provide the service.

We share personal information only with providers who help us run PassNPPE, only as needed for that purpose, and under their own security and privacy commitments:

• Railway: hosting for our website, application and database.
• Cloudflare: domain name service and network security.
• Google Workspace: delivery of our emails and our support inbox.
• Google: sign in, if you choose to sign in with Google.
• Stripe: payment processing, once billing opens.

We may also disclose information where the law requires it, for example in response to a valid legal order.

Our application and database are hosted in the United States (California), and our providers may process information in other countries. Information stored outside Canada is subject to the laws of those countries and may be accessible to their courts and authorities. We choose providers that protect information to a standard comparable to Canadian law.

• Account and study information: for as long as your account is open.
• Sign in sessions: they expire after 30 days without use.
• Security records: for as long as needed to protect accounts and meet legal obligations.
• Purchase records: six years, as Canadian tax law requires.
• Launch list: until Pro launches and we have told you, or until you unsubscribe or ask us to remove you.

When you delete your account in Settings, it is closed and you are signed out on every device. To have your remaining personal information erased, email hi@passnppe.ca from your account email and we will erase it within 30 days, except records we must keep by law.

• Access: ask what personal information we hold about you and get a copy.
• Correction: ask us to correct information that is wrong or incomplete.
• Deletion: delete your account in Settings, or ask us to erase your information.
• Withdrawal of consent: stop marketing emails at any time, or close your account.

Email hi@passnppe.ca and we will respond within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or, if you live in Quebec, to the Commission d'accès à l'information du Québec.

All traffic to PassNPPE is encrypted with HTTPS. Passwords are stored only as strong one way hashes, sign in sessions can be revoked, and access to our systems is limited to the people who run the service. If a breach ever creates a real risk of significant harm, we will notify you and the Privacy Commissioner as the law requires.

PassNPPE is for adults preparing for professional licensure. We do not knowingly collect personal information from anyone under 16.

We will post any change on this page with a new date. If a change materially affects how we use your information, we will tell you by email before it takes effect. See also our terms of service.