Privacy

This policy explains what data PassTheVoid processes, why, where it lives, and how to delete it. It covers both the AI-901 Prep mobile apps (Android and iOS) and the passthevoid.com website. UK GDPR and EU GDPR compliance is the baseline. The app is ad-free on every tier: there is no advertising SDK, no ad identifier is accessed, and nothing is used to track you across other apps or services.

Data controller

PassTheVoid is the data controller. For any privacy matter (subject access, rectification, deletion, complaints, anything else) contact privacy@passthevoid.com and we will respond within one month.

The mobile app

Data that stays on your device

Your studying happens on your device. The following never leave it unless you explicitly act to send them, and are not transmitted to us:

• Your question progress, answers, and streaks
• Spaced-repetition (SRS) card state
• App settings, theme, and chosen language
• Your tier (free or Pro)
• Any question reports you queue for later submission

This data is stored in the app's local storage on the device. You can erase all of it at any time from Settings - Reset, or by uninstalling the app.

Purchases (Pro)

If you buy the one-time Pro upgrade, the purchase is processed by the app store (Google Play or the Apple App Store) and your entitlement state is managed by RevenueCat , acting as our data processor. This is tied to your store account, so it is data linked to you (your purchase history and entitlement status). We use it only to unlock the features you paid for and to restore your purchase on a new device. The lawful basis is performance of a contract (UK/EU GDPR Article 6(1)(b)). It is not used for advertising or tracking.

Analytics and crash reports (optional, opt-in)

We would like to understand which features are used and to learn when the app breaks, so we can improve it. These are off by default and only run if you turn them on; you can change your choice at any time in Settings.

• Product analytics are handled by PostHog, hosted in the EU. We send a small, fixed set of product events (for example: a mock started, a question saved) described only by counts and category labels. We do not attach a user ID, and we never send your question content or answers. This data is not linked to your identity.
• Crash reports, when enabled and active, send diagnostic information about errors so we can fix them. They are processed in the EU, your IP address is scrubbed, and question content is never included.

The lawful basis for both is your consent (UK/EU GDPR Article 6(1)(a)), given by enabling them. Withdrawing consent in Settings stops the relevant collection.

The website (passthevoid.com)

What this site collects

We use Plausible, a privacy-friendly, cookieless analytics service hosted in the EU (Germany), to count aggregate visits and see which pages are read. Plausible sets no cookies, stores nothing on your device, collects no personal data, and does not track you across other sites or apps. It records only de-identified, aggregate figures (such as page views, referrers, country, and device type), so individual visitors cannot be singled out. The lawful basis is our legitimate interest (UK/EU GDPR Article 6(1)(f)) in understanding and improving the site; because no cookie or device storage is used, no consent banner is required.

Beyond Plausible, the site sets no cookies and loads no advertising or cross-site tracking scripts. The email signup form does load a Cloudflare Turnstile bot-challenge widget from challenges.cloudflare.com; Turnstile is cookieless and privacy-preserving (see Cloudflare's documentation for details).

Email signup

If you submit your email to be notified when the app launches, we send it to Resend (our email service provider, acting as data processor under a Data Processing Agreement, with EU and US data centres) and store it in an audience called launch-list.

Optional post-signup survey

After you sign up, the confirmation page offers an optional three-question survey: which AI-901 areas you expect to find hardest, roughly when you plan to sit the exam, and which background best describes you. Answering is entirely optional and you can skip with a single click.

If you choose to answer, your responses are stored in a Cloudflare D1 database (Cloudflare acts as data processor; data resides on Cloudflare's global edge infrastructure) and linked to the email address you submitted via a short-lived signed token. We use these answers only to prioritise which study content we build, and to segment the launch email so you receive the most relevant announcement. We do not share the answers with any third party.

The lawful basis for the website email signup and the optional survey is your consent (UK/EU GDPR Article 6(1)(a)). Submitting the form, or clicking Save and continue on the survey, is the act of giving it; clicking Skip stores nothing. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Everything else

Sub-processors

We use the following third parties to operate the service:

• Google Play and the Apple App Store - app distribution and billing (their own privacy policies apply).
• RevenueCat - purchase and entitlement processing (mobile app).
• PostHog - product analytics, EU-hosted, only when you opt in (mobile app).
• Sentry - crash diagnostics, EU-hosted, IP scrubbed, only when you opt in (mobile app).
• Plausible - privacy-friendly, cookieless website analytics, EU-hosted (website only).
• Resend - launch-announcement email (website signup only).
• Cloudflare - website hosting, the Turnstile bot-challenge, and the optional survey database.

We do not sell your data, and we do not share it for advertising.

Retention

• App data on your device persists until you clear it via Settings - Reset, or uninstall the app.
• Purchase records are retained as long as required to provide the service and to meet tax and accounting obligations (typically up to 6 years in the UK).
• Email addresses and any survey answers are retained until the launch announcement is sent, plus up to 30 days for bounce handling, after which they are deleted unless you have separately opted in to ongoing communications.

Children

PassTheVoid is not directed at children under 16. We do not knowingly collect personal data from children.

Your rights

Under UK GDPR / EU GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate data rectified
• Have your data erased (the "right to be forgotten")
• Receive your data in a portable format
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise any of these rights, email privacy@passthevoid.com . We will respond within one month.

UK residents can complain to the Information Commissioner's Office at ico.org.uk . If you are in the EU or EEA, you can lodge a complaint with your local data protection authority.

Changes to this policy

We will update this page when we change what the apps or the site do. The "Last updated" date at the top reflects the most recent change.