Privacy Policy
Last updated: 2 October 2026
PassPath CA is a study companion for the Ontario G1, British Columbia Class 7L and Alberta Class 7 knowledge tests. This policy explains what PassPath CA stores about you, where, and for how long.
Who we are
PassPath CA is made by Ufuk Karakuş in Ireland, who is responsible for your personal information. Contact: karakusufuk@gmail.com.
Kept on your phone only
Your name and photo on the profile card, your province, age group, language, test date, checklist ticks, answers and statistics are stored only on your device. We never receive them. Deleting the app removes them.
Practice-question notifications and the home-screen widget are prepared by your phone itself. Nothing about them is sent to a server.
Your account (optional)
You only need an account to use Community. You can sign in with Apple, Google or Facebook. We then receive and store, through Google Firebase Authentication:
- an account ID created by Firebase,
- the name and email address that Apple, Google or Facebook shares with us (with Apple you may hide your email),
- which sign-in method you used, and when you signed up and last signed in.
We do not receive your password, your contacts or your friends list, and we do not post anything to Facebook.
Community
When you post or comment, we store the text, the display name you choose, the channel (Canada or a province) and the time. Other signed-in PassPath CA users can read it. If you report a post, we store the report and the reason so we can review it. Your block list is stored with your account and is visible only to you.
Purchases
Subscriptions are handled by Apple or Google. We never see your card details. The app asks Apple or Google whether your plan is active.
No ads, no tracking
PassPath CA shows no ads, uses no advertising, analytics or tracking tools, and never sells or shares your data for marketing.
What we use your data for, and on what legal basis
We use personal data only for these purposes. The legal bases are those of the EU General Data Protection Regulation (GDPR), which applies because PassPath CA is made in Ireland.
| Data | Purpose | Legal basis |
|---|---|---|
| Account (ID, name, email, sign-in method) | Signing you in and running Community | Our contract with you (Art. 6(1)(b)) |
| Posts, comments, display name | Showing them to other PassPath CA users | Our contract with you (Art. 6(1)(b)) |
| Reports, block list, suspension records | Keeping Community safe, reviewing reports, preventing abuse | Legitimate interests in a safe service (Art. 6(1)(f)) |
| Subscription status | Giving you the access you paid for | Our contract with you (Art. 6(1)(b)) |
| Emails you send us | Answering you | Legitimate interests (Art. 6(1)(f)) |
We do not use your data for any other purpose. Giving us personal data is not a legal or contractual requirement: without an account you can use everything except Community. We make no automated decisions and do no profiling.
Who receives your data
We share personal data only with these service providers, and only with ones that provide the same or equal protection of your data as described in this policy:
- Google (Firebase Authentication and Cloud Firestore) — stores your account and Community data as our processor under its data processing terms;
- Apple, Google or Facebook — only if you sign in with them; they confirm who you are and share your name and email with us;
- Apple or Google — handle your subscription payment.
Other signed-in PassPath CA users see what you post in Community. We never sell personal data.
Where the data is stored
Community posts, comments and reports are stored in Google Cloud Firestore in the European Union (eur3 multi-region: Belgium and the Netherlands). Your sign-in account (account ID, name, email) is kept by Google Firebase Authentication, which Google runs from the United States. This means your information is processed outside Canada and may be accessible to courts and authorities in those countries under their laws. Google acts as our service provider under its data processing terms. Data is encrypted in transit and at rest.
How long we keep it
| Data | Kept |
|---|---|
| Account | Until you delete it |
| Posts and comments | Until you delete them or your account, or we remove them for breaking the Community rules |
| Reports | Until reviewed, at most 6 months |
| Suspension record (account ID only) | Only while the suspension applies — kept for security and abuse prevention, so a suspended account cannot simply be reopened |
Deleting your account
In the app: Profile → Settings → Account → Delete account. This deletes your account and everything stored with it — posts, comments, reports and block list — straight away. You can also ask by email; see Delete your account.
Your rights
You can ask to access, correct, delete or export (portability) any data we hold about you, to restrict its use, to object to use based on our legitimate interests, and to withdraw any consent at any time without affecting earlier use. Write to karakusufuk@gmail.com; we answer within one month (30 days). You can complain to the Irish Data Protection Commission (dataprotection.ie). If you live in Canada you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) under the Personal Information Protection and Electronic Documents Act (PIPEDA); in British Columbia and Alberta you can also contact your provincial Information and Privacy Commissioner.
Users in Canada
If you live in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) applies. We remain accountable for your personal information when our service provider Google processes it for us outside Canada — in the European Union and the United States — and we protect it there by contract (Google’s data processing terms) to a level comparable to the protection it would receive in Canada. Information processed abroad may be accessible to courts, law enforcement and national security authorities of those countries. Questions about our practices, including our use of service providers outside Canada: karakusufuk@gmail.com.
Children
PassPath CA is not directed at children under 13. You need to be at least 16 to create an account.