Privacy Policy
Last updated: 2 October 2026
PassPath CH is a study companion for the Swiss basic theory exam. This policy explains what PassPath CH stores about you, where, and for how long.
Who we are
PassPath CH is made by Ufuk Karakuş in Ireland, who is the data controller. Contact: karakusufuk@gmail.com.
Kept on your phone only
Your name and photo on the profile card, your canton, licence stage, exam language, language, exam date, checklist ticks, answers and statistics are stored only on your device. We never receive them. Deleting the app removes them.
Practice-question notifications and the home-screen widget are prepared by your phone itself. Nothing about them is sent to a server.
Your account (optional)
You only need an account to use Community. You can sign in with Apple, Google or Facebook. We then receive and store, through Google Firebase Authentication:
- an account ID created by Firebase,
- the name and email address that Apple, Google or Facebook shares with us (with Apple you may hide your email),
- which sign-in method you used, and when you signed up and last signed in.
We do not receive your password, your contacts or your friends list, and we do not post anything to Facebook.
Community
When you post or comment, we store the text, the display name you choose, the channel and the time. Other signed-in PassPath CH users can read it. If you report a post, we store the report and the reason so we can review it. Your block list is stored with your account and is visible only to you.
Purchases
Subscriptions are handled by Apple or Google. We never see your card details. The app asks Apple or Google whether your subscription is active.
No ads, no tracking
PassPath CH shows no ads, uses no advertising, analytics or tracking tools, and never sells or shares your data for marketing.
What we use your data for, and on what legal basis
We use personal data only for these purposes. The legal bases are those of the EU General Data Protection Regulation (GDPR), which applies because PassPath CH is made in Ireland.
| Data | Purpose | Legal basis |
|---|---|---|
| Account (ID, name, email, sign-in method) | Signing you in and running Community | Our contract with you (Art. 6(1)(b)) |
| Posts, comments, display name | Showing them to other PassPath CH users | Our contract with you (Art. 6(1)(b)) |
| Reports, block list, suspension records | Keeping Community safe, reviewing reports, preventing abuse | Legitimate interests in a safe service (Art. 6(1)(f)) |
| Subscription status | Giving you the access you paid for | Our contract with you (Art. 6(1)(b)) |
| Emails you send us | Answering you | Legitimate interests (Art. 6(1)(f)) |
We do not use your data for any other purpose. Giving us personal data is not a legal or contractual requirement: without an account you can use everything except Community. We make no automated decisions and do no profiling.
Who receives your data
We share personal data only with these service providers, and only with ones that provide the same or equal protection of your data as described in this policy:
- Google (Firebase Authentication and Cloud Firestore) — stores your account and Community data as our processor under its data processing terms;
- Apple, Google or Facebook — only if you sign in with them; they confirm who you are and share your name and email with us;
- Apple or Google — handle your subscription payment.
Other signed-in PassPath CH users see what you post in Community. We never sell personal data.
Where the data is stored
Community posts, comments and reports are stored in Google Cloud Firestore in the European Union (eur3 multi-region: Belgium and the Netherlands). Your sign-in account (account ID, name, email) is kept by Google Firebase Authentication, which Google runs from the United States; that transfer is covered by the EU–US Data Privacy Framework and the EU Standard Contractual Clauses. Google acts as our processor under its data processing terms. Data is encrypted in transit and at rest.
How long we keep it
| Data | Kept |
|---|---|
| Account | Until you delete it |
| Posts and comments | Until you delete them or your account, or we remove them for breaking the Community rules |
| Reports | Until reviewed, at most 6 months |
| Suspension record (account ID only) | Only while the suspension applies — kept for security and abuse prevention, so a suspended account cannot simply be reopened |
Deleting your account
In the app: Profile → Settings → Account → Delete account. This deletes your account and everything stored with it — posts, comments, reports and block list — straight away. You can also ask by email; see Delete your account.
Your rights
You can ask to access, correct, delete or export (portability) any data we hold about you, to restrict its use, to object to use based on our legitimate interests, and to withdraw any consent at any time without affecting earlier use. Write to karakusufuk@gmail.com; we answer within one month. You can complain to the Irish Data Protection Commission (dataprotection.ie).
Users in Switzerland
If you live in Switzerland, the Swiss Federal Act on Data Protection (FADP) also applies. Your data is sent to the European Union (Belgium and the Netherlands), which Switzerland recognises as providing adequate protection, and your sign-in account to the United States, to Google LLC, which is certified under the Swiss–U.S. Data Privacy Framework recognised by the Swiss Federal Council. You have the rights described above and can also contact the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch).
Children
PassPath CH is not directed at children under 16. You need to be at least 16 to create an account.