Summary

• Your account belongs to you, the student, and is separate from any other Passit product.
• We collect only what we need to run your practice: your email address, your onboarding choices, and which questions you have answered and how.
• If you sign in with Google or Microsoft, Google's Firebase Authentication handles the sign-in for us. We keep only your email address and an account id: not your name, photo, contacts or files.
• Your answers are checked by our own code against a fixed answer key. No AI service sees them, and we don't send your information to any AI provider.
• Your information is stored with Cloudflare in the Oceania region. Card payments are handled by Stripe; we never see your card.
• We never sell your information or use it for advertising.
• You can download or delete your information yourself in More, or ask us at any time.

1. Who we are

This policy explains how Passit Limited (NZ company number 9448754, NZBN 9429053858184), trading as Passit Plus ("Passit", "we", "us") collects, uses, stores, shares and protects personal information in the Passit Plus Level 3 Calculus app at app.passit.cc (the "app"). Passit Limited is the agency responsible for your personal information under the Privacy Act 2020. We follow its 13 Information Privacy Principles (IPPs).

Our privacy officer is Dr Alia Mahgoub. You can contact them at privacy@passit.co.nz.

2. Your account here is separate

An account in this app is not an account on passitplus.co.nz or any other Passit product, and we do not share or combine your information across them. The only thing they have in common is our privacy contact.

3. What we collect

• Your email address, to sign you in and send your sign-in links, welcome email and receipts. We don't ask for your name, school, year level or National Student Number.
• Your practice: for each question part you check, whether it was right, how many tries it took and when. Practice paper answers and results. For Practise for me, the level of question each skill is at.
• Your onboarding choices: the standards you are studying and your target grade.
• Sign-in records: your sign-in links and sessions, stored only as one-way hashes, with their dates.
• If you sign in with Google or Microsoft: your email address with them, whether they have verified it, their id for your account, whether it is a personal or a school account, and for a school account its Google Workspace domain or Microsoft organisation id. We never see your password, contacts, files or school records. Firebase Authentication, which does the sign-in for us, keeps a sign-in record with your email address, the account id and when you last signed in, and may also hold the name and profile photo Google or Microsoft share with it; we don't copy those into Passit.
• If you add a phone to sign in with: your mobile number and when you added and last used it. Firebase Authentication texts you the sign-in code and keeps the number with its sign-in record. Google's reCAPTCHA checks the request comes from a person, not a script. We use the number only to sign you in: no marketing texts.
• If you ask for teacher access: your name as students know you, your school, what you teach, and the school account you signed in with. Passit staff use them to check you teach at the school.
• Payments: Stripe handles card details. We receive the amount, the date, which account it was for, and Stripe's reference numbers. We never see or store card numbers.
• Things you choose to send us: problem reports (the question and your note) and emails.
• Technical information: our hosting provider records information such as your IP address, browser and the pages you request, to run and protect the app. When you ask for a sign-in link, we keep the IP address that asked with the link record, to limit how many links one address can request. We use your IP address to limit answer checks too, without storing it.

Your email address is needed to create an account. You can practise the free questions without one: then your progress stays only on your device.

4. Information kept on your device

The app keeps your progress, onboarding choices, practice papers and any answers typed while offline in your browser's storage, so it works offline and before you sign in. Signing out clears them from that device. When you sign in, they are merged into your account.

5. Why we use it

• To run the app: checking your answers, showing your progress and readiness, and suggesting what to practise next.
• To create and manage your account, and to process payments and refunds.
• To send the emails described in section 8.
• To answer questions and problem reports, and to find and fix wrong questions.
• To keep the app secure, stop misuse, and meet our legal obligations.

We only use personal information for the reason we collected it, or a directly related reason, unless you agree or the law allows it (IPP 10). We never sell personal information and never use it for advertising.

6. Who we share it with

We share personal information only with the providers that run the app for us, and only what they need:

• Cloudflare: hosting, our database and file storage (kept in its Oceania region), sending our emails, and website security (a United States company with data centres around the world).
• Stripe: payment processing (United States and other regions).
• Google (Firebase Authentication and reCAPTCHA): only if you sign in with Google or add a phone. It runs that sign-in, sends the texted codes, and keeps the sign-in record described above (United States and other regions).
• Google and Microsoft: only if you choose to sign in with them (United States and other regions). They know you signed in to Passit Plus; we send them nothing about your practice.

We do not share student information with schools, NZQA or anyone else unless you ask us to, you agree, or the law requires or allows it (IPP 11).

7. Storage outside New Zealand

Our database is kept in Cloudflare's Oceania region, which may be in Australia. Cloudflare, Stripe, and Google (including Firebase Authentication) or Microsoft if you sign in with them, may handle information in the United States and other countries. We remain responsible for it under the Privacy Act, and we choose providers whose terms and security protect personal information in ways comparable to New Zealand law, as IPP 12 requires.

8. Emails we send

Sign-in links, a welcome email when your account is created, and receipts when you pay. We don't send reminders or marketing emails. If that ever changes, we will ask you first. Our emails follow the Unsolicited Electronic Messages Act 2007.

9. Cookies

We use one cookie to keep you signed in. It lasts 60 days and can't be read by scripts on the page. When you sign in with Google or Microsoft, a second cookie lasts 10 minutes, to check that the sign-in finishes on the device that started it. We don't use advertising, tracking or analytics cookies.

10. Keeping your information safe

We take reasonable steps to protect personal information from loss, misuse and access by people who shouldn't see it (IPP 5). Information is encrypted in transit, sign-in links and sessions are stored only as hashes, and access to our systems is restricted. No online service can promise perfect security: keep your email account secure and tell us if you think someone else has used your account.

11. If something goes wrong

If a privacy breach happens that has caused, or is likely to cause, serious harm, we will tell the Office of the Privacy Commissioner and the people affected as soon as practicable, as the Privacy Act 2020 requires, and explain what happened and what we are doing about it.

12. How long we keep it

Your account and practice are kept while you use the app. We may delete an account, and the information in it, if nobody has signed in to it for 24 months. You can delete it sooner at any time.

Payment records are kept for 7 years, because New Zealand tax law requires it. When you delete your account, we keep only the payment itself (what was bought, the amount and the dates), with nothing that identifies you.

Copies in our providers' backups are removed on their normal cycle (our database keeps a 30-day history for recovery). Technical logs are kept for the short periods our providers set. We may keep de-identified information that can no longer identify anyone, for example how often a question was answered correctly.

13. Seeing, correcting and deleting your information

In More, "Download my data" gives you a copy of everything we hold for your account, "Unlink" removes a Google or Microsoft account, "Remove" removes your phone, and "Delete my account" deletes it straight away, including its Firebase sign-in record. You can also ask us for a copy, a correction or deletion at privacy@passit.co.nz (IPPs 6 and 7). We will reply within 20 working days. It is free to ask, and we may need to check who you are first.

A parent or caregiver can also ask about a student's information. Because the student is the account holder, we will usually talk with the student too. The Privacy Act lets us refuse to give a student's information to someone else if giving it would not be in the student's interests.

14. Complaints

If you are worried about how we have handled your personal information, contact our privacy officer at privacy@passit.co.nz and we will try to fix it. If you are not happy with our answer, you can complain to the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909.

15. Changes to this policy

We may update this policy. We will post the new version here and change the date. If we make a significant change to how we use personal information, we will email account holders before it takes effect.

16. Contact us

Privacy questions and requests: privacy@passit.co.nz. Other questions: help@passit.cc. Passit Limited (NZ company number 9448754, NZBN 9429053858184), trading as Passit Plus, Auckland, New Zealand.