Privacy Policy
PMP Exam Prep, by Steadfox · Last updated: 9 October 2026
PMP Exam Prep ("the app") is practice material for the PMP exam, made by SteadFox, Siliguri, India ("we", "us"). This policy explains what the app collects, why, who receives it, and the choices you have. Contact: steadfox.app@gmail.com.
The app is independent practice material. It is not affiliated with or endorsed by PMI. PMP is a registered mark of Project Management Institute, Inc.
What we collect
Your account. Your email address and a password (stored by our sign-in provider in hashed form; we never see or store your password), or, if you choose Sign in with Apple or Google, the identifier those services give us (and your email if you share it). We also create a random user id for your account.
Your practice. For each question you answer: which question, which options you chose, whether you were right, how long you took, and when. This is how the app shows your progress, remembers where you stopped, restores your history on a new phone, and counts your free questions.
Mistake reports. If you report a mistake, we receive the question, the app version and the note you choose to write (up to 1000 characters). Please do not put personal information in the note.
Subscription. If you subscribe, Apple or Google processes the payment; we never see your card details. We use a subscription service (RevenueCat) that tells the app whether your subscription is active, linked to your user id.
Usage analytics. We record a small, fixed set of events, such as opening the app, answering a question (with the domain, whether it was correct, the question id and the time taken), starting or finishing a case study, viewing the paywall and the exam information screen, and reporting a mistake. Events are linked to your user id, not your email. They never contain the text of a question or your notes. The analytics tool also receives basic device details: operating system and version, device model, app version and language. We do not use automatic screen or touch recording.
Crash reports. If the app crashes we may receive technical details of the crash (what the app was doing, device and operating system, app version) so we can fix it.
What we do not collect. Your location, contacts, photos, camera, microphone, advertising identifier or health information. We do not show advertising and we do not sell your data.
What stays on your phone
The question bank, your answers (until they are uploaded), where you stopped in a session, whether you have seen the introduction, and your sign-in. This is kept in the phone's own storage, and your sign-in in its secure storage.
Why we use it
To run the app (sign-in, saving and restoring your progress, offering the free questions, unlocking paid content), to fix wrong questions, to keep the app working and secure, and to understand which parts are used so we can improve them. We rely on your agreement to the terms of use to provide the service, and on our legitimate interest in improving and securing it.
Who receives it
These companies process data for us, only to provide their service:
- Supabase: account, sign-in, your answers, mistake reports and your profile. Data is stored in EU region.
- RevenueCat: whether your subscription is active, tied to your user id.
- PostHog: the usage events above. Hosted in the United States.
- Sentry: crash reports.
- Apple and Google: if you use Sign in with Apple or Google, and for the App Store and Google Play, including payments.
We may disclose information if the law requires it. If our business is ever sold or merged, your data would go to the new owner under this policy.
How long we keep it
Your account data and answers stay until you delete your account. Usage events are kept for up to 12 months. Crash reports are kept for up to 90 days. Purchase records are kept by Apple, Google and RevenueCat as their own policies and the law require.
Deleting your account and your choices
In the app, go to Settings, then Delete account. This permanently deletes your account, profile and saved answers from our servers and clears the app's data on your phone. Mistake reports you sent stay, with your account removed from them. Deleting your account does not cancel a subscription: manage or cancel it in your App Store or Google Play account. To have your usage events deleted as well, email steadfox.app@gmail.com and we will remove them.
You can also write to us to ask what we hold about you, to correct it, to receive a copy, or to object to or limit its use. Depending on where you live (for example the EU, UK or California) you may have these rights by law, and the right to complain to your data protection authority. We will answer within [30 DAYS].
Security
Data is sent over encrypted connections. Each account can read only its own answers and reports. No system is perfectly secure, so we cannot guarantee absolute security.
Children
The app is meant for adults preparing for a professional exam and is not directed to children under 16. If you believe a child has given us data, contact us and we will delete it.
International transfers
Our providers may process data in countries other than yours, including the United States. Where required, they use safeguards such as standard contractual clauses.
Changes
If we change this policy in a way that matters, we will update the date above and, for significant changes, tell you in the app.
Contact
SteadFox · West Bengal, India · steadfox.app@gmail.com