Last updated: 17 October 2026
1.Who we are
Henry Nwiro, trading as PrepPass UK ("we") is the controller of your personal data when you use PrepPass. Contact us at [email protected] or by post at 27 Oxengate, Arnold, Nottingham NG5 6FY, United Kingdom.
2.What we collect
Account: an anonymous account identifier, a random identifier created by the app on your device, and your device platform (for example iOS). You do not create an account with your name or email address.
Your first name: as in the real exam, the examiner asks your name at the start of each mock exam. It becomes part of the exam transcript.
Exam content: the topic and discussion points you enter, the written transcript of your mock exam, your scorecard and feedback, and timing data about the exam (for example when each person spoke).
Your voice: during an exam your voice is streamed to our AI provider so the examiner can hear and respond to you and so your answers can be transcribed. PrepPass does not store audio recordings of your voice.
Credits and purchases: your credit balance and, for purchases, the product and the store transaction identifier. Payments are processed by Apple or Google; we never receive your card details.
Technical and security data: your IP address is used briefly to protect the service, for example to limit free trials per network. It is kept only in a scrambled (hashed) form in temporary server memory and is not stored in our database. Our servers also keep short-term operational logs.
Anything you choose to say during an exam is included in the transcript, so avoid sharing sensitive personal details (for example health information or identity numbers) in your answers.
3.How we use it
To run mock exams and give you feedback (to perform our contract with you). Before your first exam, the app explains what is shared with our AI provider and asks for your permission; you can read it again in Settings.
To manage credits, purchases and the free trial (contract).
To keep the service secure and prevent abuse, such as repeated free trials (our legitimate interests).
To diagnose problems and improve the examiner and feedback (our legitimate interests).
We do not sell your personal data and we do not use it for advertising.
4.Who we share it with
Supabase: stores your account, exams and reports.
OpenAI: provides the AI examiner, speech-to-text, scoring and pronunciation audio. OpenAI states that data sent through its API is not used to train its models by default and may be kept for up to 30 days to monitor for abuse.
Railway: hosts our servers.
Apple and Google: process in-app purchases.
These providers act on our instructions. Some are based in, or process data in, the United States. Where data leaves the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.
We may also disclose data if the law requires it.
5.How long we keep it
We keep your exam transcripts and timing data for 90 days, and your scorecards and credit records for as long as your account is in use, then delete or anonymise them. Purchase records may be kept longer where the law requires it.
6.Your rights
You can delete your account and all your data yourself at any time in Settings → Delete my data. This removes your history, transcripts, scorecards and credits from our servers and from your device. Records of store purchases are kept without any link to you, only to prevent the same purchase being redeemed twice.
Under UK data protection law you can also ask to access, correct or delete your data, to restrict or object to how we use it, and to receive a copy of it. Contact [email protected] and tell us the date and time of your exams so we can find your anonymous account.
You can also complain to the Information Commissioner's Office (ico.org.uk).
7.Children
PrepPass is intended for adults preparing for UK immigration English tests and is not directed at children under 13.
8.Security
Data is sent over encrypted connections, access to your records is restricted to your own anonymous account, and our AI provider credentials never leave our servers.
9.Changes
We will update this policy when our practices change and show the new date at the top.