Privacy policy
Last updated 21 October 2026
PassPal is a study app for university students. This page explains, in plain words, what we collect, why, and what you can do about it. We never sell your data.
What we collect
Your account: your email address, and if you sign in with Google, your name and profile photo from Google. If you add a passkey, your device keeps the secret part; we only store a public key that can't be used to sign in on its own.
Your profile: the name, username, school, department, level, courses and photo you choose to add.
Your studying: notes, handouts and past questions you save or upload (including the original PDF or photo), quizzes and essay questions made for you, your answers and marks, chats with Kiki, study time, streaks and XP. If two people upload exactly the same file, it is stored once.
Things you share: items you share with your study buddies, tutor profiles, session requests, and study-buddy activity.
If you apply to be a class rep: the proof you send (for example a school ID card or appointment letter). Only PassPal admins can see it, to decide on your application.
Notifications (only if you turn them on): the notification address your phone or browser gives us, so we can send you challenge invites, results, "your buddy is online" and streak reminders. When you open PassPal, buddies who want to know may get a "you're online" notification; you can switch that off in Settings.
Why we use it
Only to run PassPal: to sign you in, make quizzes and mark essays from your notes, track your progress, and let you connect with study buddies and tutors.
Who can see it
Only you: your handouts, quizzes, answers, essays and chats.
Your study buddies: only the items from My library that you choose to share with them, plus your name, username, photo and streak.
Other PassPal students: your tutor profile if you become a tutor, your name and photo for tutors or students you book sessions with, and, if you're a class rep, the items you add to your school's School library (with your first name). School library items can only be seen by students of that school.
Services we use
Supabase stores your account and data on servers in London, UK. Vercel hosts the website. Anthropic (the maker of Claude) runs the AI: when you make a quiz, mark an essay, upload a file or chat with Kiki, that text or file is sent to Anthropic to produce the result. Anthropic does not use it to train its models. Google handles "Continue with Google" if you choose it. Resend sends our sign-in emails. Notifications travel through your phone or browser maker's push service (Google, Apple, Mozilla or Microsoft), encrypted so only your device can read them.
Cookies and your device
We use cookies only to keep you signed in, and to remember whether you chose "Keep me signed in". PassPal also keeps a few things on your device: your library items (with their original files) for offline reading, your theme, an unfinished quiz, and your first name and email so the sign-in page can say "Welcome back" (only if you chose "Keep me signed in"). Signing out removes your saved items from the device. No advertising or tracking cookies.
Your choices
You can edit your profile at any time, delete handouts and past questions you uploaded, remove passkeys, turn notifications off, and sign out of all devices from Settings. To get a copy of your data or have your account and data deleted, email musazerubbabel@gmail.com and we'll do it within 30 days.
Keeping data safe
Your data travels over encrypted connections, and the database only lets each student read their own private data. No system is perfect, so please don't upload anything you wouldn't want stored online.
Age
PassPal is for university students. If you are under 13, please don't use it.
Changes and contact
If this policy changes, we'll update the date above. Questions? Email musazerubbabel@gmail.com.