Privacy Policy

MDPassTest is responsible for your personal information. We follow Canada’s privacy law (PIPEDA). Questions go to our privacy contact at support@mdpasstest.com.

What we collect

• Account: your email address, and your name if you give it to us. If you sign in with Google or Apple, they share your name and email with us.
• Exam date: if you tell us when you are taking the exam.
• Study data: your answers, scores, highlights, bookmarks and progress.
• Purchases: which plan you bought, the amount, the date, and Stripe’s customer ID for you. Stripe holds your card details; we never see them.
• Support: the emails you send us, including a CFPC result for a Pass Guarantee claim.
• Technical: your browser type, error reports, and request logs that include your IP address. A security check (Cloudflare Turnstile) runs on our sign-in forms to stop bots.

Why we use it

• to run your account and show your progress
• to take payment and keep tax records
• to check Pass Guarantee claims
• to keep MDPassTest secure and fix problems
• to see, in simple counts, which screens people use, so we can improve them

We do not sell your information. We do not show ads. We do not use ad trackers or third-party analytics.

Who we share it with

Only the services that run MDPassTest for us:

• Supabase: our database and sign-in. Your data is stored in Canada (Montréal).
• Cloudflare: hosting, security, logs and the bot check.
• Stripe: payments.
• Google Fonts: the website’s typeface. Your browser gets it from Google, which sees your IP address.
• Google or Apple: only if you choose to sign in with them.

Some of these services process data in other countries, mostly the United States. While it is there, the laws of that country apply and its authorities may be able to access it.

We may also share information if the law requires it.

Cookies and browser storage

We use cookies to keep you signed in, and browser storage to remember settings like your theme. We do not use advertising cookies.

How long we keep it

• Your account and study data: while your account is open. When you ask us to delete your account, we delete this data within 30 days.
• Purchase records: 6 years, because Canadian tax law requires it.
• Request logs: a short time, usually days.

Your rights

You can ask to see the information we hold about you, to correct it, or to delete your account. You can also withdraw your consent, though we may then be unable to provide MDPassTest. Email support@mdpasstest.com. We reply within 30 days.

If you are not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

Keeping it safe

We use encrypted connections, limit who can access data, and keep our services up to date. If a breach puts you at real risk of significant harm, we will tell you and the Privacy Commissioner, as the law requires.

Adults only

MDPassTest is for adults. We do not knowingly collect information from anyone under 18.

Changes

If we change this policy in a way that matters, we will tell you by email or in the app before it starts.