Privacy Policy

PassCARs is an online exam-preparation platform for people training for, or working in, aircraft maintenance in Canada. It provides practice questions, flashcards, exam simulations, study guides, an AME logbook and related tools at passcars.ca.

This policy explains what personal information PassCARs collects, why, who it is shared with, how long it is kept and the choices you have. It applies to passcars.ca and to the PassCARs account you use there.

PassCARs, as the operator of the platform, is responsible for the personal information described in this policy and for compliance with it. Privacy questions and requests go to support@passcars.ca.

Account information. Your email address, and a password if you sign up with email (passwords are handled by our authentication provider and stored only in hashed form — we never see them). If you sign in with Google, see section 3.

Profile and onboarding details. Your name and the study details you choose to give us, such as your role (for example AME student or apprentice), the licence category or exam you are preparing for, your school, program or employer, your target exam date and your study program.

Study activity. The questions you answer and whether you answered correctly, response times, flashcard reviews, exam simulation results, lesson progress, readiness scores, daily targets, study streaks, bookmarks and notes you write.

Student verification. If you apply for student pricing, the name of your institution and program, your expected completion date and the proof-of-enrolment document you upload. Documents are stored privately and are only viewed by PassCARs administrators reviewing your application.

AME logbook. If you use the logbook, the entries you record — dates, employers, aircraft registrations and types, tasks, hours and notes — and the name and licence details of the supervisor or certifier you list. When a certifier reviews an entry, PassCARs records their email address, their verification and any signature they provide.

Purchases. The plan you bought, the amount, currency, date and status, and the reference numbers our payment processor gives us. Card details are entered on Stripe's checkout page and are never sent to or stored by PassCARs.

Messages to us. Emails you send to support and feedback you submit in the app, including the page you were on when you sent it.

Usage and device information. Pages you visit, a random visitor ID and session ID stored in your browser, the referring page and campaign tags in the link you followed, your device type, browser and operating system, and your approximate location (country, region and city) derived from your IP address by our hosting provider. PassCARs does not store your IP address with this information. If you are signed in, this activity is linked to your account. We also record technical error reports (error message, page and, if signed in, your account) to fix problems.

If you choose “Continue with Google”, Google asks you to share basic profile information with PassCARs. We request only Google's standard sign-in permissions (openid, email and profile), which give us:

• your Google account email address and whether Google has verified it;
• your name as shown on your Google account;
• a link to your Google profile picture; and
• a unique Google account identifier.

How we use it. We use this information only to create and sign in to your PassCARs account, to recognise you when you return, and to pre-fill your name during onboarding (you can change it). If the email address Google verifies matches an existing PassCARs account, Google sign-in is connected to that account. We do not use your Google information for advertising.

What we do not access. PassCARs does not request access to your Gmail, Google Drive, contacts, calendar or any other Google data, and cannot post or act on your behalf.

Storage and sharing. This information is stored with your account by our authentication and database provider (section 5). We do not sell it or share it with anyone else except as described in section 6.

PassCARs' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove PassCARs' access at any time from your Google Account's security settings (“Third-party apps & services”). Doing so stops Google sign-in; it does not delete your PassCARs account — to delete that, see section 10.

• to create and secure your account and sign you in;
• to provide the study features you use and save your progress across devices;
• to personalise practice to your weak topics and show readiness estimates;
• to process purchases, apply the access you paid for and handle refunds;
• to review student-pricing applications;
• to send account emails, such as sign-up confirmation and password reset, and in-app notifications;
• to answer support requests and feedback;
• to understand how PassCARs is used, fix errors and improve content and features; and
• to prevent abuse, enforce our Terms and meet legal obligations.

We rely on these providers to run PassCARs. Each receives only what it needs for its role:

• Supabase — authentication, database and private file storage. Your account and study data are stored in Supabase's United States (Oregon) region.
• Vercel — hosts the website and provides the approximate location used in usage statistics.
• Stripe — processes card payments on its own checkout page.
• Google — Google sign-in, if you choose it.
• Resend — delivers account emails such as confirmation and password reset.
• ImprovMX — forwards email sent to support@passcars.ca to the PassCARs support inbox.

Because some of these providers store or process information outside Canada, mainly in the United States, your information may be subject to the laws of those countries, including lawful access by their authorities.

We do not sell your personal information or share it for advertising. We share it only:

• with the service providers listed in section 5, to operate PassCARs;
• with your school, if you join a school or organization on PassCARs (for example through a school licence or an instructor's invitation): that organization's instructors and administrators can see your name and email, your study progress, practice and exam results and readiness, and the classes and licence seats you belong to;
• with a certifier you ask to review a logbook entry, who can see that entry;
• when required by law, or to protect the rights, safety or security of PassCARs users or others; or
• with your consent.

PassCARs does not use advertising or third-party tracking cookies, and does not use third-party analytics services. Our usage statistics are collected by PassCARs itself.

The site stores information in your browser's local and session storage so it works properly: your sign-in session, the random visitor and session IDs used for usage statistics, display preferences such as theme, in-progress quizzes and exams, flashcard positions, and study activity waiting to be saved if you are offline. You can clear this at any time in your browser settings; you will be signed out and unsaved local progress may be lost.

Stripe's checkout page and Google's sign-in page are run by those companies on their own websites and are governed by their own privacy policies.

We keep your account, profile, study, logbook and purchase information while your account is open. Some records are removed automatically:

• usage statistics and study-activity telemetry: deleted after 180 days;
• technical error reports: deleted after 90 days.

If you ask us to delete your account, we delete your account and the personal information linked to it, except records we must keep to meet legal, tax or accounting obligations (such as records of payments) or to resolve disputes. Some information is outside what deleting your PassCARs account can remove:

• payment records held by Stripe under its own obligations; and
• emails you sent to support@passcars.ca, which remain in our support mailbox.

Deletion is carried out by our team rather than automatically, because some records linked to an account (for example, logbook certifications involving another person) must be checked first. We will tell you if anything has to be kept and why.

PassCARs is served only over encrypted connections. Database access rules limit each account to its own data, and to the instructor and administrator access described above. Verification documents and logbook signatures are kept in private storage, and administrators view verification documents through links that expire after a few minutes. No system is perfectly secure; if you believe your account has been compromised, contact us right away.

You can:

• change your target exam date and display preferences in the app;
• ask us for a copy of the personal information we hold about you;
• ask us to correct inaccurate information, such as your name or school details;
• ask us to delete your account — there is no self-service deletion yet, so email us from the address on your account and we will confirm once it is done;
• withdraw consent, for example by removing Google access as described in section 3; and
• clear the information stored in your browser.

Email support@passcars.ca with any of these requests. We may need to confirm your identity first, and we will respond within the time required by applicable privacy law. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

We will update this policy when our practices change and show the new effective date at the top. If a change significantly affects how we use your personal information, we will make reasonable efforts to let you know, for example in the app or by email.

Questions or concerns about privacy at PassCARs: support@passcars.ca. Please also read our Terms of Service.