Privacy Policy

This policy explains how Appify Visions Group LLC (“PassWell,” “we,” or “us”) handles personal information when you use PassWell at passwell.app or as an installed app. We decide how that information is used, which makes us its “controller” under European and UK law. It goes with our Terms of use.

Your account

• Your first name, email, and password. The password is stored as a one-way hash that no one can read.
• For a child's account a parent makes: the child's first name, age, and a username instead of an email.

What you tell us at sign-up

• Your age, what you're studying for, your grade or last school, your test date, daily goal, courses, and language.
• Roughly where you live (a city area, or outside the US), to suggest rewards nearby, and your time zone. We don't ask children under 13 where they live.
• If you're under 18, the name of the parent or guardian who agreed, and when.

How you study

• Lessons and tests you finish, your answers and scores, and the essays you write in practice tests.
• For OET practice: the letters you write and the text of your role-play conversations, so your score reports can show them again.
• For speaking games and speaking duels: the words heard when you spoke, saved with your answers. We never keep recordings of your voice.
• Reports you send about a question, with any note you add.

With other people

• Groups you join, league places, duels, your sponsor, and rewards you redeem.
• Game night: your first name and what you type in a game (made-up meanings, guesses, words found), which the others in the room see. Word of the day: your guesses; your family and study groups see your colors, tries, and streak, never your letters.

Payments

• Which plan you have, when it renews or ends, the price region, and Stripe's customer number for you. Your card details go to Stripe, never to us.

From your device

• The country your connection comes from, to show prices for where you are.
• Which days you open PassWell, with that country and the kind of device (phone, tablet, or computer), so we can count how many people use it and how often.
• Standard request logs (IP address, browser, and the page asked for), which our host keeps for a short time for security and fixing problems.
• Which link first brought you here, if it was tagged (like a post in a group), in a cookie. No ad trackers.

The free OET Speaking check works without an account: its conversation and score are kept with a guest account for 30 days, or move to your account if you make one.

• To run PassWell for you: your lessons, progress, predicted scores, leagues, duels, groups, sponsors, rewards, and plan.
• To send account emails: confirming your email and resetting your password. We don't send marketing emails.
• To keep PassWell safe and fair: checking for bots, limiting repeated tries, and stopping cheating and fraud.
• To improve PassWell: counting what gets used, like lessons finished, and fixing questions learners report.
• To follow the law, like keeping payment records and answering lawful requests.

We don't sell your personal information, share it for advertising, show ads, or use it to train AI models.

• Other learners in your league or groups see your first name, points this week, and streak.
• Your sponsor, if you have one, sees your points, recent study days, predicted scores, and what you redeem.
• A parent or guardian who manages your account sees your progress, what you've studied recently, and your settings, and chooses what you can do on PassWell.
• Someone choosing a sponsor who types your exact email sees your first name, so they know they found the right person. You only become their sponsor if you say yes.
• The services below, only to do their part of running PassWell.
• Others only when the law requires it, to protect someone's safety, or if PassWell is sold or merged, in which case this policy still applies to your information.

• Vercel hosts PassWell and runs Vercel BotID, which checks that sign-ups come from real browsers.
• Supabase stores the database. Resend sends account emails.
• Stripe takes payments and keeps your card details and billing history under its own privacy policy.
• OpenRouter passes text to an AI model when you ask the tutor for help, have an essay or OET letter scored, or talk with the AI patient in an OET role-play. OpenRouter and the company that runs the model get that text and the question or task, not your name or email.
• Speaking games, speaking duels, OET Speaking, and Game night's Say it without saying it (which listens for banned words on the describer's phone) turn your voice into text with your browser's own speech recognition. Some browsers send the audio to their maker to do that (Chrome sends it to Google). PassWell only gets the text.
• Where a device can't do that itself (Firefox, or PassWell added to an iPhone home screen), it records only the word or passage you're saying and sends it through OpenRouter to a speech-to-text model. The recording is used to write down the words and isn't kept by PassWell.

PassWell has courses for children. We follow the US Children's Online Privacy Protection Act (COPPA): a child under 13 uses PassWell only after a parent or guardian agrees.

How a parent agrees

• A parent can make the child's account from Family. The child gets a username, not an email, and the parent agrees as they make it.
• A child who signs up alone and says they're under 13 is asked for a parent's email, and their account is paused. Until a parent answers, we keep only the child's name, email, and age, and the parent's email, to ask them.
• The parent gets an email saying what we collect, how we use it, and their rights, with a link to agree or decline from their own adult account with a confirmed email.
• We verify consent with the parent's card payment, if they've paid for PassWell, or otherwise with a follow-up email the next day, so a parent who didn't agree can undo it.
• If the parent declines, or nobody agrees within 7 days, we delete the child's account and the parent's email.

What we collect from a child, and why

• Only what's listed above for studying: first name, age, grade, answers, scores, and the words heard in speaking games. We use it only to teach them and show their progress.
• Children under 13 don't appear in public leagues, can't duel strangers, and aren't asked where they live. There are no ads, and nothing is sold or shared for advertising.
• The AI tutor and recordings sent from iPhone home-screen apps or Firefox to be written down start off. A parent can turn them on in Family. We never store the recordings.
• Services that run PassWell for us, listed above, process children's information only to provide PassWell.

A parent's rights

• See their child's progress and change what they can do, any time, in Family.
• Write to support@appifyvisions.com for a copy of what we keep about their child.
• Withdraw consent by deleting the child's account in Family, which erases their information, or ask us to delete it.

If you think a child under 13 is using PassWell without a parent's consent, write to support@appifyvisions.com and we'll delete the account.

• Your account and everything tied to it: until you delete your account, which erases it. Copies in database backups are deleted as those backups expire.
• Guest accounts, from a duel or game night invite or the free OET check: 30 days, unless you make an account.
• Last Card and Game night rooms, with what was typed in them: 2 days after the room was last used.
• A child's paused account and their parent's email: 7 days, unless a parent agrees.
• A parent's consent for a child: as long as the child's account exists, as a record of who agreed and when.
• The cookie for the link that brought you here: 90 days.
• Voice recordings: not kept. They're written down as text, then dropped.
• Payment records: Stripe keeps them for as long as tax and payment laws require.

• Hide yourself from leagues in your profile, and leave any group.
• Remove your sponsor by writing to us.
• Delete your account from your profile. That erases your study history, groups, and rewards for good, along with any accounts you made for your children, and cancels your plan.
• Write to support@appifyvisions.com to get a copy of your information, correct something, or ask any question about your data. We answer within 30 days, and we may ask you to confirm the request comes from your account's email.

Using these rights never costs anything or changes how PassWell treats you.

In the UK, EU, and similar places

We use your information because it's needed to provide PassWell to you (our contract), for our legitimate interests in keeping it safe, fair, and working well, with consent where we ask for it (like a parent's), and to meet legal duties. You have the right to access, correct, delete, or move your information, to object to or limit how we use it, and to withdraw consent. You can also complain to your data protection authority; in the UK, that's the Information Commissioner's Office.

In US states with privacy laws

Where state law, like California's, gives you the right to know, correct, or delete your personal information, write to us and we'll do it. We don't sell or share personal information for targeted advertising.

• A sign-in cookie keeps you signed in.
• A cookie remembers the tagged link that first brought you here, for 90 days.
• A cookie notes whether PassWell is open as the installed app or in a browser tab, for the same count.
• Your device keeps a copy of recent lessons, unsent progress, and your settings, so PassWell works offline. Signing out clears your study data from the device.
• That's all. There are no advertising or cross-site tracking cookies.

Everything travels over encrypted connections, the database is encrypted where it's stored, and passwords are hashed. Only the people who run PassWell can reach the data, and only to run it. No system is perfectly secure, so if a breach affects your information, we'll tell you as the law requires.

PassWell's data is stored in the United States. If you use PassWell from another country, your information moves to the US and is handled there under this policy. Where the law asks for it, those transfers rely on our providers' standard data protection terms.

We'll update this policy when PassWell changes what it collects or how it's used, and the date at the top shows the latest version. If a change matters to you, we'll tell you by email or in the app before it takes effect.

Questions or requests about your data go to support@appifyvisions.com. Appify Visions Group LLC is responsible for PassWell and your information in it.