Privacy Policy

Account information.

• Your email address, which identifies your account.
• Your name, if you provide one when signing up or later edit it in your profile.
• A cryptographic hash of your password, if you sign up with email and password. Passcit never stores your password itself and cannot read it.
• A profile picture URL, only if it is supplied by the sign-in provider you chose.
• Account settings you choose, such as your preferred study language and which version of the civics test you are studying.
• The dates your account was created and last updated, and whether the account is active.

Sign-in identifiers from Apple and Google.

• When you use Sign in with Apple or Sign in with Google, the provider sends Passcit a signed token. Passcit verifies it and keeps the provider's unique identifier for you and the verified email address in that token, so the same account is found the next time you sign in.
• If you use Apple's Hide My Email option, Passcit only ever receives and stores that private relay address — not your personal address.
• For Google sign-in on the website, the standard OAuth tokens returned by Google are stored alongside that link so the session keeps working. No other Google account data is requested or stored.
• Passcit never receives your Apple ID password, your Google password, or any other credential belonging to those providers.

Session and security data.

• Sign-in sessions, and for the iOS app a refresh token that is stored on our server only as a hash, together with its expiry and whether it has been revoked. The token itself is kept on your device in the iOS Keychain.
• Password reset tokens, which expire one hour after they are issued and are deleted once used.
• Your IP address is used momentarily to rate-limit sign-in, registration, and password-reset requests so accounts cannot be attacked by brute force, and may appear in short-lived server logs. It is not stored in the Passcit database and is not linked to your learning activity.

Learning and practice activity. This is the data that makes progress tracking work, and it is tied to your account.

• Per-question progress: which questions you have studied or marked as favorites, how many times you answered each one correctly or incorrectly, and the review schedule Passcit calculates from that.
• Practice tests and quizzes: the answers you give, whether each was correct, your score, and whether you passed.
• Interview simulations: how long the simulation took, your results for each section, the text of your reading answers as transcribed on your device, the sentences you typed in the writing section, and which civics questions you were asked and how you answered.
• Voice practice: the text transcript of your spoken answer, the resulting evaluation, and any feedback shown to you.
• Study habits: your daily streak, how many questions you reviewed on each day you studied, and the experience points you earned.
• Which kinds of AI study content you requested for a question — an explanation, a translation, or a memory tip — and in which language.

Eligibility calculator (entirely optional — on the website, and in the iOS app under Profile → Naturalization Eligibility Check).

• If you choose to use the eligibility calculator, the answers you enter are used to produce your estimate. Depending on the questions you answer, that can include your permanent-resident date, date of birth, state of residence, marital status and whether your spouse is a U.S. citizen, military service details, trips outside the United States, and Selective Service answers.
• If you are signed in, the calculation is saved to your account so you can return to it. If you are not signed in, it is saved without any link to a Passcit account.
• You never have to use the calculator to use the rest of Passcit.

Support messages.

• If you contact Passcit support through the support page, the message you write, the email address you give so a reply can reach you, and any device or app details you choose to include are sent to the Passcit support inbox by email.

• No third-party analytics or usage-tracking SDK is present in the app or on the website. Passcit does not build advertising profiles and does not track you across other apps or websites.
• No advertising, no ad identifiers, and no data brokers. Passcit does not sell or rent your information.
• No third-party crash-reporting or diagnostics SDK. Passcit does not collect crash reports itself. If you have enabled Apple's own app analytics on your device, Apple may share aggregate crash information with developers under Apple's terms — that is Apple's mechanism, not Passcit's, and it does not contain your Passcit account data.
• No audio recordings. Voice practice never uploads or stores your voice; see below.
• No location tracking, no contacts, no photo library, and no health, financial, or immigration case files.
• No purchases or subscriptions. Passcit currently has no in-app purchases, no subscriptions, and no payment processing, so no payment or billing information is ever collected.

In the iOS app:

• Passcit asks for microphone and speech recognition permission the first time you use voice practice, and voice practice simply does not run without your permission.
• Speech is converted to text using Apple's Speech framework, and Passcit requests on-device recognition whenever your device and language support it.
• Your audio is not uploaded to Passcit's servers and is not stored by Passcit. Only the resulting text transcript is sent, so your answer can be evaluated and appear in your practice history.
• You can revoke microphone or speech recognition access at any time in the iOS Settings app.

On the website:

• Voice features use your browser's built-in speech recognition. Some browsers perform this on your device and some send audio to the browser vendor's own servers to transcribe it — that processing is governed by your browser vendor's privacy policy, not by Passcit.
• Passcit itself receives only the text transcript in either case.

• To create your account and sign you in, including through Apple and Google.
• To save your learning progress so it is there the next time you open Passcit, on any device you sign in from.
• To show you your own results: accuracy, streaks, weak areas, exam scores, and what to study next.
• To schedule question reviews using spaced repetition based on how you answered before.
• To generate study material — explanations, translations, and memory tips — for civics questions.
• To keep accounts secure: hashing passwords, expiring tokens, and rate-limiting sign-in attempts.
• To answer you when you contact support.
• To understand, in aggregate, which questions and categories learners find hardest, so the study content can be improved. This analysis uses counts and averages across all users, not individual profiles.
• To comply with the law where Passcit is legally required to do so.

• Hosting and database provider — operates the servers and database where your account and progress are stored.
• Apple and Google — when you choose Sign in with Apple or Sign in with Google, Passcit verifies the token they issue against their public keys. This is a verification of the credential you chose to present; Passcit does not send them your study data.
• Google Gemini — generates the AI study content (explanations, translations, memory tips) for civics questions. Only the official civics question text, its accepted answers, and the target language are sent. No account identifier, name, email, or personal information is included in those requests, and the generated result is cached and reused for every learner studying the same question.
• Email delivery provider — delivers password-reset emails and carries messages you send through the support form to the Passcit support inbox.

• All traffic between the apps and Passcit's servers is encrypted with HTTPS.
• Passwords are stored only as bcrypt hashes and are never recoverable, by anyone, including Passcit.
• The iOS app's refresh token is stored in the iOS Keychain on your device, and only its hash is kept on the server, so a copy of the server's records cannot be used to sign in as you.
• Sign-in, registration, and password-reset endpoints are rate-limited against brute-force attempts, and password reset links expire after one hour.
• Administrative access to the underlying data is restricted to Passcit administrator accounts.

• Your account and learning history are kept for as long as your account exists, because that history is what your progress, streaks, and review schedule are built from.
• Password reset tokens expire after one hour. Sign-in tokens expire on their own schedule, and the iOS app's refresh token is revoked when you sign out.
• Support emails are kept in the support inbox for as long as needed to resolve your issue and keep a record of it.
• When you delete your account, your account and the learning records attached to it are permanently deleted, as described below.

• Delete your account: in the iOS app, open Profile and choose Delete Account. If your account has a password, you will be asked to confirm it first. Deletion is permanent and immediate — your profile, question progress, practice tests, interview simulations, voice practice transcripts, streaks, experience points, saved eligibility calculations, and sign-in links are all deleted, and deleted data cannot be restored.
• Correct your information: your display name and your password can be changed in the iOS app under Profile → Account Settings, at any time.
• Use less: voice practice and the eligibility calculator are optional, and you can use Passcit without either. You can also revoke microphone and speech recognition access in iOS Settings.
• Ask for help: if you cannot access the app to delete your account, or you want a copy of the information Passcit holds about you, contact support and Passcit will handle the request.