Privacy policy

Only what the service needs to work.

• Your account. Email address, the display name you choose, the level you are preparing for, and a hash of your password. The password itself is never stored and cannot be recovered from the hash - which is also why we can only reset it, never tell you what it was.
• Your practice. Which questions you were served, what you answered, which you flagged, roughly how long each question was on screen, your measured mastery per skill, and the days you practised. This is the substance of the product: without it there is no study plan and no progress.
• Your subscription. Which plan you bought, when the term ends, and the reference numbers PayMongo gives us for the payment. We never see or store your card, e-wallet, or bank details - those are entered on PayMongo’s own checkout page.
• Technical records. Your IP address is used at the moment of a request to limit abuse, and server logs record request identifiers and errors. Photographs of answer sheets are read in memory and are not stored.

One, and it is not optional: a secure, HTTP-only cookie holding your sign-in refresh token, scoped to the sign-in endpoints so it is not sent with anything else. It is what keeps you signed in, and clearing it signs you out.

There are no analytics, advertising, or social cookies on this site, and no third-party scripts that could set one. There is nothing to consent to because there is nothing else being collected.

• MongoDB Atlas stores the database.
• PayMongo processes payments and holds the card details we never see. Their own privacy policy governs that part.
• Our hosting provider runs the servers and necessarily handles traffic in transit.
• MXroute hosts the mailbox we send from, so confirmation and password-reset messages pass through their servers on the way to you. We send those from our own mailbox rather than through a marketing platform, which is why your address is not sitting in one.

We do not sell your data, share it for advertising, or hand it to anyone else except where the law requires it.

Your account and practice history stay until you delete your account, at which point they are removed. You can do that yourself, at once, from your account settings - it takes your password and it cannot be undone. Payment records are kept for as long as tax and accounting rules require, because we are not permitted to delete those on request. Sign-in tokens expire on their own; server logs are short-lived.

Under the Data Privacy Act of 2012 you may see what we hold about you, correct it, have it erased, object to how it is used, or receive a copy in a portable form. Three of those need no request at all: your settings page will download everything we hold as a file, change your details, or delete the account outright. For anything else, write to the address at the bottom of this page and we will act within a reasonable time and at no charge.

If you are not satisfied with how we have handled a request, you may complain to the National Privacy Commission.

The Civil Service Examination is taken by adults, and this service is not intended for children. We do not knowingly create accounts for anyone under 18.

If this policy changes in a way that affects what we collect or who we send it to, we will say so on this page and, for a material change, by email. The date at the top always reflects the current wording.

Related: our editorial standards and terms of service.