Privacy Policy

Last updated: 3 October 2026

This policy describes how PassBridge ("we") processes your personal data when you use our Cambridge English exam preparation service.

Data controller: CPAJE Development SL, Calle Francisco Rabal 3, 29018 Málaga, Spain Privacy contact: contact@passbridge.app

Data we collect

  • Account: email address, password (stored encrypted by our authentication platform).
  • Learning profile: first name, age, interface language, estimated level, target exam, exam date.
  • Your work: written texts (Writing), audio recordings and their transcripts (Speaking).
  • Usage data: answers to exercises, the placement test and mock exams, scores, progress, skill profile.
  • Subscription: status and transaction identifiers. We store no banking data: payments are processed by Stripe.

Purposes and legal bases

PurposeLegal basis
Providing the service (account, content, corrections, progress tracking)Performance of the contract
Assessing your Writing / Speaking work using artificial intelligencePerformance of the contract
Managing subscriptions and paymentsContract / legal obligations
Improving the serviceLegitimate interest

AI processing

Your texts and recordings are analysed by AI models (provided by third parties via the Base44 platform, including Anthropic for assessment, and an automatic transcription service) to produce educational feedback. These assessments are indicative and involve no decision with legal effect concerning you.

Recipients and processors

Your data is processed by: Base44 / Wix.com Ltd (hosting and infrastructure), Stripe Payments Europe, Ltd. (payments — see stripe.com/privacy), and the AI model providers mentioned above, each strictly within its role. We do not sell your data.

Transfers outside the European Union

Some providers may process data outside the EU, notably in Israel (covered by a European Commission adequacy decision) and the United States. Such transfers rely on appropriate safeguards: adequacy decisions (including the EU–US Data Privacy Framework for certified providers) or standard contractual clauses.

Retention

Account and learning data are kept while your account is active, then deleted or anonymised within 30 days after account deletion. Billing data is retained in accordance with applicable accounting and tax obligations (6 years under Spanish law). How to delete your account, and the detail of the data deleted and kept, are on the Account deletion page.

Minors

The Service is accessible to minors preparing "for Schools" exams. Registration by a minor below the age of digital consent set by the law of their country of residence (14 in Spain, 15 in France) requires the consent of a parent or legal guardian. On registration, any user who states an age under 15 must confirm that this consent has been given; the date of this confirmation is kept with their profile and deleted with it. Parents may contact us to exercise their child's rights.

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. To exercise them: contact@passbridge.app. You may also lodge a complaint with the Spanish supervisory authority (AEPD — www.aepd.es) or with the authority of your country of residence (in France, the CNIL — www.cnil.fr).

Cookies, local storage and usage measurement

The Service uses your browser's local storage for your interface language, your login session and a technical usage-measurement identifier (base44_analytics_session_id). This identifier is a random number: it contains neither your name nor your e-mail address, and you can delete it at any time by clearing the site's data in your browser.

To measure traffic, improve the Service and fix errors, we record usage events: page viewed, referring site on arrival, time spent and session duration, key steps (sign-up, exercise or mock exam completed, writing assessed, plans viewed, payment) and technical errors (error message and page concerned). When you are logged in, these events are linked to your account. They never contain your answers or your texts. This measurement is carried out on our behalf by our hosting platform (Base44); the data is not sold, not used for advertising and not combined with your browsing on other sites.

We use no advertising cookies or commercial tracking.