Privacy Policy
Effective date: July 17, 2026 · Contact: [email protected]
TCF84 (“we,” “us,” or “our”) operates the TCF84 mobile app and related services at api.passtcf.net and passtcf.net. This policy explains what information we collect, how we use it, and your choices.
1. Information We Collect
- Account information: email address and display name. If you sign in with Google or Apple, we receive the account identifier, email address, and name information that you authorize the provider to share. Apple may provide a private relay email address.
- Authentication data: session tokens used to keep you signed in. Tokens are stored on your device and validated by our servers.
- Membership and purchase information: membership tier, product identifier, subscription status and dates, and Apple transaction identifiers used to verify purchases and provide VIP access. Apple processes payment details; we do not receive your full payment-card information.
- Study data: exam answers and progress, scores, wrong-answer history, saved vocabulary, favorites, and practice timestamps. Some data is stored on your device; signed-in users may synchronize supported progress data with our servers.
- Technical logs: our servers may record IP addresses, request timestamps, and error logs for security and operations.
2. How We Use Information
- Provide sign-in, exams, membership access, and account management;
- Send verification codes, account notices, and password-reset links through Resend;
- Sync progress across web and mobile when you use the same account;
- Improve reliability and security;
- Respond to support requests and legal obligations.
We do not sell your personal information.
3. Third-Party Services
- Google Sign-In: governed by Google’s privacy policy when you choose that sign-in method.
- Apple: provides Sign in with Apple and processes App Store subscriptions. We receive only the identity and transaction information needed to sign you in, verify purchases, and manage VIP access.
- Resend: delivers verification, account, and password-reset emails.
- Cloudflare Turnstile: we use Cloudflare Turnstile to protect account registration from automated abuse. When you create an account on the web, Turnstile may process necessary device, network, and browser signals to distinguish humans from bots. This is an anti-abuse security measure and is not used for advertising or cross-site tracking.
4. Storage and Retention
We retain account, membership, and synchronized study data while your account is active. Authentication codes are temporary. Operational and security logs are retained only as reasonably necessary to protect and operate the service. Apple transaction records may be retained as needed to verify purchases, resolve refunds, prevent fraud, and meet legal or accounting obligations.
You may delete your account in the app or on the web profile page. Deletion removes your account and associated live account data from our production database. Residual copies may remain temporarily in restricted disaster-recovery backups and expire under our backup schedule, which keeps daily and monthly recovery copies for no longer than 12 months. Data that must be retained for security, fraud prevention, transaction disputes, or legal compliance is kept only for the applicable purpose and period. You can also clear supported on-device study data from the app.
5. Your Rights
- Access and update account information in your profile;
- Ask whether a category of study data is stored on-device or synchronized after sign-in;
- Delete your account (Profile → Delete Account);
- Contact us about privacy: [email protected].
6. Children
Our service is intended for exam preparation and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can delete it.
7. Changes
We may update this policy. Material changes will be communicated in the app or on this site. Continued use means you accept the updated policy.