Privacy

Last updated November 8, 2026

Passal turns the lectures you upload into cited study cards and quizzes. This page explains what Passal stores, why, and how to remove it.

Google sign-in

You can create or open a Passal account with Google Sign-In. When you choose Google, Google shows its consent screen and Passal receives only the account information needed to authenticate you.

Google user data Passal receives: your Google account email address, your Google account name, and your Google profile picture URL when Google provides one. Passal does not receive your Google password.

OAuth scopes Passal requests for Google sign-in:

• openid — verify your Google identity
• email — read your Google account email address
• profile — read your basic Google profile (name and profile picture, when available)

Those are the sign-in scopes. Separately, if you later choose to connect Google Drive or Google Calendar inside Passal, Passal will request additional Google permissions for only the files or events you pick, and will show Google's consent screen for those permissions before they are granted.

How Google sign-in data is used: to create and secure your Passal account, keep you signed in, show your name or avatar in the study app, and sync your study data to that account. Passal does not use Google user data for advertising, does not sell it, and does not use it to train models.

Sharing of Google user data: Passal does not sell Google user data. It is not shared with other users. Limited processors that host or deliver the service may process it only to run Passal. Passal's use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Children

Passal is aimed at students in higher education and similar study settings. It is not directed to children under 13, and Passal does not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact [email protected] and we will delete it.

What Passal stores

• Account: your email address, the display name you choose, and the identifier of the sign-in provider you use (Google, Microsoft, Apple, or a passkey). Passal does not store a password; for a passkey it keeps only the public part of the key.
• Your materials: the files you upload, the text extracted from them, and the cards, quizzes, and study guides made from that text.
• Study history: your reviews, quiz answers, exam dates, and settings, so Passal can schedule what to study next.
• Connected services: if you connect Google Drive, Microsoft OneDrive, or a calendar, Passal stores the access tokens needed to import the files or events you choose. Tokens are encrypted at rest.
• Product usage: which features your account uses and when (for example, that a lecture was uploaded, a card was accepted or a checkout was opened; never what your materials say), and, when you sign up, the ad or link tags and the referring site you arrived from. Before you sign up, a first-party cookie holds those tags for up to 7 days.

How it is used

Your data is used to run Passal for you and to improve it. By default, cards and quizzes are generated on Passal's own server from your source text. Your materials are not used by Passal to train models, not sold, and not used for advertising. To learn which features help and where people get stuck, Passal's own server records the product usage above. It is not shared with advertisers or analytics companies, is kept for up to a year, and is deleted with your account. Passal uses no advertising or cross-site trackers. Its passal.app website uses Cloudflare Web Analytics for page-view counts, which sets no cookies and does not identify you.

Using your own AI

Unless you ask Passal to transcribe a recording (below), Passal does not send your materials to any AI service. You can connect an AI assistant or copy study material between Passal and a chatbot yourself:

• Connector: if you connect Passal to Claude, ChatGPT or another assistant (and approve it on Passal's consent screen), that assistant can read your course names, lecture text, existing cards and which lecture objectives need work, and submit source-checked draft cards for you to review. If you ask it to log a missed practice question, Passal stores the question and reason, searches your lectures for related material, and may make matching cards due now for a knowledge or forgotten-fact miss. The assistant cannot change or delete the content of existing cards, courses or lectures, browse individual review records or your full study history, or see account details. Disconnect it any time in Settings.
• Learning connector: Passal's ChatGPT learning plugin requests a separate permission on the consent screen. With that permission, the assistant can create a study space when you ask, save the text notes or approved summary you ask to keep, retrieve your next due card and its source citation, and save the recall rating you explicitly choose. Saved notes become source material in your Passal account. Saving a rating stores a review receipt and updates the same review schedule you use in Passal. Cards drafted by the assistant remain drafts until you accept them in Passal. The plugin receives the source text, card and citation content needed for these actions; it cannot delete your materials, browse your full review history or see account details. Disconnect the learning connector in Settings to revoke its access.
• Copy and paste: Passal gives you a prompt containing lecture text, existing cards, confirmed objectives and aggregate counts of recent study difficulties. You can focus it on one confirmed objective and inspect the prompt before pasting it into a chatbot yourself, then paste its answer back.

With a connector, your assistant's provider handles the source text, saved notes, due cards and ratings you exchange under your account and their terms and privacy settings. With copy and paste, it handles the text you choose to paste. Passal checks every card your AI suggests: it keeps a card only if its quote appears word for word in your lecture and its answer comes from that quote. Kept cards are labelled “AI-drafted”.

Recording transcription (only when you ask)

If you ask Passal to transcribe a recording you uploaded and consent when asked, the audio is sent to Cloudflare Workers AI, which returns a draft transcript. Nothing is sent until you consent for that recording.

Services Passal relies on

Payments and financial records

Paid plans have not started, so Passal takes no payments today; this section describes how payments will be handled once they do. Stripe processes subscription payments and collects the payment method, contact and billing address information needed for checkout, tax, invoices and receipts. Passal does not store your full card number. Passal stores Stripe customer and subscription identifiers, subscription state, verified payment periods and payment-event audit records to manage access and resolve billing problems.

Deleting your account first stops its Stripe subscriptions. Passal then removes the active account link and retains subscription and payment audit facts under a random identifier for seven years for financial recordkeeping. Those retained records contain no study materials or account email. Stripe retains its own transaction records under its privacy policy.

You can manage your payment method and cancel through Settings on the web. Payment data is handled under Stripe's Privacy Policy.

• Google, Microsoft, and Apple, when you sign in with them or connect their drive or calendar services.
• Supabase, which provides Passal's database, sign-in service and private file storage.
• netcup, which provides the server that runs the study app and keeps Passal's backup copies.
• Resend. When an email feature is enabled and configured to use Resend, Resend processes the recipient email address and message to deliver it. This may include sign-in codes or payment-update messages, depending on which email features are enabled.
• Cloudflare Workers AI, only if you ask Passal to transcribe a recording and consent, to turn the audio into a draft transcript.
• Stripe, to process subscription payments and provide payment management, receipts and invoices once paid plans start.
• Cloudflare, which hosts the passal.app website, carries traffic to and from study.passal.app through a secure tunnel, and provides Cloudflare Web Analytics on passal.app, a page-view measurement that uses no cookies and does not identify you.

Where your data is stored and backups

The study app at study.passal.app runs on a server Passal rents from netcup. Your sign-in records, study records and the files you upload are stored with Supabase, which provides Passal's database, sign-in service and private file storage. Passal's app server handles your data temporarily to serve your requests. Cloudflare carries traffic between you and the app.

Once a day, Passal copies its database and uploaded files and keeps the copy on the server that runs the study app, in access-restricted folders. Copies are not currently kept in a second location, and Passal does not yet delete older copies automatically. Backups are used only to restore Passal after a problem. Material you delete, or a deleted account, can remain in backup copies made before the deletion for as long as those copies exist.

Your choices

From Settings in the study app you can download two kinds of export or delete your account at any time. The metadata export is a JSON file with your study records and extracted text; it does not contain original uploaded files or media, cannot restore an account, and is not a backup. The portable archive is a separate file, limited to 64 MB including study records even if your account storage limit is higher, that includes your original uploaded files and media alongside your study records; it can be restored into an empty Passal account while you have a current trial or subscription. Settings shows your current file storage and estimated archive size before download. If your data exceeds the archive limit, download is unavailable; the metadata-only export remains available but excludes your original files and media. Each course page lets you delete a single source or the whole course. Deleting your account removes your uploaded files, the text extracted from them, cards, study history, and connected-service tokens. Lesson sessions, answers, and quotes from a source are removed with that source, its course, and the account. They are included in the metadata export and the portable archive, and backups of them follow the same schedule. Anonymous AI usage counts (pages and tokens, with no content or account link) are kept to enforce usage limits. Passal keeps your email address, sign-in provider, provider account identifier, and the time of deletion so that an old session cannot bring the deleted account back; signing in again later starts a new, empty account.

Medical content

Passal is a study tool. It quotes your sources and does not provide medical advice. Do not upload patient records or other patient-identifying information; Passal is not designed for protected health information.

Contact

Questions or requests about your data: [email protected].