Privacy Policy

Last updated: July 24, 2026

FirstPass (“the app”) is an independent study app for the SHRM-CP and SHRM-SCP exams, published by Brandon Postlethwait (“I”, “me”). This policy explains what the app collects, why, and what you can do about it.

What the app collects

If you use the app without an account

Nothing leaves your device. Your progress is stored only in the app’s local storage on that device.

If you create an account

• Email address — identifies your account, signs you in, and lets you reset your password.
• Name (optional) — used only to greet you in the app. You can leave it blank.
• Password — handled and stored, hashed, by Supabase. I never see it and it is never stored in the app.

If you use Sign in with Apple, Apple sends your email address and, on your first sign-in only, your name. If you choose Hide My Email, I only ever receive an anonymous @privaterelay.appleid.com relay address — never your real one.

Study data synced to your account

• Practice exam and quiz attempts — score, date, and results by domain
• Lessons completed and knowledge-check scores
• Flashcard mastery, your study plan, and app settings

Subscription

• Whether your subscription is active, which plan, and when the current period ends.
• Purchases are processed entirely by Apple. I never see or receive your card details, billing address, or Apple ID password.

What the app does not collect

No advertising identifiers. No location. No contacts. No photos. No browsing history. No third-party analytics or tracking SDKs. The app does not track you across other apps or websites.

Who else handles this data

These service providers process data strictly to make the app work:

• Supabase — hosts the database and handles authentication.
• RevenueCat — manages subscription status; receives purchase events and a pseudonymous app user id.
• Apple — processes purchases and, if you use it, Sign in with Apple.

Your data is not sold, rented, or shared with advertisers.

How it’s protected

Data travels over encrypted HTTPS connections. Database rows are protected by Row-Level Security, so your account can only ever read and write its own data — never anyone else’s.

Deleting your account and data

In the app: Settings → Account → Delete. This permanently deletes your account and all study progress, from both the cloud and the device. It cannot be undone.

If you can’t access the app, see how to request deletion by email.

Note: deleting your account does not cancel your subscription. Apple bills that, not me, so cancel it in your Apple ID subscription settings or you may continue to be charged.

How long data is kept

Your data is kept until you delete your account, at which point it is removed.

Children

The app is intended for adults pursuing a professional HR certification. It is not directed to children under 13 and does not knowingly collect their personal data.

Your rights

You can access, correct, or delete your data at any time. View and correct it in the app; delete it as described above. Depending on where you live, you may have additional rights over your personal data — email me and I’ll honour them.

Changes to this policy

If this policy changes materially, the updated version will be posted here with a new date.

Contact

Brandon Postlethwait — brandon.postlethwait@yahoo.com

FirstPass is independent practice material. It is not affiliated with, endorsed by, or sponsored by the Society for Human Resource Management (SHRM). SHRM-CP® and SHRM-SCP® are registered trademarks of SHRM.