Privacy
Rho1 Inc. — Last updated: 2026-07-28
We publish two different kinds of app, and they handle data very differently. Start with the one you are using.
- Rho1 Prep apps — PMP Prep, on iOS and at pmp.rho1.ai. These have accounts, sync across your devices, and a paid subscription. See Rho1 Prep apps below.
- Rho1 flashcard apps — the free single-exam flashcard apps (PMP Flashcards, CFA Flashcards, and the rest). These keep everything on your device. See the flashcard apps privacy policy.
Rho1 Prep apps
This covers PMP Prep on iOS and the web app at pmp.rho1.ai. Unlike our free flashcard apps, these do collect data — they cannot sync your progress between your phone and your browser otherwise.
What we collect
Whether or not you sign in:
- A device identifier — a random value generated on first use, kept in the iOS Keychain or a browser cookie. It is not derived from your hardware and is not a fingerprint.
- Your study progress — the scheduling state and review history for each flashcard.
- Your quiz attempts — scores, per-domain performance, and time spent.
- App preferences — appearance, and your exam date if you set one.
- Crash reports — what went wrong, your app version,
the platform, and your device's vendor identifier
(Apple's
identifierForVendor, a value scoped to us that does not identify you across other companies' apps).
If you sign in, through Sign in with Apple:
- Your email address as Apple shares it — which is a private relay address if you chose Hide My Email.
- Your name, if Apple shared one at first sign-in.
- An Apple account identifier — an app-specific ID from Apple. It is not your Apple ID email.
- The devices registered to your account.
We never see or store a password. Apple handles authentication.
If you subscribe:
- An Apple transaction identifier, and your subscription tier and expiry date.
We never see your card or payment details. Apple processes all payments and tells us only whether a subscription is active.
What we do not collect
- No location data
- No contacts or address book
- No camera or photo library access, except a screenshot you choose to attach to feedback
- No microphone or audio
- No advertising identifiers
- No third-party analytics or advertising SDKs
We do not sell your data, and we do not run ads.
Who we share it with
Two companies, both as processors on our behalf: Cloudflare, which hosts the service and the database your data sits in, and Apple, which handles sign-in and payments. That is the complete list. We would also disclose data where the law required it.
Your data, and how to get it back
You can delete your account from Settings in the app — on iOS and on the web. You can also export your data from there.
Deleting is not immediate, and that is deliberate: your account is marked for deletion and kept for 30 days. If you sign in with the same Apple ID within those 30 days, your data is restored and nothing is lost. After 30 days the deletion runs and is permanent — your account and the study data attached to it are erased and cannot be recovered.
If you would rather not use the in-app controls, or you want to ask what we hold, email support@rho1.ai and we will handle it.
Crash reports and feedback are kept for 12 months, then purged. That runs daily rather than on request, so a report older than 12 months is gone whether or not anyone asks.
Children
These apps are for adults preparing for professional certification exams. They are not directed at children, and we do not knowingly collect data from anyone under 13.
Rho1 flashcard apps
The free flashcard apps are a different product with a different answer: they have no accounts, no sync, and no server. Everything stays on your device. That policy is at rho1.ai/privacy-policy.
Contact
Rho1 Inc., Ontario, Canada — support@rho1.ai.
This is an interim summary, published so that the privacy links in our apps resolve to something accurate. A fuller policy is being prepared and will replace it here. If anything on this page turns out to be wrong, the mistake is ours to fix — write to support@rho1.ai and we will correct it.