Privacy

Rho1 Inc. — Last updated: 2026-08-27

We publish two different kinds of app, and they handle data very differently. Start with the one you are using.

  • Rho1 Prep apps — PMP Prep, on iOS, on Android, and at pmp.rho1.ai. These have accounts, sync across your devices, and a paid subscription. See Rho1 Prep apps below.
  • Rho1 flashcard apps — the free single-exam flashcard apps (PMP Flashcards, CFA Flashcards, and the rest). These keep everything on your device. See the flashcard apps privacy policy.

Rho1 Prep apps

This covers PMP Prep on iOS, on Android, and the web app at pmp.rho1.ai. Unlike our free flashcard apps, these do collect data — they cannot sync your progress between your phone and your browser otherwise.

What we collect

Whether or not you sign in:

  • A device identifier — a random value generated on first use, kept in the iOS Keychain, Android's private app storage, or a browser cookie. It is not derived from your hardware and is not a fingerprint.
  • Your study progress — the scheduling state and review history for each flashcard.
  • Your quiz attempts — scores, per-domain performance, time spent, and the study aids you add to individual questions: flags, answer eliminations, and any note you write. A note is free text you author, up to 500 characters, and syncs with the rest of the attempt.
  • App preferences — appearance, and your exam date if you set one.
  • Your IP address, briefly, for abuse prevention — requests for study content are rate-limited: counted per account when you are signed in, and per IP address when you are not. The count is a short-lived tally that expires within a couple of hours. We do not store your IP address anywhere else or build anything from it.
  • Crash reports, on iOS only — and only for the kinds of error the app can catch as it fails; many crashes end the app before anything can be recorded, and those are never reported. When one is caught, we receive what went wrong, your app version, the platform, and your device's vendor identifier (Apple's identifierForVendor, a value scoped to us that does not identify you across other companies' apps). The Android and web apps send no crash reports at all.

If you sign in, through Sign in with Apple or Google:

  • Your email address as your sign-in provider shares it. With Apple, that may be a private relay address if you chose Hide My Email.
  • Your name, if your provider shared one at first sign-in.
  • An account identifier from your sign-in provider — Apple or Google. It is not your email address.
  • The devices registered to your account.

We never see or store a password. Apple or Google handles authentication.

If you subscribe:

  • An Apple or Google Play transaction identifier, and your subscription tier and expiry date.

We never see your card or payment details. Apple or Google Play processes all payments and tells us only whether a subscription is active.

What we do not collect

  • No location data
  • No contacts or address book
  • No camera or photo library access, except a screenshot you choose to attach to feedback
  • No microphone or audio
  • No advertising identifiers
  • No third-party analytics or advertising SDKs

We do not sell your data, and we do not run ads.

Who we share it with

Three companies, all as processors on our behalf: Cloudflare, which hosts the service and the database your data sits in, and Apple and Google, which handle sign-in and payments. That is the complete list. We would also disclose data where the law required it.

Your data, and how to get it back

You can delete your account from Settings in the app — on iOS, on Android, and on the web. You can also export your data from there.

Deleting is not immediate, and that is deliberate: your account is marked for deletion and kept for 30 days. If you sign in with the same account within those 30 days, your data is restored and nothing is lost. After 30 days the deletion runs and is permanent — your account and the study data attached to it are erased and cannot be recovered.

If you would rather not use the in-app controls, or you want to ask what we hold, email support@rho1.ai and we will handle it.

Crash reports and feedback are kept for 12 months, then purged. That runs daily rather than on request, so a report older than 12 months is gone whether or not anyone asks.

Children

These apps are for adults preparing for professional certification exams. They are not directed at children, and we do not knowingly collect data from anyone under 18.

Rho1 flashcard apps

The free flashcard apps are a different product with a different answer: they have no accounts, no sync, and no server. Everything stays on your device. That policy is at rho1.ai/privacy-policy.

Contact

Rho1 Inc., Ontario, Canada — support@rho1.ai.

This page is a summary. The full Privacy Policy — the document that governs, dated 2026-08-27 — is complete and in force; it is not published on this site, and you can request a copy by writing to support@rho1.ai. If anything on this page turns out to be wrong, the mistake is ours to fix — same address, and we will correct it.