PMI Prep privacy policy

Effective 7 October 2026.

PMI Prep is the exam preparation app and learning service run by PMCOE LLC, 1606 Headway Cir, Ste. 9447, Austin, TX 78754, United States ("we"). This policy explains what we collect when you use the PMI Prep phone app, the PMI Prep website pages and our live classes, why we collect it, who processes it for us, how long we keep it, and what you can ask us to do with it. Questions go to info@pm-coe.com.

What we collect

Your account. Your email address, your name as you want it shown, and your password, which we store only as a one way hash. Staff accounts also store a two factor sign in secret, encrypted.

Your phone. When you sign in on the app we bind your account to one phone using a key that phone creates, so a course cannot be shared between phones. We store that key's public half, a name for the phone, and, if you allow notifications, the push token the phone gives us.

Your study. Which lessons, videos, slide decks and flashcards you have opened or marked done, your quiz and mock exam answers and scores, where you stopped in a video, your notification choices and your time zone. We use this to show your progress, to work out your PMI contact hours and to issue your certificate of completion.

Live classes. Your attendance, join and leave times for each live class, and, when a class is recorded, the recording, which may include your voice, your video and your chat messages if you turn them on. Every learner is told when a recording starts.

Purchases. When you buy a course in the app, Apple or Google handles the payment. We receive and keep the store's receipt details (product, date, renewal and expiry), never your card details. Purchases on our website are handled by Stripe in the same way.

Messages and support. Messages you send us from the app, device transfer requests, and our replies.

App health. If the app crashes or a screen fails, it sends us an error report with the screen name, the error text and the app version. We remove anything that looks like a password, token or key before it is stored. We also record which screens are viewed, so we can see which parts of the course are used.

We do not sell your information, we do not show advertising, and we do not track you across other companies' apps or websites.

Why we use it

To give you the course you paid for, to keep your account secure, to send the class reminders and messages you asked for, to calculate contact hours and certificates for your PMI application, to answer support requests, to fix faults, and to meet our record keeping duties as a PMI Authorized Training Partner.

Who processes it for us

We use these service providers, each only for the job named, under their own security and privacy terms:

Provider What they do for us Where
Fly.io Runs our servers United States
Neon Hosts our database United States
Cloudflare Stores course files, recordings and backups; serves our web pages; processes videos United States and Cloudflare's global network
Resend Sends our emails United States
LiveKit Runs live class audio and video United States
Apple and Google App store payments and push notifications United States
Expo Delivers push notifications to the app United States
Stripe Website payments United States

If you live outside the United States, your information is transferred to and processed in the United States.

How long we keep it

While your account is open we keep your study records, because they support your contact hours and certificate. When you delete your account, sign in sessions, phone keys, push tokens, progress, notification records and messages are removed, and any remaining personal records of the deleted account are removed by our nightly clean up 365 days later. Screen view records are also removed after 365 days. Security audit records are kept for 2 years and then removed. Database backups are kept for the 7 most recent nights. Data export files you request expire after a short period and are then removed.

Your choices and rights

You can download a copy of everything we hold about you by asking us in the app or by email, and you can delete your account from the Profile screen at any time. You can correct your name in the app or ask us to correct anything else. You can turn off notifications in the app or in your phone's settings. Depending on where you live (for example the European Union, the United Kingdom, Australia or California) you may have further rights, including the right to object to or restrict some uses and to complain to your local privacy regulator. We will answer any request within 30 days.

Children

PMI Prep is for adults preparing for professional certification. It is not directed at children under 16, and we do not knowingly collect information from them.

Security

All traffic is encrypted in transit. Passwords are hashed, staff two factor secrets are encrypted, files are served only through short lived signed links, uploads are virus scanned, and staff access is limited by role and recorded in an audit log that cannot be edited.

Changes

If we change this policy we will update the date above and, for significant changes, tell you in the app before the change applies.