Privacy

Rho1 Inc. — Last updated: 2026-07-28

We publish two different kinds of app, and they handle data very differently. Start with the one you are using.

  • Rho1 Prep apps — PMP Prep, on iOS and at pmp.rho1.ai. These have accounts, sync across your devices, and a paid subscription. See Rho1 Prep apps below.
  • Rho1 flashcard apps — the free single-exam flashcard apps (PMP Flashcards, CFA Flashcards, and the rest). These keep everything on your device. See the flashcard apps privacy policy.

Rho1 Prep apps

This covers PMP Prep on iOS and the web app at pmp.rho1.ai. Unlike our free flashcard apps, these do collect data — they cannot sync your progress between your phone and your browser otherwise.

What we collect

Whether or not you sign in:

  • A device identifier — a random value generated on first use, kept in the iOS Keychain or a browser cookie. It is not derived from your hardware and is not a fingerprint.
  • Your study progress — the scheduling state and review history for each flashcard.
  • Your quiz attempts — scores, per-domain performance, and time spent.
  • App preferences — appearance, and your exam date if you set one.
  • Crash reports — what went wrong, plus your device model, OS version and app version.

If you sign in, through Sign in with Apple:

  • Your email address as Apple shares it — which is a private relay address if you chose Hide My Email.
  • Your name, if Apple shared one at first sign-in.
  • An Apple account identifier — an app-specific ID from Apple. It is not your Apple ID email.
  • The devices registered to your account.

We never see or store a password. Apple handles authentication.

If you subscribe:

  • An Apple transaction identifier, and your subscription tier and expiry date.

We never see your card or payment details. Apple processes all payments and tells us only whether a subscription is active.

What we do not collect

  • No location data
  • No contacts or address book
  • No camera or photo library access, except a screenshot you choose to attach to feedback
  • No microphone or audio
  • No advertising identifiers
  • No third-party analytics or advertising SDKs

We do not sell your data, and we do not run ads.

Who we share it with

Two companies, both as processors on our behalf: Cloudflare, which hosts the service and the database your data sits in, and Apple, which handles sign-in and payments. That is the complete list. We would also disclose data where the law required it.

Your data, and how to get it back

You can delete your account from Settings in the app — on iOS and on the web. Deleting removes your account and the study data attached to it. You can also export your data from Settings.

If you would rather not use the in-app controls, or you want to ask what we hold, email [email protected] and we will handle it.

Children

These apps are for adults preparing for professional certification exams. They are not directed at children, and we do not knowingly collect data from anyone under 13.

Rho1 flashcard apps

The free flashcard apps are a different product with a different answer: they have no accounts, no sync, and no server. Everything stays on your device. That policy is at rho1.ai/privacy-policy.

Contact

Rho1 Inc., Ontario, Canada — [email protected].

This is an interim summary, published so that the privacy links in our apps resolve to something accurate. A fuller policy is being prepared and will replace it here. If anything on this page turns out to be wrong, the mistake is ours to fix — write to [email protected] and we will correct it.