Privacy policy

PassFirst.sg (UEN 202303669K) is an exam-preparation platform for CMFAS and related insurance examinations. Our registered address is 1 Pasir Panjang Rd, Labrador Tower, Singapore 118479. For anything in this policy, contact us on WhatsApp at +65 9337 2827.

• Account data — your name, email address and password. Passwords are stored only as a cryptographic hash; we cannot read them. If you sign in with Google, we store the identifier Google provides instead of a password.
• Profile data (optional) — age, WhatsApp number and the insurer you’re joining, if you choose to complete your profile.
• Free-class and interest signups — name, WhatsApp number, the module you’re preparing for, and email if you provide it.
• Purchase data — payments are handled by Stripe. We record which plan you bought, the amount, and Stripe’s payment reference. We never see or store your card number.
• Practice activity — your practice and mock-exam attempts, answers and scores, so the product can show your progress.

• To provide the service — your login, question-bank access and progress tracking.
• To run the free classes — confirming your seat and sending you each week’s venue on WhatsApp.
• To answer your questions and support you on WhatsApp or email.
• To measure our advertising — so we know which of our ads led to a signup or purchase (see Cookies below).

We use two kinds of cookies:

• Essential — a session cookie named pf_session that keeps you logged in. The site can’t work without it.
• Advertising measurement — cookies set by Google’s advertising tag, used to count conversions from our ads (for example, that an ad click led to a free-class signup or a purchase). We use this measurement in aggregate; it does not give us access to your browsing on other sites.

• Stripe — to process payments. Your card details go directly to Stripe, not to us.
• Google — for advertising measurement, and for sign-in if you choose Google sign-in.
• Hosting and infrastructure providers — the services that run our website and database.
• Partner agencies (careers form only) — if you use the careers interest form and tick the consent box there, we share your name and WhatsApp number with partner agencies for career introductions. This only happens with that explicit consent.

We never sell your personal data.

We keep your data while your account or enquiry is active, and for as long as we reasonably need it afterwards for records and legal obligations. You can ask us at any time to access, correct or delete the personal data we hold about you — message us on WhatsApp at +65 9337 2827 and we’ll respond as soon as we can.

Under the PDPA you may also withdraw consent to our collection, use or disclosure of your data. If you do, we’ll explain the likely consequences (for example, that we can no longer provide you access to the platform) and then stop the relevant use.

If we change this policy, we’ll update this page and the date at the top. Material changes will be flagged to account holders by email or WhatsApp.