Privacy policy | KPP Practice

Who we are

This policy explains how Kormot handles personal data in the KPP Practice app and on this website. Kormot is the data user under the Personal Data Protection Act 2010 of Malaysia. KPP Practice is built and maintained by one developer, and you can reach us at admin@kormot.com.

What we collect

Your account

To create an account you give an email address and a password, or you sign in with Google. With Google we receive the name, email address and Google account identifier that Google shares with the app. Sign-in is handled by Google Firebase Authentication, and we never see your password.

Details you choose to add

A display name
A phone number
A profile photo
The date of your driving theory test

These are optional and you can change or remove them in the app.

Your study data

Section progress and practice answers
Scores and submitted test attempts
Bookmarks

An unfinished practice test stays on your phone until you submit or clear it.

Optional tips

If you leave a tip through Google Play, we store the item, amount, currency and date, the Google Play order number and purchase token, and which screen the tip came from. Google processes the payment; we never receive your card or bank details.

We also store how many times the app has shown or dismissed the tip prompt, and when, so that it does not ask you too often. Counters such as the number of days you opened the app stay on your phone.

Crash reports

When the app crashes or hits a serious error, Firebase Crashlytics sends us a report with the error details, phone model, Android version, app version, a Crashlytics installation ID and your account user ID. We use it only to find and fix bugs.

App integrity

Firebase App Check, with Google Play Integrity, checks that requests come from the genuine app on a real device. This protects the question bank and your account from abuse. It does not give us an identifier we can use to track you.

What we do not collect

Your location
Your contacts, messages or files
An identity-card or passport number
A bank or card number
An advertising identifier

We do not show ads and we do not use an advertising or analytics SDK. We do not sell personal data. We do not send your answers or profile to Jabatan Pengangkutan Jalan (JPJ) or any government agency.

Permissions

Internet is needed to sign you in, download questions and save your study data.
Camera is optional and used only if you take a new profile photo. Choosing an existing photo uses the Android photo picker, which gives the app only the photo you pick.
Notifications are optional. If you set an exam date and allow them, the app schedules reminders on your phone: a week before, the evening before, the morning of your test, and a check-in at 8 pm on the day. No push token is collected, and we never use notifications for advertising.
Run at startup lets the app restore those reminders after your phone restarts.

You can refuse an optional permission, or turn it off later in your phone settings.

Why we use the data

To create and protect your account
To save your progress, test history and bookmarks across phones
To show the profile details you choose
To schedule exam reminders if you set a date and allow notifications
To record tips, and to limit how often the app asks for one
To find and fix crashes
To keep your email address and payment history for bookkeeping after you delete the account

Who processes the data

The app runs on Google services that process data for us:

Firebase Authentication, Cloud Firestore and Cloud Storage for your account, study data and profile photo
Firebase Crashlytics for crash reports
Firebase App Check and Google Play Integrity for app integrity
Google Play for tips and app delivery
Firebase Hosting for this website

Your account and study data are stored in Google's Singapore region (asia-southeast1). Some of these services may process data in other countries under Google's safeguards. We do not share data with advertisers or data brokers.

This website

This website uses no cookies, no analytics and no third-party scripts. Fonts are served from this site. Like any web host, Firebase Hosting may log your IP address and browser details for security and to keep the service running.

Security and how long we keep data

Data is encrypted in transit between the app and Google, and Google encrypts it at rest. Access to the data is restricted to your account and to the developer.

Account and study data: while your account is open
Crash reports: up to 90 days
Email address and payment history after you delete the account: 7 years, for bookkeeping, then deleted

Your choices and rights

You can change your name, phone number, photo and exam date in the app, and remove bookmarks or test history. You can delete your account at any time, in the app or by email.

Under the PDPA you can ask for a copy of your personal data, ask us to correct it, or withdraw consent. Email admin@kormot.com from the address on your account and we will reply within 21 days.

Children

KPP Practice is for people preparing for a Malaysian driving licence. It is not directed at children under 13, and children under 13 should not create an account.

Changes to this policy

We may update this policy. When we do, the date at the top of this page changes, and for significant changes we will also tell you in the app.

Contact

Developer: Kormot
App: KPP Practice (Android package com.kormot.kpppractice)
Email: admin@kormot.com