SIA Door Supervisor - PassRun (“the App”) is a study app for people preparing for the Door Supervisor qualification exams that are needed for a Security Industry Authority (SIA) licence in the United Kingdom. The App is made by PassRun, an independent developer (“we”, “us”). The App is not affiliated with, endorsed by or connected to the SIA, the Home Office or any awarding organisation.
This policy explains what information the App collects, why we use it, who receives it and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018). We are the controller of the personal data described here.
| App name | SIA Door Supervisor - PassRun |
|---|---|
| Package name (Android) | uk.passrun.sia |
| Bundle ID (iOS) | uk.passrun.sia |
| Developer (controller) | PassRun, independent developer based in the Republic of Korea |
| Contact | seohcz1@gmail.com |
When the App first goes online, Google Firebase Authentication creates a random identifier for your installation of the App (“anonymous sign-in”). It is not an account and is not linked to your name, email address or phone number. We use it to group the usage statistics, crash reports and question error reports that come from the same installation, and to protect our database from misuse. Because it is a unique identifier, we treat it — and everything linked to it — as personal data. It is removed from your device when you uninstall the App.
| What | Your random app ID; app usage events such as screens viewed and how far you scroll on
them, starting and finishing study sessions, unit exams and mock exams, scores and
pass or fail results, which questions were answered correctly or incorrectly, ad
impressions and clicks, and settings you change (for example personalised ads on or
off, or the daily reminder); when the App is opened and closed and how long it is used;
on Android, how the App was installed (the campaign tags passed by the Google Play
install referrer, such as utm_source, and whether an ad click ID was
present — not the ID itself); app version, platform (Android/iOS), operating system
version and the time of each event.Google Analytics for Firebase also collects some information automatically, such as an app instance ID, device model, operating system version, language, approximate location (country or region, derived from your IP address) and, where available, your device’s advertising ID. Usage events never contain your name, contact details or anything you type. |
|---|---|
| Sent to | Google Cloud Firestore (our database), Google Analytics for Firebase and PostHog (PostHog Cloud, United States) |
| Why | To understand how the App is used, find questions that are wrong or unclear, see where people get stuck or give up, and improve the App |
| Lawful basis | Our legitimate interests in running and improving the App (UK GDPR Article 6(1)(f)). You can object at any time — see section 6. |
The App also adds your answers to anonymous totals for each question (how many times it has been answered and how many times correctly, across all users), which it shows as the overall accuracy of a question. These totals are not linked to an app ID or to you.
| What | Your random app ID; details of the error (error type and message, technical stack trace and the part of the App where it happened); device model, operating system version and app version; a Crashlytics installation identifier; the time of the error |
|---|---|
| Sent to | Firebase Crashlytics (Google) and PostHog (PostHog Cloud, United States) |
| Why | To find and fix crashes and errors |
| Lawful basis | Our legitimate interests in providing an app that works reliably (UK GDPR Article 6(1)(f)) |
We receive this only if you choose to send a report with the report button on a question.
| What | The type of problem you select; anything you write in the optional description (up to 500 characters); the question the report is about; your random app ID; the App’s name, version and language; platform and operating system version; whether the device appears to be an emulator; and simple usage context (how long ago the App was first opened, how long the current session has lasted and how many quizzes were finished in it). We do not ask for your name or contact details — please do not include personal information in the description. |
|---|---|
| Stored in | Google Cloud Firestore |
| Why | To check the reported question and correct it |
| Lawful basis | Our legitimate interests in dealing with the report you chose to send us and in keeping the questions accurate (UK GDPR Article 6(1)(f)) |
If you email us, we receive your email address and whatever you write, and we use them only to reply to you and deal with your message (legitimate interests, UK GDPR Article 6(1)(f)).
The App is free and shows ads from Google AdMob: banner and full-screen placements, with optional rewarded placements where available. Native and app-open formats are currently disabled. To show, measure and protect these ads, Google may collect:
Google receives this information directly. For personalised advertising, Google acts as an independent controller — see the Google Privacy Policy and How Google uses information from sites or apps that use its services. We only see aggregated ad reports that do not identify you.
Your consent (UMP). When you first open the App in the UK, Google’s consent form (the User Messaging Platform) asks whether you agree to the use of your data, and to storing and reading information on your device, for advertising. Personalised ads are shown only if you agree. If you do not agree, Google shows non-personalised or limited ads, which are not based on your past activity. You can review or withdraw your choice at any time in Settings → Ads → Ad privacy settings (GDPR).
Personalised ads switch. Settings → Ads → Personalised ads lets you turn personalised ads off at any time. Ads still appear, but they are not based on your interests.
iOS tracking permission (ATT). On iOS the App explains why it asks and then shows Apple’s tracking prompt. If you do not allow tracking, the App never accesses your IDFA. You can change this later in iPhone Settings → Privacy & Security → Tracking.
Android. You can reset or delete your advertising ID in your device settings (for example Settings → Google → Ads or Settings → Privacy → Ads, depending on your device).
Lawful basis: your consent for personalised advertising and for storing or reading information on your device for advertising (UK GDPR Article 6(1)(a) and the Privacy and Electronic Communications Regulations). Showing non-personalised or limited ads, which keep the App free, is based on our legitimate interests.
The optional daily study reminder is a local notification scheduled on your device. No device token, contact detail or other information is sent to us for it. You can turn it off in Settings → Notifications → Daily study reminder or block the App’s notifications in your device settings; every feature keeps working without it.
We use the following service providers. We do not sell your personal data and we do not share it with anyone else, unless the law requires us to.
| Provider | Service and purpose | Role |
|---|---|---|
| Google LLC | Firebase Authentication — creating the random app ID | Processor |
| Google LLC | Cloud Firestore — storing usage events and question error reports | Processor |
| Google LLC | Google Analytics for Firebase — usage statistics | Processor |
| Google LLC | Firebase Crashlytics — crash and error reports | Processor |
| Google LLC | Google AdMob and the User Messaging Platform — showing and measuring ads, and recording your consent choice | Independent controller for some advertising data (see section 2.6) |
| PostHog, Inc. | PostHog Cloud (US region, us.i.posthog.com) — usage statistics and error
tracking |
Processor |
| Data | Retention |
|---|---|
| Study records on your device | Until you reset them or uninstall the App |
| Question error reports | Until the report has been dealt with, then deleted within 6 months |
| Crash reports in Firebase Crashlytics | 90 days |
| User-level data in Google Analytics for Firebase | No more than 14 months; after that only aggregated reports remain |
| Usage events and error events in Cloud Firestore and PostHog | Only as long as they are useful for the purposes in section 2 (for example comparing how the App is used across versions); then deleted or reduced to aggregate statistics that are no longer linked to an app ID |
| Emails you send us | As long as needed to deal with your message and any follow-up |
| Advertising data held by Google | According to Google’s own retention policies |
Under the UK GDPR you have the right to:
To use these rights, email seohcz1@gmail.com. We reply within one month. Because we do not know who you are, we may need your help to find your data — for example, roughly when you sent a question error report and which question it was about. If you object to the usage statistics, we will stop using and delete the data we can identify as yours. The App has no in-app switch for this collection; uninstalling the App stops all of it. Every study feature works the same either way.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113. We would appreciate the chance to deal with your concerns first, so please contact us before you contact the ICO.
The App is designed for adults preparing for SIA licence-linked qualifications (you must be 18 or over to apply for an SIA licence). It is not directed at children and we do not knowingly collect personal data from children. If you believe a child has sent us information, for example in a question error report, please contact us and we will delete it.
| Permission (Android) | Why it is needed |
|---|---|
INTERNET, ACCESS_NETWORK_STATE |
Loading ads, sending usage statistics, crash reports and question error reports, and checking the network connection |
AD_ID, ACCESS_ADSERVICES_AD_ID,
ACCESS_ADSERVICES_ATTRIBUTION, ACCESS_ADSERVICES_TOPICS |
Showing and measuring Google AdMob ads (added by the Google Mobile Ads SDK) |
BIND_GET_INSTALL_REFERRER_SERVICE |
Reading the Google Play install referrer (how the App was installed — section 2.2) |
POST_NOTIFICATIONS, VIBRATE, WAKE_LOCK,
RECEIVE_BOOT_COMPLETED |
Showing the daily study reminder and setting it again after the device restarts (the notification permission is requested on Android 13 and later) |
FOREGROUND_SERVICE, READ_GSERVICES |
Added automatically by Android and Google Play services libraries for background tasks; they are not used to collect any further data |
On iOS the App asks only for tracking permission (section 2.6) and notification permission (section 2.7). The App does not request location, camera, microphone, contacts, photos or file storage permissions.
If we change this policy, we will publish the new version on this page and update the effective date. We will also mention significant changes in the App’s update notes.
For any question about this policy or your personal data, please contact: