Privacy notice

Last updated: 2 June 2026

This notice explains what personal data the APM PMQ Practice Tool collects, why, how long we keep it, and the rights you have over it. We've written it to be plain and honest. The tool is currently a private beta operated by Forward Projects Ltd, who is the data controller.

Who we are

Forward Projects Ltd (Tewkesbury, Gloucestershire, UK) is responsible for your personal data. For anything to do with your data, contact us at privacy@forwardprojects.com.

What we collect

  • Account details — your name, email address and a securely hashed password.
  • Your learning activity — the topics you read, the questions you answer and your scores, your study sessions, and any feedback or assistant conversations you create.
  • Usage analytics — when you sign in, how often you return, roughly how long you spend in the app, and the engagement that drives your streak, XP, levels and badges.

It's all first-party: we use no third-party advertising or tracking, no device fingerprinting, and we don't sell or share your data.

Why we use it (lawful basis)

We process your account and learning data to provide the service you've signed in to use. We process usage analytics under our legitimate interest in understanding engagement and improving the tool — always minimised and never to your detriment.

How long we keep it (retention)

We don't keep personal data longer than we need to. If an account is inactive for 12 months, we close it (disable sign-in) and then, after a further grace period of about 30 days, permanently erase the account and its data. Active paid (Pro) accounts are retained while the subscription is live. You can also delete your data yourself at any time (below). A minimal record that a deletion took place — containing no personal data — is kept for our own accountability.

Your rights

Under UK data protection law you have the right to:

  • be informed about how your data is used (this notice);
  • access a copy of your data;
  • have inaccurate data corrected;
  • erasure — delete your data;
  • restrict or object to processing;
  • data portability.

You can exercise the most common rights yourself from your Account page: Reset my data clears your progress but keeps your login, and Delete my account permanently erases everything. For anything else, email privacy@forwardprojects.com.

If you're unhappy with how we've handled your data, you can complain to the UK regulator, the Information Commissioner's Office (ICO), at ico.org.uk.

Cookies

We use only essential cookies: one to keep you signed in, one to protect forms against cross-site request forgery, and one to remember your light/dark theme. There are no analytics or advertising cookies.