Privacy Policy

Interpretation and Definitions

Definitions

For the purposes of this Privacy Policy:

• You means the individual accessing or using the Service.
• Company (referred to as "We", "Us" or "Our") refers to the Citizenship Practice Test Platform.
• Account means a unique account created for you to access our Service or parts of our Service.
• Service refers to the Website, the mobile app, and the Citizenship Practice Test Platform.
• Website refers to australiancitizenshiptest.com.au and related web pages operated by us.
• Mobile App refers to our mobile application for Australian citizenship test preparation.
• Personal Data is any information that relates to an identified or identifiable individual.
• Cookies are small files placed on your device by a website, containing details of your browsing history among other uses.
• Device means any device that can access the Service (e.g. computer, cellphone, tablet).
• Usage Data refers to data collected automatically when using the Service (e.g. duration of a page visit, IP address, browser type).
• Service Provider means a third-party provider that helps us operate the Service, such as payment providers, authentication providers, analytics providers, advertising providers, app store services, database providers, and entitlement management providers.

1. Information We Collect

The information we collect depends on whether you use the Website, the Mobile App, or both.

Website users

While using the Website, we may ask you to provide personally identifiable information that can be used to contact or identify you, including but not limited to:

• Account Information: When you create an account, we collect your name, email address, and authentication provider (e.g. Google, Microsoft).
• Payment Information: If you purchase paid access through the Website, your payment details may be processed securely by Stripe or another website payment provider. We do not store your full payment card information.
• Website Submissions: If you contact us, send feedback, or submit a form on the Website, we collect the information you choose to provide.
• Usage Data: We collect information about your activity on the Website (e.g. test results, progress, device/browser info, IP address, pages visited, time and date of visit, and unique device identifiers).

Mobile App users

When you use the Mobile App, we may collect:

• Account and Sign-In Information: Your name, email address, Google account profile information provided through Google Sign-In, user ID, and authentication or session information.
• Access Status: Information about your app access, including whether random-test access is active.
• Test Activity: Test progress, test attempts, scores, answers, and result summaries.
• Purchase and Entitlement Information: Information used to confirm access passes, purchase status, entitlements, and access-pass validation.
• App Usage and Diagnostics: App interactions, diagnostics, crash information, performance information, and similar technical data.
• Device and Advertising Identifiers: Device identifiers or advertising identifiers where used by advertising and app service SDKs.

Tracking Technologies and Cookies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. Cookies are mainly used on the Website. The Mobile App may use app SDKs, device identifiers, advertising identifiers, or similar technologies depending on your device settings and the services used. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent; however, if you do not accept cookies, some parts of our Service may not function properly. We use:

• Necessary / Essential Cookies (Session): Essential to provide services and enable features (e.g. authentication, fraud prevention). Without these, requested services cannot be provided.
• Cookies Policy / Notice Acceptance Cookies (Persistent): To identify whether users have accepted the use of cookies on the Website.
• Functionality Cookies (Persistent): To remember choices you make (e.g. login details, preferences) for a more personalized experience.
• Analytics / Performance Cookies (Persistent, may be administered by third parties): To track traffic and how users use the Website to improve our Service.
• Targeting and Advertising Cookies (Persistent, administered by third parties): These cookies track your browsing habits to enable us to show advertising that may be relevant to your interests. Third-party advertisers may place cookies to show ads based on your interests. You may opt out via the Network Advertising Initiative opt-out page or your device advertising settings.

Mobile App Data Safety

For Google Play Data Safety purposes, the Mobile App may collect account information, app activity, purchase information, diagnostics, device identifiers, and advertising identifiers. We use this data to provide sign-in, save test progress, manage access passes, show ads where applicable, improve app reliability, prevent fraud or abuse, and comply with legal or platform requirements.

2. How We Use Your Information

We may use Personal Data for the following purposes:

• To provide and maintain our Service, including to monitor usage.
• To manage your Account and your registration as a user; the data you provide gives you access to functionalities available to registered users.
• For the performance of a contract, including the development, compliance, and undertaking of the purchase contract for products or services you have purchased.
• To contact you by email or other equivalent forms of electronic communication (e.g. regarding updates, security updates, or support).
• To manage your requests and attend to your enquiries to us.
• To personalize your experience and track your progress.
• To analyze usage and improve our services.
• To comply with legal obligations and prevent fraud or abuse.

3. Third-Party Services

Third-party providers may process data on our behalf or as independent service providers under their own privacy policies and terms. We use these providers to operate the Website and Mobile App, process purchases, provide authentication, show ads, improve reliability, and meet legal or platform requirements.

Website services

• Stripe: We may use Stripe to process payments made through the Website. Stripe may collect and process your payment information according to their Privacy Policy.
• Google: If you sign in with Google, your basic profile information is shared with us. Google may also collect usage data as described in their Privacy Policy.
• Microsoft: If you sign in with Microsoft, your basic profile information is shared with us. Microsoft may also collect usage data as described in their Privacy Statement.
• Analytics: We may use analytics to track and report usage. Google Analytics tracks and reports website traffic; you can opt out via the Google Analytics opt-out browser add-on. Clicky is a web analytics service—see Clicky's Privacy Policy. Google Ads conversion tracking (Google LLC) connects data from the Google Ads advertising network with actions on this Application; Personal Data collected: Cookies and Usage Data. For Google's privacy practices, see Google Privacy & Terms.
• Advertising: Google AdSense (Google LLC) uses the "DoubleClick" Cookie to track use of this Application and user behavior regarding ads, products, and services. Personal Data collected: Cookies and Usage Data. You can disable DoubleClick Cookies via Google Ad Settings. Privacy Policy – Opt Out.
• Behavioral Remarketing: We may use remarketing services to advertise on third-party websites after you visit our Service. Bing Ads Remarketing (Microsoft Inc.) uses cookies to inform, optimize, and serve ads based on your past visits. You can opt out of Bing Ads interest-based ads at Microsoft personalized ads. See Microsoft Privacy Statement.
• Usage, Performance and Miscellaneous: Google Places may be used to return information about places via HTTP requests. Google Places may collect information from you and your device for security purposes, as held by Google's Privacy Policy.

Mobile App services

• Supabase: We use Supabase for authentication, account storage, access status, and test progress.
• Google Sign-In: We use Google Sign-In for Mobile App authentication. Google may provide your name, email address, and basic Google account profile information to us.
• Apple Sign-In: If used in the future, Apple Sign-In may provide basic account information according to Apple's privacy terms.
• Google Play Billing: Android in-app purchases for Mobile App access passes are processed through Google Play Billing.
• Apple App Store / StoreKit: iOS in-app purchases for Mobile App access passes may be processed through Apple App Store / StoreKit.
• RevenueCat: We use RevenueCat to help manage purchase status, entitlements, and access-pass validation across mobile platforms.
• Google AdMob: The Mobile App may use Google AdMob to show in-app advertising.
• Platform Services: We may use platform services required for app delivery, security, diagnostics, crash reporting, performance monitoring, and compliance.

Mobile App payments

Payments for mobile app access passes are processed by the relevant app store payment system, such as Google Play Billing on Android or Apple App Store / StoreKit on iOS. We do not store full payment card details. RevenueCat helps us manage purchase status, entitlements, and access-pass validation. Website payment providers may differ from Mobile App payment providers.

Advertising

The Website may use Google AdSense and related website advertising technologies. The Mobile App may use Google AdMob to show ads. Advertising partners may use device identifiers, advertising identifiers, cookies, or similar technologies depending on the platform and your settings.

4. Data Sharing & Disclosure

We do not sell your personal information. We may share your personal information in the following situations:

• With Service Providers: To operate the Service, including website providers such as Stripe, authentication providers, analytics providers, and advertising providers, and Mobile App providers such as Supabase, Google Sign-In, Apple Sign-In, Google Play Billing, Apple App Store / StoreKit, RevenueCat, Google AdMob, and platform services.
• For business transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.
• With affiliates: We may share your information with our affiliates, who will honor this Privacy Policy.
• Law enforcement and legal requirements: We may disclose your Personal Data if required by law or in response to valid requests by public authorities, or when we believe in good faith that disclosure is necessary to: comply with a legal obligation; protect and defend our rights or property; prevent or investigate possible wrongdoing in connection with the Service; protect the personal safety of users or the public; or protect against legal liability.

5. Retention of Your Personal Data

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies. Usage Data may be retained for a shorter period for internal analysis, except when used to strengthen security or improve functionality, or when we are legally obligated to retain it longer.

6. Transfer of Your Personal Data

Your information, including Personal Data, may be processed at our operating offices and in any other places where the parties involved in the processing are located. It may be transferred to and maintained on computers located outside your state, province, country, or other governmental jurisdiction where data protection laws may differ. Your consent to this Privacy Policy and your submission of such information represents your agreement to that transfer. We will take steps reasonably necessary to ensure your data is treated securely and in accordance with this Privacy Policy.

7. Data Security

The security of your Personal Data is important to us. We use industry-standard security measures (encryption, secure connections, access controls). Website payment data is handled by website payment providers such as Stripe, and Mobile App payments are handled by the relevant app store payment system with RevenueCat assisting with entitlement management. We do not store your full payment card details on our servers. We regularly review our security practices. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

8. Your Rights & Choices

• You can access, update, or delete your account information at any time from your profile or by contacting us.
• We do not currently send marketing emails. If this changes in the future, we will provide any legally required unsubscribe or opt-out options.
• You may disable cookies in your browser, but some features may not work as intended.
• If you wish to delete your account and associated Mobile App data, you can request deletion from this page.
• Some records may be retained if required for legal, security, fraud-prevention, tax, accounting, purchase verification, or compliance reasons.

9. Children's Privacy

The Mobile App is intended for users aged 18 and over who are preparing for Australian citizenship. We do not knowingly target children with the Mobile App.

Our Service does not address anyone under the age of 13, and we do not knowingly collect personally identifiable information from anyone under 13. If you are a parent or guardian and you know that your child has provided us with Personal Data, please contact us.

If we become aware that we have collected Personal Data from anyone under 13 without verification of parental consent, we take steps to remove that information from our servers. If we need to rely on consent as a legal basis for processing and your country requires parental consent, we may require your parent's consent before we collect and use that information.

10. Links to Other Websites

Our Service may contain links to other websites that we do not operate. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

11. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Where appropriate, we may provide a prominent notice on our Service before changes become effective. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact us.