CanCitiPrep ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Canadian citizenship test preparation platform at cancitiprep.ca.
By using our service, you agree to the collection and use of information as described in this policy.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address - for account identification and communication
- Name (if signing in with Google) - for personalization
- Authentication data - managed securely by our authentication provider (Supabase)
1.2 Usage Data
We automatically collect:
- Test results - scores, answers, and completion dates
- Progress data - tests completed, categories studied
- Language preference - French or English
We also collect more general data about how the site is used:
- Clicks and pages viewed - we record clicks on certain buttons and links, together with the page where the click happened and a general device type (phone, tablet, or computer). We also know which pages are viewed and, for visitors arriving from another site, only the name of that site.
- Key steps in your journey - certain important moments are recorded as events: viewing the plan options, choosing a plan, and using up your three free tests.
- Temporary visit identifier - a short random identifier, generated by your browser, is kept locally on your device to group together the actions from one visit. It is not derived from anything that identifies you personally, and it disappears when you close the tab or clear your browsing data.
- Link to your account - when you sign in, and again when a purchase is completed, this visit identifier is linked to your account. This means activity recorded before you signed in can afterwards be connected to you.
- What this data does not include - this activity data never contains an email address, a name, an account identifier, an IP address, or a full browser identification string.
1.3 Payment Information
When you purchase a plan:
- Payment processing is handled entirely by Stripe
- We do NOT store your credit card number, CVV, or full card details
- We only receive: confirmation of payment, plan type, and transaction ID
1.4 Cookies and Tracking
We use cookies for:
- Essential cookies - required for authentication and site functionality
- Preference cookies - to remember your language choice
2. How We Use Your Information
We use your information to:
- Provide and maintain our service
- Track your learning progress across devices
- Process payments for your purchases
- Send important account notifications
- Improve our platform and user experience
- Understand how visitors use the site, so we can improve it
3. Third-Party Services
We use trusted third-party services:
3.1 Supabase (Authentication & Database)
- Handles user authentication securely
- Stores your account and progress data
- Privacy Policy: supabase.com/privacy
3.2 Stripe (Payments)
- Processes all payment transactions
- PCI-DSS compliant (highest security standard)
- Privacy Policy: stripe.com/privacy
3.3 Cloudflare (Hosting)
- Hosts our website securely
- Privacy Policy: cloudflare.com/privacypolicy
4. Data Security
We implement industry-standard security measures:
- All data transmitted via HTTPS (TLS encryption)
- Passwords are never stored (we use passwordless authentication)
- Database access protected by Row Level Security
- Payment data handled by PCI-compliant Stripe
5. Data Retention
- Account data: Retained while your account is active
- Test results: Retained while your account is active
- Payment records: Retained for 7 years (legal requirement)
You can request deletion of your data at any time (see Section 7).
6. Your Rights (PIPEDA & GDPR)
Under Canadian privacy law (PIPEDA) and GDPR (for EU residents), you have the right to:
- Access - Request a copy of your personal data
- Correction - Update or correct inaccurate data
- Deletion - Request deletion of your account and data
- Portability - Receive your data in a portable format
- Objection - Object to certain processing (e.g., marketing)
- Withdraw consent - For cookies and advertising
7. How to Exercise Your Rights
To exercise any of these rights, contact us at:
Email: support@cancitiprep.ca
We will respond within 30 days.
To Delete Your Account:
- Send an email to support@cancitiprep.ca with subject "Delete My Account"
- Include the email address associated with your account
- We will delete your data within 30 days and confirm by email
8. Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have collected such data, please contact us immediately.
9. International Data Transfers
Your data may be processed in:
- Canada (primary)
- United States (Supabase, Stripe, Cloudflare servers)
These transfers are protected by appropriate safeguards including Standard Contractual Clauses.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the new policy on this page
- Updating the "Last updated" date
- Sending an email for material changes (if you have an account)
11. Contact Us
If you have questions about this Privacy Policy, contact us:
- Email: support@cancitiprep.ca
- Business: CanCitiPrep
- Location: British Columbia, Canada