Privacy

Privacy Policy

Last updated 5 September 2026

CitizenCoach (citizencoachapp.com) is operated by Parteek Singh Slathia, trading as CitizenCoach (ABN 48 642 177 226), a sole trader based in Australia (“CitizenCoach”, “we”, “us”). As a small business we fall below the turnover threshold that triggers the Privacy Act 1988 (Cth), but we've written this policy to meet the standard of the Australian Privacy Principles (APPs) anyway, because you should know what happens to your data regardless of which law technically applies to us.

What we collect

  • Account details. Your email address and password, handled by our authentication provider. We never see or store your password in plain text.
  • Study and progress data. Questions you've answered, mock exam scores, topics you've missed, and your study streak — this is what lets us build your readiness estimate and study plan.
  • An anonymous identifier. Before you create an account, we assign your browser a random ID (stored in local storage, not a tracking cookie) so we can measure how the free tools are used. If you sign up within 45 days, that ID is linked to your account so your prior activity carries over; otherwise it's never connected to you personally.
  • Payment information. If you buy premium, payment is processed entirely by our payment processor. We receive confirmation that payment succeeded — we never see or store your card number.
  • Support correspondence. If you email us, we keep that correspondence to help you and to improve the product.

How we use it

  • To run the diagnostic, practice, coach, and mock exam features.
  • To calculate your readiness estimate and personalise what you study next.
  • To process your premium purchase and prevent fraud.
  • To respond to support requests.
  • To understand, in aggregate, which parts of the product are and aren't working — we look at overall trends, not individual behaviour, for this.

We do not use your data to train third-party AI models, and we do not run advertising or cross-site tracking of any kind.

Cookies and local storage

We use a session cookie set by our authentication provider to keep you signed in — this is strictly necessary and can't be disabled without breaking sign-in. We use browser local storage (not a cookie) to hold the anonymous identifier described above. We don't use third-party advertising or analytics cookies.

Who we share it with

We never sell your personal information. We share it only with:

  • Our database and authentication provider, which stores your account and progress data securely on our behalf.
  • Our payment processor, which handles your card details directly — we never see or store them.
  • Our cloud infrastructure providers, which host our backend and website.

We may also disclose information if required to by law, or to protect the rights, property, or safety of CitizenCoach or our users.

Where it's stored

Our infrastructure providers operate servers in multiple countries, so your data may be processed or stored outside Australia. Each maintains its own security and privacy practices, and is bound by contract to use your data only to provide their service to us.

How long we keep it

We keep your account and progress data for as long as your account is active. The anonymous pre-signup identifier is discarded if it's never linked to an account within 45 days. If you delete your account, we delete your personal data within a reasonable time, except where we need to retain records for legal, tax, or fraud-prevention purposes (for example, payment records related to your ABN/GST obligations).

Your rights

You can ask us to access, correct, or delete your personal information at any time by emailing parteek.singh.slathia@gmail.com. Account deletion is also available directly from your account settings.

Children

CitizenCoach is intended for adults preparing for the Australian citizenship test and isn't directed at children under 18. We don't knowingly collect personal information from children.

Security

We use reasonable technical and organisational measures — including encrypted connections (HTTPS) and provider-managed authentication — to protect your data. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

Changes to this policy

We may update this policy as the product changes. We'll update the “last updated” date above, and if a change is material we'll make reasonable efforts to let you know (for example, by email).

Contact

Questions about this policy, or a request about your data? Email parteek.singh.slathia@gmail.com.

Feedback