Privacy Policy

• Account details. Your email address and password, handled by our authentication provider. We never see or store your password in plain text.
• Study and progress data. Questions you've answered, mock exam scores, topics you've missed, and your study streak — this is what lets us build your readiness estimate and study plan.
• An anonymous identifier. Before you create an account, we assign your browser a random ID (stored in local storage, not a tracking cookie) so we can measure how the free tools are used. If you sign up within 45 days, that ID is linked to your account so your prior activity carries over; otherwise it's never connected to you personally.
• Approximate location and device. With each visit we record your approximate location (country, state and city, as reported by our hosting provider) and the type of device and browser you use. We never store your IP address; at most we keep a one-way scrambled version of it to count visits.
• Payment information. If you buy premium, payment is processed entirely by our payment processor. We receive confirmation that payment succeeded — we never see or store your card number.
• Email preferences. Unless you untick the box at signup, we email you a few study reminders and tips in your first two weeks, and we keep a record of which ones we sent. Every one has an unsubscribe link, and unsubscribing takes effect straight away. If you create an account but never confirm your email, we send one reminder about that. If you start a premium checkout and do not finish, we send one email about it. We do not sell or share your email address for marketing.
• Support correspondence. If you email us, we keep that correspondence to help you and to improve the product.

• To run the mock test, practice, coach, and mock exam features.
• To calculate your readiness estimate and personalise what you study next.
• To process your premium purchase and prevent fraud.
• To respond to support requests. To help you, we can see your account's activity, such as when you last visited, your scores and which emails we sent you.
• To understand which parts of the product are and aren't working. We mostly look at overall trends; we may also look at an individual visit or account to find and fix a problem.

We do not use your data to train third-party AI models, and we do not run advertising or cross-site tracking of any kind.

We use a session cookie set by our authentication provider to keep you signed in — this is strictly necessary and can't be disabled without breaking sign-in. We use browser local storage (not a cookie) to hold the anonymous identifier described above. We don't use third-party advertising or analytics cookies.

We never sell your personal information. We share it only with:

• Our database and authentication provider, which stores your account and progress data securely on our behalf.
• Our payment processor, which handles your card details directly — we never see or store them.
• Our cloud infrastructure providers, which host our backend and website.
• Our email provider, which sends the emails you ask for or agree to receive.

We may also disclose information if required to by law, or to protect the rights, property, or safety of CitizenCoach or our users.

Our infrastructure providers operate servers in multiple countries, so your data may be processed or stored outside Australia. Each maintains its own security and privacy practices, and is bound by contract to use your data only to provide their service to us.

We keep your account for as long as you have it. Your practice history (your answers, mock test results, mistakes and progress) is kept while you are preparing, and cleared once your test is behind you: 21 days after you tell us you passed, or after 45 days with no practice since your test date. The analytics linked to your account is deleted at the same time. We email you a week before, with a button to keep it. Your account, anything you bought and your email choices stay.

Analytics — the technical usage data described above — is kept on a separate, shorter schedule, purged automatically:

• Anonymous analytics (from a visit that's never linked to an account) is deleted after 45 days.
• Analytics linked to an active account is deleted after 24 months.
• Technical error logs, used only to catch bugs, are deleted after 90 days.

If you delete your account, we delete your account and progress data, and your analytics history, within a reasonable time — not just unlink it — except where we need to retain records for legal, tax, or fraud-prevention purposes (for example, payment records related to your ABN/GST obligations). We also reset the anonymous identifier stored in your browser, so nothing on that browser continues to be associated with the deleted account.

You can ask us to access, correct, or delete your personal information at any time by emailing hello@citizencoachapp.com. Account deletion is also available directly from your account settings.

CitizenCoach is intended for adults preparing for the Australian citizenship test and isn't directed at children under 18. We don't knowingly collect personal information from children.

We use reasonable technical and organisational measures — including encrypted connections (HTTPS) and provider-managed authentication — to protect your data. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

We may update this policy as the product changes. We'll update the “last updated” date above, and if a change is material we'll make reasonable efforts to let you know (for example, by email).

Questions about this policy, or a request about your data? Email hello@citizencoachapp.com.