Privacy Policy

• We collect what the app needs to work: your account, your study preferences, and your answers.
• We never see your card number. Stripe handles payments.
• We do not sell your data, and we do not run advertising trackers.
• You can delete your account, and everything goes with it.

The rest of this page is the detail behind those four lines.

Account. Your email address, your name if you give one, and a password which is stored only as a cryptographic hash — we cannot read it.

Study profile. Anything you tell us to personalise your plan: your exam date, province, whether you have sat the exam before, how many hours a week you intend to study, and the areas you want to focus on. All optional, all editable, all deletable.

Your study activity. The practice tests you sit, the option you chose on each question, whether it was correct, how long you spent, and which lessons you mark complete. This is what produces your readiness figures and your weak-area advice — it is the core of what you are paying for.

Usage analytics. Which pages are visited, and a random identifier stored in your browser so repeat visits can be counted as one person rather than many. No third-party advertising or cross-site tracking is used.

What you send us. Support messages, contact-form messages, any file you attach, product feedback, and any review you write.

Billing. Your subscription status, plan, renewal date, and a Stripe customer reference.

• To run your account and give you access to what you have paid for.
• To calculate your readiness, your accuracy by domain, and what to study next — this needs your answer history and cannot be done without it.
• To take payment and manage your subscription.
• To send the emails described below.
• To answer you when you write to us.
• To find and fix problems, including questions that turn out to be wrong.
• To understand, in aggregate, which parts of the product are used.

Our lawful basis is straightforward: we process what is necessary to provide a service you have asked for and, where relevant, to meet a legal obligation such as keeping records of payments.

We use a small number of service providers. Each only receives what it needs, and none of them is permitted to use your data for their own purposes.

• Supabase — database, authentication and file storage. Your data is held in Supabase’s Canadian region.
• Vercel — hosting and delivery of the website itself.
• Stripe — payment processing and subscription billing.
• Resend — sending the emails we send you.
• Google (Gemini API) — used only to group submitted product feedback into themes for us to read. If you write feedback, the text of that feedback is sent to Google for that purpose. Nothing else is: not your answers, not your results, not your email address.

Some of these providers operate outside Canada, which means your information may be processed in another country and be subject to the laws there.

Some emails are part of the service and cannot be switched off while you have an account: payment receipts, failed-payment notices, cancellation confirmations, password resets, and replies to messages you send us.

Everything else is optional — exam countdown reminders, results summaries, the weekly progress digest, and nudges if you go quiet. Turn any of them off in Account → Settings, or use the unsubscribe link in the email. Turning them off does not affect your access.

We use two, and neither is for advertising.

• A session cookie that keeps you signed in. Without it the app cannot work.
• An analytics identifier, kept for one year, so that repeat visits from the same browser count as one visitor rather than several. It contains no personal information.

Your account data is kept while your account exists. Records of payments are kept longer where tax and accounting law requires it, even after an account is closed.

When you ask us to delete your account, we schedule it and then wait 15 days before doing it. The delay is deliberate — it covers a change of mind or a holiday, and you can cancel the request at any point inside it. After that, the deletion is permanent and we cannot undo it.

Under Canadian privacy law you can ask us to:

• tell you what personal information we hold about you
• correct anything that is wrong
• delete your account and the data attached to it
• stop sending you optional email
• explain how a decision the app made about you was reached

Most of these you can do yourself in Account → Settings, immediately and without asking anyone. For anything else, write to us and we will respond within 30 days. If you are not satisfied with how we have handled a privacy concern, you may complain to the Office of the Privacy Commissioner of Canada.

Traffic is encrypted in transit. Passwords are hashed, never stored in a readable form. Access to production data is restricted, and the database enforces per-user access rules so one account cannot read another’s answers or results.

No system is perfectly secure. If a breach affects your information we will tell you and the relevant authority, as the law requires.

This is a professional examination tool for adults. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe we have, tell us and we will delete it.

If you become a referral partner, we also collect your referral code and, once you add it, the e-transfer email you ask us to pay commission to. That payout email is used only to send you money you have earned — never shared, sold, or used to contact you for anything else.

On your own Refer & Earn dashboard, you can see who you referred, but only ever a masked version of their email (for example j***@gmail.com) — enough to recognise who it is, never their full address. You never see a referred person’s payment details, and they never see yours.

Full referral program terms, including how commission is earned and paid, are in our Referral Program Terms.

If we change what we collect or who processes it, we will update this page and change the date at the top. For a material change we will email you.

To ask about anything here, or to make a privacy request: send us a message. See also our Terms of Service.