Privacy Notice

Last updated: 15 June 2026

1. Who we are

Citizenship Coach ("we", "us", "our") is operated by Farid Poya. We are the data controller for personal data we collect through this service. This Notice explains what we collect, why, and the choices you have.

2. What we collect

• Account data: email address, display name, password (hashed), and login provider (e.g. Google).
• Usage data: practice answers, mock-test attempts, scores, preferred language.
• Support data: messages you send us.
• Technical data: IP address, device/browser identifiers, basic telemetry needed to keep the service secure.
• Payment data: collected and processed by our Merchant of Record, Paddle. We never see or store your full card number. We retain only an order reference, amount, currency and refund status.

3. Why we use it

• To create and maintain your account (contract performance).
• To provide the practice, study, and mock-test features (contract performance).
• To process purchases via Paddle and grant Premium access (contract performance).
• To detect fraud and secure the service (legitimate interests).
• To improve the product based on aggregated usage (legitimate interests).
• To respond to support requests (legitimate interests).

4. Who we share data with

• Paddle.com Market Limited — Merchant of Record for payments, subscription management, tax compliance, invoicing and refunds. See Paddle's privacy notice.
• Service providers we use for hosting, database, authentication, analytics, error monitoring, and voice synthesis — only as needed to run the service.
• Authorities where required by law.

5. International transfers

Our service providers may process your data outside your country. Where applicable, we rely on standard contractual clauses or equivalent safeguards.

6. How long we keep data

Account and usage data is kept while your account is active and for a reasonable period afterwards to comply with legal and accounting obligations. You can request deletion at any time (see "Your rights").

7. Your rights

Depending on your location you may have the right to:

• access the personal data we hold about you;
• correct or update it;
• request deletion;
• object to or restrict processing;
• request a portable copy of your data;
• withdraw consent at any time;
• lodge a complaint with your supervisory authority.

To exercise these rights, contact us using the details below.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and least-privilege service credentials. No system is perfectly secure — please use a strong, unique password.

9. Cookies

We use only essential cookies and local storage entries necessary to keep you signed in and remember your language preference. We do not use third-party advertising cookies.

10. Contact

For privacy questions, contact Farid Poya by replying to any account email you have received from us. For payment, refund or invoice queries please contact Paddle via paddle.net.