Skip to main content
Back to Home
Legal & Compliance

Privacy Policy

Last updated: November 3, 2026 • Effective date: October 17, 2026

Optional usage analytics

With your permission, we use Google Analytics to measure page visits and practice starts and completions, and Microsoft Clarity for navigation insights, heatmaps and interaction replays. Google Analytics does not replay quiz sessions. Advertising features are disabled, and we do not send scores, answers or account identifiers to Google Analytics. It processes device and interaction information and uses analytics cookies. App text is masked. Advertising storage is denied. We do not send custom account identifiers or question answers.

You may reject analytics or withdraw using the analytics control at the bottom of any page. Withdrawing stops collection in this browser; it does not delete previously collected data. This optional analytics feature is for adults aged 18 and over.

Microsoft privacy statement

Independent Educational Resource: CitizenshipPrep (“we”, “our”, or “us”) is an independent civic education platform. We are not affiliated with, authorized by, or endorsed by USCIS, the UK Home Office, IRCC Canada, the Australian Department of Home Affairs, or any governmental authority.

1. Information We Collect

We collect the minimum amount of data required to provide and synchronize your study progress:

  • Google Account Information: Email address, name, and profile picture provided through Google sign-in, securely authenticated via Supabase Auth. We do not receive or store your Google password.
  • Study Progress: When signed in, quiz answers, missed questions, topic totals, spoken self-assessments, revision dates and your optional exam date and daily study time are stored per account in Supabase. Answers waiting to sync are queued in this browser for that account. Reading marks, flashcard mastery, aggregate test summaries and streaks remain in browser storage. Spoken practice uses browser text-to-speech; we do not record or upload microphone audio.
  • Device & Telemetry Data: Browser user-agent and anonymous interaction logs for performance monitoring and crash diagnostics.

*We never ask for, collect, or store sensitive immigration documents, Alien Registration Numbers, National Insurance Numbers, Social Insurance Numbers, or passport copies.

2. Payment Information & Merchant of Record

All financial transactions and subscriptions are processed by our authorized Merchant of Record, Lemon Squeezy, LLC.

When purchasing Pro access, your payment method (credit card, debit card, PayPal) and billing address are collected directly by Lemon Squeezy under their PCI-DSS Level 1 compliant infrastructure. CitizenshipPrep never receives, transmits, or stores full card numbers or sensitive payment tokens on our servers.

3. Data Storage & Cloud Infrastructure

Your account profiles and study metadata are securely housed in managed PostgreSQL databases hosted by Supabase Inc., encrypted both in transit (TLS 1.3) and at rest (AES-256). Backups are automated and secured with strict row-level security (RLS) policies ensuring users can only read and write their own data.

4. Your Rights (GDPR & CCPA Compliance)

Regardless of your citizenship jurisdiction, we respect global privacy rights:

  • Right to Access: You may request a complete export of your user profile and study history.
  • Right to Rectification: You may update or correct your profile data at any time.
  • Right to Erasure (“Right to be Forgotten”): You may request permanent deletion of your account and all associated test scores.
  • No Sale of Personal Data: We never sell, rent, or trade your personal information to third-party data brokers or marketing networks.

5. Children’s Privacy (COPPA & Age Eligibility)

CitizenshipPrep is designed exclusively for adult learners preparing for official civics and naturalization examinations. Our Service is not directed to children, and we do not knowingly request, collect, or store personal information from individuals under 13 years of age (or under 16 years of age in the European Economic Area and United Kingdom).

If you believe that a minor has created an account or submitted personal details without verifiable parental consent, please contact us immediately at support@all-in-one-citizenship.app, and we will promptly delete the account and associated records.

6. Contact Information & Data Requests

If you have questions regarding this Privacy Policy or wish to exercise your data protection rights, contact our privacy officer at: