Privacy Notice

Last updated: 2026

1. Who we are

This Privacy Notice describes how Citizenship test and learn ("we", "us", "our") collects, uses, and shares personal data when you use our service. We act as the data controller for the personal data described below.

2. Personal data we collect

Account data: email address, login credentials, language and state preferences.
Usage data: features used, quiz answers, progress, device identifiers, IP address, and other telemetry.
Support data: messages you send to support and metadata about those messages.
Voice data: short audio snippets you record for practice, processed to provide voice features.
Payment data: handled by our reseller Paddle; we do not store full card numbers ourselves.

3. How and why we use your data

To create your account and provide the Service (legal basis: performance of a contract).
To process payments, manage subscriptions, and issue invoices via Paddle (contract; legal obligation).
To improve the Service and analyse usage (legitimate interests).
To prevent fraud and abuse and to secure the Service (legitimate interests; legal obligation).
To respond to customer-support requests (legitimate interests; contract).
To send service communications. Marketing communications, if any, are sent only with your consent.

4. Who we share data with

Paddle.com — our Merchant of Record. Paddle processes payments, manages subscriptions, handles tax compliance, and issues invoices on our behalf. See the Paddle Privacy Notice.
Hosting and infrastructure providers (such as our cloud and database providers) that store and serve the Service.
Analytics and error-monitoring providers that help us understand and improve the Service.
AI service providers used to power voice and language features.
Professional advisers (legal, accounting) where reasonably necessary.
Authorities where required by law, court order, or to protect our rights.

5. International transfers

Some of our providers may process personal data outside your country of residence, including in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Data retention

We keep personal data only as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it.

7. Your rights

Subject to applicable law, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent at any time. You may also have the right to lodge a complaint with your supervisory authority. To exercise any right, contact us through the in-app chat. We aim to respond within one month.

8. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and secure infrastructure.

9. Cookies

We use essential cookies and local storage to keep you signed in and to remember your preferences. We may use analytics cookies to understand how the Service is used. You can manage cookies through your browser settings.

10. Changes

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service.

11. Contact

For privacy questions, contact us through the in-app chat.