Privacy Policy

Kiwi Citizenship ("we", "us", "our") is an independently operated educational platform located at kiwicitizenship.nz. We are not a government body and have no affiliation with the New Zealand Department of Internal Affairs or Immigration New Zealand.

If you have questions about this policy, contact us at: support@kiwicitizenship.nz

We collect the following categories of information:

• **Account information** — your email address and display name when you register.

• **Usage data** — quiz scores, lesson progress, and streak data so we can show you your learning history.

• **Authentication tokens** — managed securely by Supabase. We never store plain-text passwords.

• **Payment data** — if you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your card details.

• **Technical data** — browser type, device type, and approximate region for analytics and security purposes.

We use the information we collect to:

• Provide, operate, and improve the platform.

• Display your personal learning progress, scores, and streaks.

• Send transactional emails (e.g. password reset, account confirmation).

• Detect and prevent fraudulent activity.

• Comply with applicable legal obligations.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Your data is stored on servers managed by Supabase, which uses industry-standard encryption (TLS in transit, AES-256 at rest). We apply row-level security policies so that each user can only access their own data.

While we take reasonable measures to protect your information, no system is 100% secure. Please use a strong, unique password for your account.

We use session cookies and localStorage to keep you logged in and to remember your language preference. We do not use advertising or tracking cookies from third parties.

We use the following third-party services which have their own privacy policies:

• **Supabase** — database and authentication (supabase.com/privacy)

• **Stripe** — payment processing (stripe.com/privacy)

• **Vercel** — hosting and edge network (vercel.com/legal/privacy-policy)

Depending on your location, you may have the right to:

• Access the personal data we hold about you.

• Request correction of inaccurate data.

• Request deletion of your account and associated data.

• Object to or restrict certain processing.

To exercise any of these rights, email us at support@kiwicitizenship.nz. We will respond within 30 days.

Our platform is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the platform after an update constitutes acceptance of the revised policy.

For any privacy-related questions or requests:

Email: support@kiwicitizenship.nz

Website: kiwicitizenship.nz