Privacy Policy

1. Who we are

NZ Citizenship Test (newzealandcitizenship.co.nz) is an independent educational platform to help people prepare for the New Zealand citizenship test. We are not affiliated with the New Zealand Government or the Department of Internal Affairs.

2. Information we collect

We only collect what is necessary to provide the service:

• Account information — your name and email address when you register
• Authentication data — if you sign in with Google, we receive your name, email and profile picture from Google
• Quiz activity — your quiz attempts, scores, category progress and badges earned
• Usage data — standard server logs (IP address, browser type, pages visited) collected by our hosting provider Vercel

We do not collect payment information, phone numbers or any government identity documents.

3. How we use your information

• To provide and personalise the service (progress tracking, badges, study history)
• To authenticate you and keep your account secure
• To improve the platform based on aggregated usage patterns
• We do not sell, rent or share your personal data with third parties for marketing

4. Third-party services

We use the following third-party providers to operate the platform:

• Vercel — hosting and serverless infrastructure (USA)
• Turso — database storage (AWS us-west-2)
• Google OAuth — optional sign-in via Google account

Each provider has their own privacy policy and data processing terms. Your data may be processed outside of New Zealand by these providers.

5. Cookies and sessions

We use session cookies to keep you logged in. These are strictly necessary for the service to function and do not track you across other websites. We do not use advertising or analytics cookies.

6. Data retention

Your account data is retained for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us. Quiz attempts and progress data are deleted immediately upon account deletion.

7. Your rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and data
• Withdraw consent for data processing

8. Security

Passwords are hashed using bcrypt and never stored in plain text. All data is transmitted over HTTPS. We take reasonable steps to protect your data, though no online service can guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. Material changes will be noted with an updated date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, please contact us via the feedback form on our website or by raising an issue at our GitHub repository.