Privacy Policy

Citizenpro Canada is a private learning platform that helps people prepare for the Canadian citizenship test. It is offered as a mobile and web app and through this website. It is not affiliated with, endorsed by, or acting on behalf of the Government of Canada or Immigration, Refugees and Citizenship Canada (IRCC).

The organization responsible for your personal information is Ott & Stadler Group KLG (general partnership (Kollektivgesellschaft)), Rosgartenstrasse 26, 8280 Kreuzlingen, Switzerland, business identification number (UID) CHE-452.933.007. It is the organization accountable for your personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, under Quebec's Act respecting the protection of personal information in the private sector (Law 25). Because it is based in Switzerland, it is also subject to the Swiss Federal Act on Data Protection (FADP).

Contact for all privacy questions and requests: citizenprosupport@gmail.com.

The party responsible for the protection of personal information is Ott & Stadler Group KLG, represented by its partners. You can reach it at citizenprosupport@gmail.com. You may send any question, complaint, or request about your personal information to this address at any time.

Data you submit on this website, such as an Early Access signup, is stored in Google Cloud Firestore in the region Montréal, Canada (Google Firebase project of this website). Data of the app is stored with Google Firebase as well, in a project planned in the region Montréal, Canada.

Our operator is located in Switzerland and accesses this data from Switzerland. Some service providers process data outside Canada. The sections on service providers and on transfers explain who they are and what this means for you.

This website does not require an account and does not collect the app data listed further below. It collects the following personal information, only in the situations described:

Early Access signup: the email address you enter and the context described in the next section. Technical server data: your IP address, the time, the requested page, and your browser type, which our hosting provider records in server logs to run and secure the website. Contact by email or through the contact form: whatever you send us, and for the form your first and last name, email address, and message. Form messages reach us by email through our email delivery provider and are not stored on the website itself. We keep them in our mailbox only as long as needed to answer you and to follow up, and delete them on request.

The website does not use advertising cookies, does not show advertising, does not sell or rent any data, and does not profile visitors. Analytics: the website does not currently use any analytics or tracking tool. If we add one in the future, such as Google Analytics 4, it will only run after you accept it in the cookie banner, the data will not be used for advertising, and we will update this policy before turning it on. You can change your cookie choice at any time using the Cookie Settings link in the footer.

If you join Early Access on our website, we collect your email address, the time of your signup, and limited technical context that helps us understand where signups come from and prevent abuse: your browser language, the page you came from, the page you signed up on, and your browser type.

We use your email address only to reserve your free Premium access, to manage the Early Access list (including a counter and a check that an address is not entered twice), and to tell you when the app is available. We do not send you a confirmation email, we do not use your address for advertising, and we do not sell it.

Your signup is stored in Google Cloud Firestore in the region Montréal, Canada, and it is delivered to us by email through our email delivery provider Resend, whose servers are located in the United States. To limit repeated or automated signup attempts, we also process your IP address temporarily in the memory of our server. We do not store it.

The legal basis is your consent, which you give by submitting the form after reading the notice under it. You can withdraw it at any time. We keep Early Access email addresses until the launch notification has been sent and for 12 months afterwards, or until you ask us to delete yours, whichever comes first. To withdraw or delete your signup, write to us at the contact address.

The website stores a few things on your own device, and they do not leave it: your choice in the cookie banner and the progress of the checklists you tick off in the Resource Centre. We use this to make the website work the way you set it up.

The website sets no advertising or cross-site tracking cookies. You can clear this data at any time in your browser settings. Doing so resets your saved choices.

Account data: the email address and nickname you provide at registration, and, if you sign in with Google, the basic profile data Google shares for that login. Sign-in is handled by Firebase Authentication, so we never see or store your password in plain text.

Learning data: your quiz answers, results, spaced-repetition progress, favourites, and weak-topic statistics. Settings: your selected province or territory and your language.

Subscription status: whether you have active Premium access. Payments are handled exclusively by Apple or Google. Our provider RevenueCat receives the purchase status so that we can unlock Premium. We never receive or store your payment card details.

Feedback: the message and, if you choose, the star rating you send from the feedback page or the rating dialog. It reaches us by email through Resend, together with your nickname and email address if you are signed in.

Technical data: basic diagnostics that are needed to keep the app working.

We use your data only to: create and secure your account, save and restore your learning progress across devices, unlock the Premium access you purchased, manage the Early Access list and tell you about the launch, answer your messages and feedback, keep the app and website technically working and secure, and meet our legal obligations.

We do not use your data for advertising, we do not sell or rent your personal information, and we do not profile you for advertising or any other purpose.

We rely on your consent, which you give when you create an account and accept this policy, when you submit the Early Access form, or when you accept optional features. Where needed, we also process data to perform our contract with you (providing the app and the Premium features you purchased). You may withdraw your consent at any time. This does not affect processing that took place lawfully before.

We use service providers strictly to operate the app and website. Their access is limited to what they need to provide their service to us:

Google (Firebase): authentication, database (Cloud Firestore), and website hosting (Firebase App Hosting on Google Cloud). Firestore is set up in the region Montréal, Canada.

Resend: email delivery of Early Access signups, contact form messages, and feedback messages to us. Servers in the United States.

RevenueCat Inc.: management of purchase and subscription status for the app. Servers in the United States.

Apple and Google (App Store and Google Play): distribution of the app and processing of payments, under their own privacy policies. Your payment details never pass through our systems or RevenueCat.

Your personal information leaves Canada in three ways. First, our operator is located in Switzerland and accesses the data from there. Second, Resend and RevenueCat process data on servers in the United States. Third, Google may operate hosting and support infrastructure outside Canada, even where a database is located in Montréal.

We remain accountable for personal information that we transfer to service providers, as PIPEDA requires, and we use contracts and technical safeguards such as encryption in transit and access controls to protect it. Switzerland has its own data protection law, the FADP, which offers a level of protection comparable to European standards.

Where Quebec Law 25 requires it, we assess the privacy risks of transfers outside Quebec before relying on them. You can ask us for more information about these transfers at any time.

We send commercial email, such as the launch notification for Early Access, only to people who have given us their consent to receive it, as required by Canada's Anti-Spam Legislation (CASL). Every such message identifies us as the sender, includes our postal address, and contains an unsubscribe link or a clear way to opt out, which we honour without delay.

Messages that are necessary for the service, such as a reply to your request or a notice about changes to this policy, are not marketing and can still reach you after you unsubscribe.

The practice recommendations of the app (for example, which questions to show you again) are generated automatically from your own answer history with a standard spaced-repetition method. This does not produce a decision with legal or similarly significant effects on you. It only affects which practice questions are suggested. No profiling for advertising or other purposes takes place.

Early Access email addresses: until the launch notification has been sent and for 12 months afterwards, or until you ask us to delete yours.

Account and learning data in the app: as long as your account is active. If your account has been inactive (no login) for more than 24 months, we may delete it after giving you 30 days’ notice by email.

Feedback and email conversations: as long as needed to handle them and to improve the app, and until you ask us to delete them.

Technical server logs: for a limited period set by our hosting provider, only for operation and security.

Data stored only on your device stays there until you clear it.

You can delete your app account and all associated data at any time in the app under Profile, Delete account. This is final. Step-by-step instructions are in the account deletion guide.

To withdraw or delete an Early Access signup, or to have any other data deleted, write to the contact address. We respond within 30 days. Purchase records held by Apple, Google, or RevenueCat under their own policies are outside our control and follow their own retention rules.

Data is transmitted encrypted (HTTPS). Passwords are handled by Firebase Authentication and are never visible to us in plain text. Our providers apply industry-standard technical and organizational safeguards, and we limit internal access to personal information to the people who need it to operate the app and website. No system is completely secure, and we cannot guarantee absolute security.

We keep a record of every breach of security safeguards involving your personal information, as PIPEDA requires. If a breach creates a real risk of significant harm to you, we will notify the Office of the Privacy Commissioner of Canada and the affected individuals as soon as possible, and, in Quebec, the Commission d'accès à l'information du Québec. Where required, we will also notify other organizations that may be able to reduce the risk.

Under PIPEDA and, where applicable, Quebec Law 25, you have the right to: access the personal information we hold about you, ask us to correct inaccurate information, withdraw your consent, ask us to stop using or delete your information (subject to legal retention requirements), and, where applicable, receive your information in a structured and commonly used format.

Where the Swiss FADP applies to you, you have comparable rights. For any request, write to the contact address. We respond within 30 days. We may need to verify your identity first.

If you believe we have not handled your personal information properly, please contact us first at the contact address, so that we can resolve it. You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, for Quebec residents, with the Commission d'accès à l'information du Québec (cai.gouv.qc.ca). For matters under Swiss law, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch).

The app and website are not directed at children under 13, and we do not knowingly collect personal information from children under 13. Minors under 18 may use them only with the consent of a parent or legal guardian. In Quebec, the consent of the holder of parental authority is required for minors under 14.

We may update this policy to reflect changes in our practices or in the law. The current version is always on this page. We will inform active users of material changes, and we will ask again for consent where the law requires it. The date at the top shows when it was last updated.