Privacy Policy

We collect only what is necessary to provide the service:

• Account data: your email address and display name (or Google account details if you sign in with Google). This is handled by Firebase Authentication (Google).
• Quiz history: your test scores, pass/fail results, question-level performance data, and timestamps. This is stored in Firestore (Google Cloud) linked to your account.
• Session data: Firebase stores an authentication token in your browser to keep you signed in. This is a strictly necessary cookie and does not require consent.

We do not collect payment information, national identity numbers, addresses, or any other sensitive personal data.

We process your data on the legal basis of contract performance — i.e. to provide the service you have signed up for. Specifically:

• Your email is used to identify your account and allow you to sign in.
• Your quiz history is used to show you your progress, generate study recommendations, and track your improvement over time.

We do not use your data for advertising, profiling, or any purpose other than providing the service.

We use the following third-party services to operate CitizenPrep:

• Firebase (Google): authentication and database storage. Data is stored in Google Cloud infrastructure (EU region). Subject to Google's data processing terms.
• Vercel: website hosting. Vercel may log request metadata (IP addresses, user agents) for security and performance purposes.

We do not sell your data to any third party, and we do not share it with advertisers.

• Account data: retained until you delete your account.
• Quiz history: retained until you delete it (via the "Delete history" button) or delete your account.
• Server logs: retained by Vercel for up to 30 days for security purposes.

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data — you can delete your quiz history at any time from the My Results page, and delete your entire account from Account Settings. Both actions are immediate and irreversible.
• Portability — request a copy of your data in a machine-readable format.
• Object to processing — though note that objecting to core data processing means we cannot provide the service.

To exercise any of these rights, contact us at privacy@globalcitizenshiptests.com. We will respond within 30 days.

We use one strictly necessary cookie: a Firebase authentication session token that keeps you signed in. This cookie is essential for the service to function and does not require your consent under UK GDPR.

We do not use tracking cookies, advertising cookies, or analytics at this time.

All data is transmitted over HTTPS. Firebase encrypts data at rest and in transit. Access to your data is restricted by Firestore security rules — only you can read or write your own quiz history.

CitizenPrep is intended for adults preparing for citizenship tests. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we will delete it promptly.

We may update this policy from time to time. We will notify you of significant changes by posting a notice on the site. The effective date at the top of this page will always reflect the most recent version.

For any privacy-related questions, requests, or complaints, contact us at privacy@globalcitizenshiptests.com.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.