Privacy Policy

Introduction

CitizenReady is a service operated by Atanexus (ABN: 96656198455). Throughout this Privacy Policy, references to "we," "us," "our," or "CitizenReady" refer to Atanexus.

At CitizenReady, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and share your data when you use our Australian Citizenship Test preparation service. By using CitizenReady, you agree to the practices described in this policy.

We are committed to complying with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). This Privacy Policy explains how we handle your personal information in accordance with the APPs and Australian privacy laws.

1. Information We Collect

1.1 Account Information

When you create an account with CitizenReady, we collect:

• Email address
• Display name (if provided)
• Password (encrypted and stored securely via Firebase Authentication)
• Authentication provider information (if you sign in with Google)

1.2 Usage Data

We automatically collect information about how you use our service:

• Test results and quiz performance (scores, answers, completion time)
• Test history and progress tracking
• Study streak and activity dates
• Question bank interactions and section preferences
• Device and browser information

1.3 Subscription and Payment Information

When you purchase a subscription:

• Transaction details (amount, date, subscription tier)
• Subscription status and duration
• Payment gateway information (handled by third-party processors)

2. How We Use Your Information

We use your information to:

• Provide and maintain the CitizenReady service
• Manage your account and authenticate your access
• Track your test progress and provide personalized study recommendations
• Process subscription payments and manage billing
• Send important service updates and notifications
• Improve our question bank and test preparation materials
• Analyze usage patterns to enhance user experience
• Prevent fraud and ensure platform security

3. Third-Party Services

3.1 Firebase (Google Cloud Platform)

We use Google Firebase for authentication, database storage, and hosting. Your account data and test history are stored securely in Firebase Firestore. Firebase acts as our data processor and is subject to Google Cloud's data processing terms.

Data Processing Agreement: Firebase complies with:

• Australian Privacy Principles (APPs)
• Google Cloud's data processing and security terms
• Industry-standard encryption and security measures

Firebase's privacy practices are governed by Google's Privacy Policy.

3.2 Google Sign-In (SSO)

If you choose to sign in with Google, we receive your basic profile information (name, email) from Google. This process is governed by Google's OAuth 2.0 protocol and their privacy policies.

3.3 reCAPTCHA Enterprise

We use Google reCAPTCHA Enterprise to protect against spam and abuse during registration and login. reCAPTCHA collects hardware and software information and sends it to Google for analysis.

4. Data Storage and Security

Your data is stored securely using industry-standard encryption. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted password storage using Firebase Authentication
• Secure HTTPS connections for all data transmission
• Regular security audits and updates
• Restricted access to personal data by authorized personnel only
• Firestore security rules to protect user data

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will remove your personal data within a reasonable timeframe, except where we are required to retain it for legal or compliance purposes.

6. Your Rights

You have the right to:

• Access your personal data stored in our system
• Correct inaccurate or incomplete information
• Request deletion of your account and associated data
• Export your test history and progress data
• Opt out of marketing communications (if any)
• Withdraw consent for data processing

7. Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze site usage. You can configure your browser to refuse cookies, but this may limit your ability to use certain features of our service.

8. Children's Privacy

CitizenReady is intended for users who are 18 years or older, or who are preparing for Australian citizenship under parental guidance. We do not knowingly collect personal information from children under 13 without parental consent.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of CitizenReady after such changes constitutes your acceptance of the updated policy.

10. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances:

• With service providers who assist in operating our platform (e.g., Firebase, hosting services)
• When required by law, court order, or governmental authority
• To protect our rights, property, or safety, or that of our users
• In connection with a business transfer, merger, or acquisition

11. International Data Transfers

Cross-Border Data Disclosure: In accordance with Australian Privacy Principle 8 (APP 8), we inform you that your personal information may be stored and processed in data centers located outside Australia.

Specifically, your data may be transferred to and stored in:

• Google Cloud Platform data centers in the Asia-Pacific region
• United States (for Google authentication services)
• Other countries where Google Cloud Platform operates its infrastructure

Safeguards: We take reasonable steps to ensure that overseas recipients comply with Australian privacy laws and handle your information in accordance with the APPs. By using our service, you consent to this cross-border transfer of your personal information.

Google Cloud Platform maintains security certifications including ISO 27001, SOC 2/3, and implements appropriate technical and organizational measures to protect your data regardless of where it is stored.

12. Data Breach Notification

In accordance with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988 (Cth), we are required to notify you and the Office of the Australian Information Commissioner (OAIC) of any eligible data breach that is likely to result in serious harm to you.

If a data breach occurs, we will:

• Assess whether the breach is likely to result in serious harm to affected individuals
• Notify affected users as soon as practicable via email or other direct communication
• Notify the OAIC if required under the NDB scheme
• Provide information about the breach, the types of information involved, and steps you can take to mitigate potential harm
• Take immediate action to contain and remediate the breach

We maintain security incident response procedures and regularly review our security practices to minimize the risk of data breaches.

13. Business Details

Business Name: Atanexus
ABN: 96656198455
Email: ivan@atanexus.com

For our registered business address, please contact us via email.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: ivan@atanexus.com
Contact Form: citizenready.com.au/contact

For privacy complaints or concerns about how we handle your personal information, you may also contact the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au
• Phone: 1300 363 992