Privacy Policy
Last updated: May 2026
KangaLearner is committed to protecting your privacy in accordance with the Privacy Act 1988 (Australia) and the Australian Privacy Principles (APPs).
1. What Information We Collect
- Account data: email address, name (optional), avatar image (optional).
- Usage data: quiz answers, practice session results, mock test scores, study progress, preferred language and state.
- Technical data: browser type, device type, IP address (via our hosting provider, Vercel), access timestamps.
- Newsletter: email address only, if you subscribe.
2. How We Use Your Information
- To provide and improve the learning platform.
- To save your study progress across devices (when signed in).
- To send you study tips and updates (newsletter subscribers only, with consent).
- To process payments for premium features (via Stripe — see below).
- We do not sell your personal information to third parties.
3. Third-Party Services
We use the following third-party services to operate KangaLearner:
- Supabase (database and authentication) — servers located in AWS Sydney (ap-southeast-2).
- Vercel (hosting and edge functions) — global CDN with Australian edge nodes.
- Stripe (payments, if applicable) — Stripe's privacy policy: stripe.com/au/privacy.
- Upstash (rate limiting via Redis) — temporary request counters only, no personal data stored.
4. Cookies and Local Storage
We use cookies and browser localStorage for: session authentication, language preference, state preference, and anonymous practice progress (before sign-in). We do not use advertising cookies.
5. Data Retention
Account data is kept until you delete your account. Practice data is deleted with your account. Newsletter subscriptions are kept until you unsubscribe. Anonymised, aggregated usage data may be retained indefinitely for product improvement.
6. Your Rights
- Access: You can view your account data in Account Settings.
- Deletion: You can permanently delete your account and all associated data in Account Settings → Delete Account.
- Correction: You can update your name, language, and state in Account Settings.
- Newsletter opt-out: Use the unsubscribe link in any email we send.
7. Data Security
We use industry-standard security practices including encrypted connections (HTTPS/TLS), row-level security on all database tables, and rate limiting to prevent abuse. However, no system is 100% secure — we recommend using a strong, unique password.
8. Children's Privacy
KangaLearner is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us to have it removed.
9. Changes to This Policy
We may update this policy from time to time. We will notify registered users of significant changes via email. Continued use of the service after changes constitutes acceptance.
10. Contact
For privacy questions or to exercise your rights, contact: privacy@kangalearner.com.au
We will respond to requests within 30 days as required by the Australian Privacy Act.