Privacy Policy

Last updated: March 2026

Who We Are

CivicLearn platforms are operated by Testrada Pte Ltd, a company incorporated in Singapore. We are the data controller for the personal information collected through civiclearn.com and all associated platform domains.

What We Collect

When you create an account, we collect your email address and, if provided, your name. When you make a purchase, your payment is processed by Stripe; we do not store your credit card number, bank account details, or other payment credentials on our servers. Stripe may collect additional information as described in their own privacy policy.

When you use our platforms, we collect usage data such as which exercises you complete, your scores, and your progress. This data is stored in your account to enable features like progress tracking and results delivery.

When you contact us, we store the content of your message and your email address to respond and provide support.

Our websites use Cloudflare for hosting and security. Cloudflare may collect technical data such as IP addresses, browser type, and page views as part of its standard service. We do not operate any additional analytics or tracking tools beyond what Cloudflare provides by default.

How We Use Your Data

We use your personal data to provide the service you signed up for: delivering test preparation content, tracking your progress, processing your purchases, sending transactional emails (such as account setup, password resets, and exam results), and responding to support requests. We do not use your data for purposes unrelated to the service.

Email Communications

We send transactional emails related to your account and purchases through SMTP2GO. We may occasionally send you product updates or new content relevant to the platform you purchased. We do not send marketing emails to people who have not made a purchase. You can opt out of non-transactional emails by replying to any message or contacting us directly.

Third-Party Services

We use the following third-party services to operate our platforms:

Supabase — database and authentication. Your account data and learning progress are stored on Supabase infrastructure hosted in Zurich, Switzerland.

Stripe — payment processing. Stripe handles all payment data under their own privacy policy and PCI-DSS compliance.

Cloudflare — hosting, CDN, and security. Pages are served through Cloudflare’s global network.

SMTP2GO — transactional email delivery.

We do not sell, rent, or share your personal data with any other third parties. We do not use any advertising networks or tracking pixels.

Cookies

Our platforms use only essential cookies required for authentication and session management. We do not use advertising cookies, social media tracking cookies, or third-party analytics cookies.

Data Retention

Your account data and learning progress are retained for as long as your account exists. If you wish to have your account and data deleted, contact us at [email protected] and we will process the deletion within 30 days. Payment records are retained as required by applicable tax and accounting regulations.

Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data. If you are in the European Economic Area, the United Kingdom, or another jurisdiction with applicable data protection laws, you may exercise these rights by contacting us at [email protected]. We will respond within 30 days.

Children

Our platforms are not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. Changes will be reflected in the “last updated” date above. We encourage you to review this page periodically.

Contact

For any questions about this privacy policy or your personal data, contact us at