Privacy policy

Practice Tests & Exams (“we”, “our”) is committed to protecting the personal information of our users. This policy describes what we collect, why, how we store it, who we share it with, and how you can request deletion. It aligns with the Australian Privacy Principles (APPs).

What we collect

• Account details: email address, hashed password, display name.
• Exam activity: attempts, answers, scores, category performance, timing per question. Used to build progress reports and recommend next practice.
• Purchase history: which packs you own, when they expire, receipt numbers. Payment card data never touches our servers, Stripe handles it.
• Marketing preferences: if you opt in to updates, your email joins our marketing list at Kit (ConvertKit). You can unsubscribe from every email we send.

How we store it

Account and exam data live in Supabase (Postgres) in the ap-south-1 region. Row-Level Security policies ensure students can only read their own attempts, parents can read their linked children's attempts, and admins see all rows.

How long we keep it

We retain account and attempt data while your account is active and for twelve months after your last activity. You can request earlier deletion at any time.

Who we share it with

• Stripe, processes payments. Stripe stores card data under PCI DSS.
• Resend, delivers transactional emails (receipts, password reset, results summaries).
• Kit (ConvertKit), delivers marketing and lifecycle emails you've opted in to.
• Vercel, hosts the site and serves pages.
• Microsoft Clarity, provides optional, consent-based website analytics, heatmaps and session recordings so we can improve the site. Account, exam, payment and form content is masked. Clarity does not load unless you allow analytics, and you can change your choice using the Privacy choices button.
• Google Analytics, provides optional, consent-based website traffic and usage analytics. It does not load unless you allow analytics. Advertising storage, advertising personalisation and advertising user-data collection remain disabled. We do not send exam answers, names, email addresses or payment details to Google Analytics.

We do not sell personal information. We only share what these providers need to do their jobs.

Your rights

You can request a copy of your data, correction of anything wrong, or full deletion of your account and history by emailing hello@practicetestsandexams.com.au. We'll respond within 30 days.

Children's data

Our platform is designed for students preparing for selective-entry pathways, typically Years 3–7. Accounts are created by parents. If you believe a child's account has been created without a parent's consent, contact us and we'll delete it.

Changes to this policy

Material changes to this policy will be announced by email to account holders and posted here.