Privacy policy
Last updated 1 October 2026
Who we are
Learn Canada operates Learn Canada. For support or privacy requests, email oliver@betaglobal.uk.
Learn Canada is the data controller for the personal information handled by Learn Canada: responsible for deciding why and how it is used. Learn Canada is designed for adults preparing for the Canadian citizenship test. We do not ask for a date of birth or immigration case documents to study. If you believe a child has supplied personal information, contact us so we can assess the request and take appropriate action.
You can use the free sampler without a Learn Canada account. Where enabled, the full course is available through a lifetime purchase or a weekly subscription. We do not show third-party advertising or sell your personal data.
Study progress
Your answers, lesson reading position and graded feedback, fact-recall history, daily goal, test date, saved lessons and mock history are stored on your device, not backed up to a Learn Canada account. The course uses this local progress to choose revision and show milestones. Preferences → Delete my data includes an option to clear this device's progress, preferences, reminders and downloaded course. Clearing browser storage or deleting the app alone does not erase online purchase records.
Daily reminders, if you turn them on in the app, are scheduled by your phone itself. Their times are not sent to us.
What leaves your device
- Technical request data — such as IP address, browser information, requested page and time, processed by Cloudflare to deliver and protect the service.
- Purchase and access data — a server-generated customer identifier, store and product identifiers, transaction references, purchase and renewal dates, subscription expiry and billing status, and ownership or refund status. RevenueCat processes these with app/device information to verify purchases, restore access and provide purchase reporting. Apple handles payment for iOS purchases; we do not receive your payment-card details.
- Optional learning and website purchase measurement — only after you accept the current analytics choice: a random session identifier, the first valid
srccampaign label, visits, lesson/mock/practice activity, offer views and checkout starts. If you buy on the website while that choice remains on, we can associate the verified initial order's plan, amount, currency and a hashed order reference with the session and campaign. This helps us understand which links bring paying learners. These records stay in Learn Canada's Cloudflare database for 90 days; they are not shared with Meta or forwarded to PostHog. We do not include your answer, score, question text, test date, email or card number. - Feedback you submit — your message, optional reply email, question reference, platform and app/build versions. No sign-in or analytics consent is needed to send feedback.
- Optional study activity — only when you turn on Share study activity in Preferences and accept analytics: random installation and session identifiers, beta cohort, lesson references, starts, completions, exits, request failures, coarse app error types (without messages, stacks or URLs), visit times and app versions. These stay in Learn Canada's Cloudflare database and do not include answers or feedback email.
Purchases and recovery
The customer identifier supplied to RevenueCat is a custom user ID, even without an account. It links your purchase to access on this installation and can be linked to a recovery email if you use email recovery. iOS purchase and restore use your Apple purchase identity and do not require you to give Learn Canada an email address.
Website checkout collects your email and payment details without a password or registration form. RevenueCat receives the checkout email, Stripe processes website payments, and Resend delivers access emails. We retain the email address encrypted and a keyed email hash to recognise your purchase and send future access links. Restoring access in another browser uses a verified email link. You can optionally link an existing app purchase to desktop access this way. Email links expire after 15 minutes and work once. Purchase credentials are stored securely in the native app or in a necessary website cookie; the server stores credential hashes with a one-year expiry.
For a new website order, we also record the plan selected, the exact version and text of the terms shown, your explicit immediate-access choice and acknowledgement, the Canadian purchase condition in the terms, the connection country reported by our hosting provider and the time of the request. Canadian checkout is closed while its terms are reviewed. The connection-country check is not independent verification of residence or billing country. We associate the record with verified payment information and send a confirmation you can keep. We do not copy your full card number into these records or use the consent evidence for advertising.
We obtain purchase, renewal, expiry, refund and ownership information from Apple and our payment providers, and necessary network/security information from Cloudflare. These are sources of information as well as recipients. Verified purchase data is matched automatically to course access: an active owned purchase grants access; expiry, refund or conflicting ownership can restrict it. These checks do not assess immigration eligibility or predict your official test result. Contact support if an access decision appears wrong so a person can review the purchase information and help correct an error.
Purchase and recovery details are necessary to provide those services. A website purchase needs a receipt/recovery email and the provider's required payment details; without them we cannot complete that purchase or send its recovery links. Apple purchase/restore needs the store's purchase information, but no email address given to Learn Canada. Analytics, Share study activity, a feedback reply email and direct support correspondence are optional; rejecting analytics does not prevent studying or buying.
Purchase records are retained while needed to provide and restore ongoing course access, resolve purchase disputes and prevent fraud. They do not expire with optional analytics records. Preferences → Delete my data shows the deletion scope and whether automatic processing is available. A confirmed request covers the connected purchase profile and unambiguously verified profiles belonging to the same email account, their recovery links and credentials, and feedback associated with that verified email. A shared purchase alone is not permission to delete somebody else's profile.
Deletion is processed in stages. The app shows completion only after the relevant services confirm removal; configuration problems, identity conflicts or provider approval can delay completion. Keep the app's deletion receipt to check progress. Apple and Google Play subscriptions continue until cancelled in their store settings. Deleting a RevenueCat Billing profile cancels its website subscriptions and removes its course access, including Lifetime; old access emails cannot restore that deleted website access. Deletion does not issue a refund. Other Apple devices may need Restore purchases; an Apple purchase can be shared to a computer again through a new email link. Local data on other devices is not remotely erased.
We keep limited deletion-status records and revoked-credential or activity digests while needed to complete and evidence the request, reject reused credentials or prevent erased activity being recreated. These security records do not have a general automatic expiry; their necessity must be reviewed, and they are not a retained copy of your answers or messages. Raw activity references used for provider deletion are cleared when that stage completes. Stores, payment processors and email providers may retain records under their own legal and service retention requirements. Separate correspondence and records we cannot associate with your verified identity are not silently treated as deleted. Contact support for access, correction or help with deletion; do not send card details or your Apple password.
Limited website purchase and accepted-contract evidence may be retained after profile deletion to meet accounting obligations and establish or defend legal claims. It contains the order reference, amount, currency, purchase date, the seller's terms and consent evidence; it does not restore course access. We remove the confirmation recipient email from these records when the profile is deleted and stop unsent confirmation deliveries. This limited evidence is normally removed after six years from purchase, or the applicable tax-record retention deadline if later. A specific legal requirement or active dispute may require a longer justified period. Optional study activity is not retained on this basis.
Why it is processed
On-device progress and preferences provide the study features you request, based on the course contract or our legitimate interests in providing the free study tools. They remain separate from optional server-side measurement.
We rely on performance of our contract with you, including steps you request before buying, to process purchase, access and recovery data. We rely on legitimate interests for proportionate service security, fraud prevention, support and purchase reporting, and on legal obligations for records we must retain by law. RevenueCat's transaction reporting is separate from optional study analytics; rejecting study analytics does not prevent necessary purchase verification or purchase records.
Technical request data supports our legitimate interests in running and securing the service. Handling feedback and support relies on our legitimate interests in resolving enquiries, or contract where necessary to fulfil your purchase. Handling applicable privacy-rights requests relies on legal obligations. Optional learning, campaign and study-activity measurement relies on consent. You can withdraw it in cookie settings; withdrawal stops future optional measurement without undoing earlier processing.
Service providers
Cloudflare hosts the service and its database. RevenueCat processes purchase data on our behalf; its service can process data in the United States. See RevenueCat's privacy information. Stripe processes website payments under Stripe's privacy policy, including its independent fraud-prevention and regulatory purposes. Resend delivers requested access and contract-confirmation emails under Resend's privacy policy. Google Workspace hosts our support mailbox and handles email addresses, messages, attachments and delivery/security information to provide that service. Apple separately handles App Store transactions under Apple's privacy policy.
Providers may process information outside Canada. Before launch, this notice will identify the enabled providers, processing locations and applicable transfer arrangements. Canadian launch privacy review remains pending and purchases are closed.
We may disclose the minimum necessary information to an authorised professional adviser or a public authority when required by law, needed to establish or defend a legal claim, or necessary to protect the service from fraud. This does not permit unrelated marketing use.
Learn Canada does not forward optional analytics to PostHog or Meta. Historical Learn Britain data and accounts are separate from this product.
Contacting us
Feedback submitted in Preferences or through Report this question is stored privately in Cloudflare D1 for up to 180 days. Optional reply emails are used to handle feedback, based on our legitimate interests in support. Short-lived hashed request addresses prevent abuse; raw IP addresses are not stored in the feedback database.
If you email oliver@betaglobal.uk, we receive your address, message and any attachments in our Google Workspace mailbox. We keep correspondence while needed to handle your request and any related dispute or legal obligation, then remove unnecessary information under our support-retention review. It is managed separately from the automatic 180-day in-app feedback cleanup. Avoid sending identity documents, immigration case files, passwords or payment details unless we explain why particular information is needed and how to send it securely.
Optional study activity
The random installation identifier can connect activity and error types across sessions on the same installation. This data is pseudonymous, rather than fully anonymous. It is not used for advertising tracking. Delete my data can request removal using this device's available study and session references; references from older sessions or other installations may no longer be available here.
This helps us understand lesson completion and returns. The learncanada.beta.v1 local-storage entry holds your random installation identifier. Our events are kept for up to 180 days. Turning Share study activity off and pressing Save, or withdrawing analytics consent, removes this identifier and stops future events without changing progress. Quote your study reference from Preferences to request deletion of earlier events; reinstalling or changing device creates a different reference.
How long analytics are kept
Our raw launch, learning and campaign events have a 90-day retention period and are removed by daily automatic cleanup. We do not keep a separate permanent archive of these events. The ordinary analytics identifier lasts for the browser session. An optional pending order reference lasts in session storage for up to 24 hours so verification can finish after checkout. Withdrawing analytics clears it and stops future attribution. Delete my data removes activity under the device references still available here; its status stays pending if historical provider removal is outstanding. For older references, email support with the approximate date, time and campaign link, or your study reference. We will explain what we can locate without asking for unnecessary data.
Your rights
Depending on the circumstances, data protection rights include access, correction, erasure, restriction, portability and objection. Email oliver@betaglobal.uk to exercise them, including for guest purchase records. You can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
Your right to object: you can object to processing based on our legitimate interests for reasons relating to your situation. We will assess the objection and stop unless we have a lawful reason to continue. You can withdraw consent for optional analytics at any time in cookie settings.
We normally respond to a data-protection rights request within one calendar month. If an extension is legally permitted, we explain the reason and timing. Verification is proportionate; do not send identity documents unless we explain why they are necessary.
Data-protection complaints
If you are unhappy with how we handle personal information, email oliver@betaglobal.uk and describe your concern. We acknowledge data-protection complaints within 30 days, investigate without undue delay, keep you informed and explain the outcome. For information about Canadian privacy concerns, see the Office of the Privacy Commissioner of Canada. Contacting support does not remove your legal rights.
Cookies and local storage
Study preferences and progress stay on your device. Optional analytics storage is off until accepted; your choice is remembered for 180 days. Purchase credentials and downloaded study content support access independently of analytics consent. Read the storage details or change your choice.
Changes to this policy
We update this notice when the service or its processing changes and show the date above. A materially new optional analytics purpose requires a fresh choice before it starts; posting a revised notice does not itself create consent or retrospectively change why existing information was collected.
Back