Privacy Policy

Last updated: April 29, 2026

Ciroexam collects only what we need to run the Service. This policy describes what that is and how we handle it under PIPEDA (the federal Canadian privacy law).

What we collect

• Account info: email, name (if provided), hashed password.
• Diagnostic and practice activity: questions attempted, answers, scores.
• Billing info: handled by Stripe; we never see card numbers.
• Basic analytics: page views, anonymized device info, via Umami and PostHog.

How we use it

• To deliver the Service: track your progress, generate study recommendations.
• To improve the product: understand which content is working.
• To bill subscribers and prevent abuse.

Where the data lives

All application data is stored on servers in Canada (Beauharnois, Quebec). Stripe stores billing data per their own policy. Anonymized analytics may be processed by Umami and PostHog, which we self-host or run in EU regions.

Your rights

Under PIPEDA you can request access, correction, or deletion of your personal data at any time by emailing [email protected]. We will respond within 30 days.

Cookies

We use a session cookie for authentication and a small first-party analytics cookie. We do not use third-party advertising cookies or tracking pixels.

Changes to this policy

We will post any material change here with a new "last updated" date and, where appropriate, send an email notice to active subscribers.