Legal

Privacy Policy

Last updated: April 13, 2026 · Applies to all Discover Canada Prep users

We take your privacy seriously. This policy explains what personal information we collect, how we use it, who we share it with, and what rights you have over your data. Discover Canada Prep is committed to complying with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

1. Who We Are

Discover Canada Prep ("we," "our," or "us") operates the exam preparation platform at discovercanadaprep.ca. We are the data controller responsible for your personal information.

If you have any privacy-related questions or concerns, please contact us at: Email: privacy@discovercanadaprep.ca

2. Information We Collect

We collect the following categories of information:

Account information: Your email address, collected when you create an account or sign in. We use passwordless OTP authentication — no password is ever stored.

Profile information: Your full name, if you voluntarily provide it in your account settings.

Usage data: Your exam sessions, answers, scores, and progress. This is the core data needed to provide the Service.

Support tickets: If you contact us via the support form, we collect your name, email address, and the content of your message.

Technical data: Standard server logs including IP address, browser type, and pages visited. This data is used solely for security and operational purposes and is not used for marketing or profiling.

We do not collect sensitive personal information such as health data, financial information (payment processing is handled entirely by Stripe), or government identification numbers.

3. How We Use Your Information

We use your information only for the purposes it was collected:

• To provide, operate, and improve the Service • To authenticate your identity via email OTP • To track your exam progress and display your results • To respond to your support requests • To send important service notices (e.g., changes to terms or billing) • To detect and prevent fraud or abuse

We do not use your information for targeted advertising. We do not sell, rent, or share your personal data with third parties for their marketing purposes.

4. Legal Basis for Processing

We process your personal information under the following legal bases:

• Performance of a contract: Processing your account data and exam results is necessary to provide the Service you signed up for. • Legitimate interests: Processing technical and security data to operate a safe and reliable service. • Consent: Where you have voluntarily provided additional information such as your full name.

You may withdraw consent at any time by contacting us, though this may affect your ability to use certain features.

5. Data Storage and Security

Your data is stored securely using Supabase, a cloud database provider. Data is hosted on servers located in the United States. By using the Service, you consent to this transfer of data outside of Canada. Supabase maintains industry-standard security practices and is SOC 2 compliant.

Payment information is processed by Stripe and is never stored on our servers. Stripe is PCI DSS compliant.

We implement reasonable technical and organisational security measures to protect your data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service.

Exam session data and answers are retained indefinitely to provide you with your full history and progress tracking. You may request deletion of your account and all associated data at any time.

Support ticket data is retained for up to 3 years for operational and legal compliance purposes.

Server logs are retained for up to 90 days.

7. Third-Party Services

We use the following third-party services to operate Discover Canada Prep:

• Supabase (supabase.com): Database, authentication, and backend services. Your email address, exam data, and account information are stored here. • Stripe (stripe.com): Payment processing for subscriptions. Stripe handles all payment data directly. • Vercel (vercel.com): Web hosting and deployment. Vercel processes request logs.

Each of these providers operates under their own privacy policies and data processing agreements. We have ensured that each provider offers an adequate level of data protection.

8. Your Rights Under PIPEDA

As a Canadian resident, you have the following rights regarding your personal information:

Right of access: You may request a copy of all personal information we hold about you.

Right to correction: You may request that we correct inaccurate or incomplete information.

Right to withdrawal of consent: You may withdraw your consent to our processing of your data at any time, subject to legal or contractual restrictions.

Right to deletion: You may request that we delete your account and all associated personal data. We will comply within 30 days, subject to any legal obligations to retain data.

Right to lodge a complaint: If you believe we have mishandled your personal data, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.

To exercise any of these rights, please contact us at privacy@discovercanadaprep.ca.

9. Cookies

We use only essential cookies and browser storage necessary to keep you signed in and to maintain your session state. We do not use tracking cookies, advertising cookies, or third-party analytics services.

You can control cookies through your browser settings, but disabling essential cookies may prevent the Service from functioning correctly.

10. Children's Privacy

The Service is intended for users who are 18 years of age or older. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us immediately and we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated date, and by sending a notice to the email address associated with your account at least 14 days before the changes take effect.

Continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

12. Contact Us

For any privacy-related questions, requests, or complaints, please contact:

Email: privacy@discovercanadaprep.ca

We will acknowledge your request within 5 business days and resolve it within 30 days, as required by PIPEDA.