Privacy Policy

• Account details: your first name, last name and email address, your chosen time zone, and whether you agreed to receive news and offers by email (with the date you agreed). Your password is handled by our sign-in provider, which stores only a secure hash. We never see or store your password in readable form.
• Learning activity: the tests you complete (topic, difficulty, date), your answers and your scores. Tests you quit before finishing do not appear in your history, but we keep a short-lived working record of the questions and answers of a test in progress so the test can be marked on our server.
• Subscription details (Pro only): your plan, whether it is monthly or yearly, its status and renewal date, and your Stripe customer reference. Your card number is entered on Stripe's page and is never seen or stored by us.
• Feedback you send: the message, the category you choose, the page you were on and your account ID.
• Messages you send through the Contact Us page: your name, email address, the topic you choose and your message. We also keep a one-way scrambled (hashed) form of your IP address, not the address itself, to limit spam. We use these only to reply to you and to protect the form, and we delete messages after they are no longer needed to deal with your enquiry.
• Question reports you send: which question, the reason you choose, any note you add, the page you were on and your account ID.
• How you found us and when you visit (only if you accept optional storage): the website or campaign that sent you (a host name or campaign label only, never your browsing history), the first page you landed on, and the days you visited while signed in. With the same choice, Google Analytics records which pages you view, roughly where you are (country or city), your device and browser type, and how you arrived. If you choose "Necessary only" on the cookie notice, we do not record any of this. Separately, we count page views without cookies.
• Your experience level (optional): if you choose to tell us whether you are new to the field, have some experience or are an experienced professional. We keep it with your profile and copy it onto each test you finish, so we can see how people at different levels find the questions. You can change or remove it on the Settings page.
• Activity while you are signed in: the days you were active, the time you were last active, and whether you opened a test that is part of Pro. Our server records this when you start or finish a test. It uses no cookies or browser storage, so it applies whichever cookie choice you made, and it is deleted with your account.
• Account decisions: if we give you complimentary Pro access or suspend your account, we keep a record of that, with the date and a short private note of why. It is deleted with your account.
• Links we share: if you arrive through one of our own short links (on sqillify.com under /go/), we add one to a count for that link and day. The count holds no IP address, device details or other information about you.
• Free sample counts: when you open or answer one of our free sample scenarios, or click the sign-up button next to it, we add one to a daily count for that scenario and for the campaign label or referring website that sent you. The count holds no IP address, device details, cookie or other information about you, and nothing is counted if your browser sends a Do Not Track or Global Privacy Control signal.
• Technical data: your IP address and browser details, which our hosting and security providers process to deliver the site, prevent abuse and keep it secure.

We do not ask for government identifiers or any sensitive information, and we ask you not to include any in your feedback. Card details are handled only by Stripe.

• To create your account, sign you in, and show your progress.
• To send emails the service needs, such as sign-up confirmation and password reset.
• To protect the service from bots, abuse and scraping.
• To take payment for Pro, manage your subscription and keep the financial records the law requires.
• To read your feedback and improve the questions and the product.
• To understand which pages and sources bring people to Sqillify and whether they come back.
• To understand how learners at different experience levels find the tests, so we can set the difficulty of the questions properly.
• To run the service and answer questions from the people who use it.
• To meet legal obligations.

We do not sell your personal information. We always send the emails the service needs, such as sign-up confirmation, password reset and billing receipts. We send news and offers only if you tick the box for them when signing up or on your Settings page; it is never pre-ticked and never required. Every such email will include an unsubscribe link, and you can turn the option off at any time on the Settings page.

We use trusted providers to run the service. They process data on our behalf:

• Supabase: database and sign-in. Our data is stored in the Asia Pacific (Mumbai, India) region.
• Vercel: website hosting on a global network, which includes servers outside Australia, such as in the United States.
• Stripe: processes Pro payments and sends receipts. It collects your card and billing details and is responsible for storing them securely. Stripe may handle data in Australia, the United States and other countries.
• Vercel Web Analytics: counts page views and referring sites. It does not use cookies and does not follow you across other websites.
• Google Analytics (Google LLC and its affiliates): only if you choose "Accept all". It sets cookies and receives your IP address and browser details so it can report to us which pages are used and how people find the site. We have switched off Google's advertising features and data sharing for personalised ads, and we keep the reports for a limited period. Google may handle this data in the United States and other countries. You can see how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.
• Cloudflare: the Turnstile check that tells people from bots on our sign-up, sign-in, password and Contact Us forms. It processes browser and network signals to do this. It is not designed to leave persistent cookies on your device.
• SaaSHub: our footer shows an "Approved on SaaSHub" badge, a small image loaded from SaaSHub's servers. Like any image on a web page, loading it sends your IP address and browser details to SaaSHub, and it runs no script of ours or theirs. If you click the badge you leave our site and SaaSHub's own policies apply.
• Resend: sends us an internal email when someone signs up, contacts us, sends feedback or reports a question, so we can respond. That email contains the details you gave us (for example your name, email address and message). It may be handled in the United States.

This means your information may be handled outside Australia. We choose providers with established security practices and contracts, and we take reasonable steps to make sure they protect your information.

When you first visit, a notice asks you to choose "Accept all" or "Necessary only". Necessary items work whichever you choose. Optional items are used only if you accept them. You can change your choice at any time with "Cookie settings" in the footer. We do not use advertising or cross-site tracking cookies. If your browser sends a Do Not Track or Global Privacy Control signal, we do not record where you came from, and we do not load Google Analytics, even if you accepted. (The server-side activity record described in section 1 does not use cookies or browser storage and is not affected by that signal.)

We keep your account data until you delete your account. Deleting your account from the Account page permanently removes your profile, test history, answers, feedback, question reports and visit records from our live database. Copies in our provider's routine backups are overwritten as those backups expire. Technical logs kept by hosting and security providers are deleted on their own schedules. Stripe keeps payment and invoice records for as long as the law requires them to be kept (for tax purposes this is typically several years), even after your account is deleted.

• Access: use "Download my data" on the Account page to get a copy of what we hold about you.
• Correction: tell us if something is wrong and we will fix it.
• Deletion: use "Delete my account" on the Account page at any time.
• Questions or complaints: email us at privacy@sqillify.com. If you are not happy with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au. If you are in the European Economic Area or the United Kingdom, you may also have rights under local data protection law, and we will honour requests under them.

Data is encrypted in transit, access to each user's records is restricted at the database level so you can only read your own, and passwords are stored as hashes. The few people who run Sqillify can see learner records only through an administration area that gives each person only the access their role needs, and every view of a learner's record is logged. No online service can promise perfect security. If a breach is likely to cause serious harm, we will notify you and the regulator as the law requires.

Sqillify is not directed at children under 16, and we do not knowingly collect their information. If you believe a child has signed up, contact us and we will delete the account.

We will update this page when our practices change and show the new date at the top. For significant changes we will tell signed-in users in the app.

Professional Data Skills (ABN 94 689 179 788), Australia. Email: privacy@sqillify.com