Privacy Policy

Welcome to Einbürgerungstests.ch (“we”, “us” or “the service”). This privacy policy applies to our website (einbürgerungstests.ch) and our mobile app “Schweizer Bürgerrechtstest” (iOS, Bundle ID: com.vishwesh789.swisscitizenship). It explains how we collect, use, share, and protect your personal data. We are committed to protecting your privacy and comply with the Swiss Data Protection Act (DSG) and the European General Data Protection Regulation (GDPR).

Website: Einbürgerungstests.ch
App: Schweizer Bürgerrechtstest (com.vishwesh789.swisscitizenship)
Contact: golukicoding@gmail.com

3.1 Account Data (Website)
When you create an account on the website, we store: email address, display name (optional), selected canton, language preference.

3.2 Locally Stored Data (App)
The app stores the following data locally on your device: profile information (optional), learning progress, test results, study time, streaks, settings (language, design, audio, notifications), selected canton, bookmarks, and starred questions.

3.3 Learning Progress
Completed lessons, test results, scores, starred questions, study streaks, and study times.

3.4 Payment Data
Website: Subscriptions are processed through Dodo Payments (Merchant of Record). We do not store credit card data.
App: In-app purchases and subscriptions are processed through RevenueCat and the Apple App Store. RevenueCat processes: customer ID, purchase history, device identifiers.

3.5 Technical Data
Website: Authentication cookies (Supabase Auth), anonymized usage statistics.
App: Firebase Analytics for anonymized usage statistics (app opens, screen views, test completions, crashes). The app does not use cookies.

3.6 Data We Do NOT Collect

• No IP addresses for profiling
• No location data
• No contact lists
• No biometric data
• No camera access
• No health data

Website: Your data is stored in Supabase (PostgreSQL database), hosted in the EU. All data transfers are encrypted via HTTPS. Row Level Security (RLS) ensures you can only access your own data. The website is hosted on Vercel.

App: Data is stored locally and encrypted on your device (AsyncStorage and SQLite). External transfers use HTTPS.

Retention periods:

• Local app data: until app is uninstalled
• Firebase Analytics: 30–90 days
• RevenueCat: 6+ months
• Supabase (website): until account deletion

We do not share your data with third parties, except:

• Supabase: Database and authentication (website)
• Dodo Payments: Payment processing (website)
• Vercel: Website hosting
• RevenueCat: Subscription management (app)
• Firebase Analytics: Anonymized usage statistics (app)
• Legal obligation: When required by authorities

We never sell your data to third parties.

Supabase and Firebase operate in the EU. RevenueCat operates in the USA with GDPR-compliant safeguards.

You have the following rights:

• Right of access: Request what data we store about you
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Delete your data and account
• Right to object: Object to the processing of your data
• Data portability: Export your data

Contact us at golukicoding@gmail.com to exercise your rights. In the app, you can also manage your data directly in settings.

Website: We only use technically necessary cookies for authentication (Supabase Auth session). No tracking or advertising cookies are used.

App: The mobile app does not use cookies. Device identifiers are used solely for anonymous analytics.

The iOS app requires the following permissions:

• Notifications: For study reminders (optional)
• Internet: For synchronization and subscription management
• Speech/TTS: For text-to-speech functionality (optional)

Our website and app are intended for persons aged 16 and over. We do not knowingly collect data from children under 16.

We may update this privacy policy from time to time. We will inform you of significant changes via the website or in-app notification.

Email: golukicoding@gmail.com
Right to complain: You may file a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch