Privacy Policy

Last updated: 6 October 2026

English · Français

AI Citizenship is an independent citizenship-test study tool operated by Manera Technologies Inc. (Quebec, Canada). This policy explains exactly what we collect, why, and what you can do about it. We do not sell your data, we do not run advertising, and we do not track you across other websites.

1. What we collect

Data	Why	Legal basis (GDPR)
Email address	To create your account and sign you in with a one-time code, and to send you your receipt.	Performance of a contract
Device identifier and label (a random ID we generate, plus a browser/OS description)	To enforce the limit on how many devices can use one account at the same time.	Performance of a contract
Subscription status and Stripe customer ID	To know whether your account has full access.	Performance of a contract
Feedback and language requests you send us (your message; for a language request, the language and exam country you ask about; the study language you had selected; the date and time; for feedback other than language requests, your browser's user-agent; and your email if you type it in. If you are signed in, the submission is linked to your account.)	To fix bugs and improve the app. If you leave your email with a language request, we use it only to send you one message when that language is available; we never add it to a mailing list or use it for anything else. Each submission is also emailed to our team's inbox. For feedback other than language requests, that copy includes the email you typed or, if you are signed in and left it blank, your account email, so we can reply. The copy of a language request never includes an email address.	Legitimate interest (feedback); consent (your email for the language notice), which you can withdraw at any time
AI tutor usage count (a daily number, not the content)	To apply fair-use limits.	Legitimate interest
A keyed hash of your IP address (not the address itself), recorded when you send feedback or request a sign-in code	To limit how many feedback messages or sign-in codes one visitor can trigger, so the service cannot be used to flood our inbox or other people's.	Legitimate interest
Two-factor secret and phone number (only if you switch these on)	To secure your account.	Performance of a contract

What stays on your device. Your study progress, exam history and readiness score are stored in your browser's local storage and are not sent to our servers. Your chosen country, study languages and voice settings are also kept there; your browser uses them to request the matching questions, audio and tutor answers from us, but we do not save them to your account. The exception is feedback or a language request you choose to send, which records your study language and, for a language request, the exam country. Clearing your browser data clears what is stored on your device.

2. What we do NOT collect

No advertising identifiers, no ad networks, no cross-site tracking, no analytics profiling.
No location data.
No payment card details — these go directly to Stripe and never touch our servers.
No immigration status, case details, or government file numbers. Please never send these to us.

3. Who we share data with

Only the processors needed to run the service:

Processor	What they receive	Purpose
Stripe	Your email and payment details you enter on their checkout page	Payment processing and subscription management
Anthropic (AI tutor)	The question you type into the tutor, and the study topic context; when we produce an internal summary of feedback, the feedback text. We do not send your email address or account details.	To generate the tutor's answer and internal feedback summaries
Microsoft (speech service)	The study text to be read aloud, when you request on-demand audio. Not your identity.	Text-to-speech playback
Email delivery provider	Your email address and the sign-in code or receipt; the language-available notice; copies of feedback sent to our team	To deliver sign-in codes, receipts, the language notice, and feedback to our team

We never sell or rent personal data, and we do not share it for advertising.

4. Where data is stored

Our servers are located in Germany (Hetzner). Some processors listed above may process data outside your country, including in the United States, under their own safeguards and standard contractual clauses.

5. How long we keep it

Account data — until you delete your account.
Sign-in codes — a few minutes, then discarded.
Rate-limit records (the keyed hash of your IP address) — up to 24 hours, then deleted automatically.
Sessions — until they expire or you sign out.
Feedback — kept in our database while it is useful for improving the app. If you delete your account, we remove from our database the link to your account, and your account's email address from every feedback message and language request that carries it, including ones sent while signed out. Copies of feedback already emailed to our team's inbox are not changed automatically; write to [email protected] and we will delete them. An email address left with a language request is used only for that one notice. It is removed from our database no later than 12 months after you sent the request, whether or not the language has been added. To remove it sooner, including an address that differs from your account email, write to [email protected] from that address.
Payment records — Stripe retains these as required by financial and tax law.

6. Your rights

Wherever you live, you can:

Access the data on your account — sign in and open the account panel.
Delete your account and its data — there is a Delete account button in the app. It removes your user record, sessions and pending codes, and unlinks your feedback. This is immediate and cannot be undone.
Correct your data, or object to or restrict processing.
Withdraw consent and request a copy of your data.

If you are in the EU/EEA or the UK, you also have the right to lodge a complaint with your national data protection authority. In Canada, you may contact the Office of the Privacy Commissioner. In Quebec, you may contact the Commission d'accès à l'information.

7. Children

AI Citizenship is intended for adults preparing for a citizenship or civic-integration test. It is not directed at children, and we do not knowingly collect data from children.

8. Security

All traffic is encrypted with HTTPS. Sign-in uses one-time codes rather than stored passwords, with optional two-factor authentication. Sessions are signed and device-limited. Payment card data never reaches our servers.

9. Changes

If we change this policy materially we will update the date above and, where the change is significant, notify signed-in users by email.

10. Contact

Questions, requests, or data-protection matters: [email protected]
Manera Technologies Inc., Pointe-Calumet, Quebec, Canada.