SIE EXAM READYLearn. Practice. Prepare.

Privacy Policy

Last updated: 16 August 2026

This policy explains how SIEExamReady(“we” or “the Service”), operated by Plus 44 Pty Ltd, handles your information.

1. Information we collect

  • Account information. We collect your email and a securely hashed password when you create an account.
  • Newsletter information. We store the email address that you submit to a newsletter form until you unsubscribe or ask us to delete it.
  • Study progress. We store question attempts, scores, and completed lessons so you can see and sync your progress.
  • Purchases and payment status. RevenueCat and the applicable Apple, Google, or web payment provider process purchases. RevenueCat receives your account ID when you sign in so access can work across devices. We keep a first-party transaction ledger for purchase integrity, refunds, fraud control, and financial records. We do not store your full card number.
  • Usage data. PostHog receives pageviews, feature use, and device type. Session recordings may be enabled to help us find usability problems. Text that you type into forms is masked in these recordings. Google Analytics also receives web measurement events through Google Tag Manager.
  • Mobile diagnostics. The mobile app sends crash reports, app performance metrics, diagnostics, and device and app details to Firebase Crashlytics and its Firebase Sessions dependency so we can find and fix faults.
  • Attribution data. AppsFlyer receives campaign parameters, ad click identifiers, app activity, and conversion events for attribution. On mobile, AppsFlyer receives the device advertising identifier only if you allow it in the iOS App Tracking Transparency prompt or Android advertising-ID settings.
  • First-party measurement data. We store a first-party journey ID and first-touch campaign records for 90 days. We use them to reconcile campaigns and purchases. After you sign in, analytics events are linked to your account by user ID and email so we can measure activation and purchases.

2. How we use information

  • Authenticate your account and keep your session secure
  • Sync study progress across your devices
  • Manage purchases and subscription access
  • Improve features and fix faults
  • Measure which advertising campaigns bring users to the Service, so we can spend our advertising budget effectively
  • Send essential account messages, such as password resets

We do not sell your personal data, and we do not use it to show you third-party advertising.

3. Data sharing

We do not sell or trade your personal data. We share only the data each provider needs to run its service:

  • Supabase, for authentication and data sync
  • RevenueCat, Apple, and Google, for payments
  • PostHog, for product analytics and session recordings
  • AppsFlyer, for advertising attribution and measurement
  • Google Analytics / Google Tag Manager, for web analytics
  • Firebase Crashlytics, for crash reporting
  • Our email provider, for essential account email

These providers process data on our behalf under their own privacy and data-processing terms.

Your choices.On iOS, you control advertising-identifier collection through the App Tracking Transparency prompt. You can change it in Settings > Privacy & Security > Tracking. On Android, you can reset or delete your advertising ID in system settings. You can clear browser cookies and local storage in your browser settings. You can also use Delete Account to remove your sign-in account and synced progress.

4. Cookies and local storage

We use first-party cookies and local storage to keep you signed in, save settings and progress, and to measure usage and attribution (journey ID and first-touch campaign records, kept for 90 days). You can clear them in your browser settings.

5. Data retention

We keep account and progress data while your account remains active. Newsletter data stays until you unsubscribe or ask us to delete it. First-touch and journey records on your device or browser expire after 90 days. Pseudonymous analytics, attribution, and crash reports already sent to a provider can remain for that provider's configured retention period.

The Delete Account feature removes your Supabase sign-in account and synced progress. It does not cancel a subscription or automatically delete newsletter, purchase, analytics, attribution, or diagnostic records. Contact us to request deletion of other data where applicable. Service providers can retain records under their own legal and service rules.

6. Security

We use reasonable technical and organisational controls to protect your data. No internet or storage system can guarantee absolute security.

7. Children

The Service is intended for adults and is not directed to people under 18. Contact us if you believe a child has provided personal information.

8. Your rights

Your location may give you rights to access, correct, delete, or object to processing of your personal data. Email [email protected] to make a request.

9. Provider privacy policies

10. Policy changes

We may update this policy. We will change the date above when we do. We will provide an in-app notice or email for material changes.

11. Contact

Contact Plus 44 Pty Ltd at [email protected].