Examwise Privacy Policy
Last updated: November 14, 2026
Version: 1.0
The short version
- We collect only what we need to run Examwise: your email, your purchase, and your answers and progress. Our waitlist also asks two optional questions.
- We do not sell your information. We do not use advertising trackers.
- We do not ask about your immigration status, your country of birth or your citizenship application. We never share your information with IRCC or any other government body, unless the law requires it.
- We use service companies to run the website. Most of them are in the United States. Our database is stored in Canada.
- We send marketing emails only if you tick a box to ask for them. You can unsubscribe at any time.
- You can ask to see, correct or delete your information. We answer within 30 days, for free.
- Questions? Contact our Privacy Officer at privacy@examwise.ca.
1. Who we are
1.1 Examwise is the business name used by Sadhvi Sharma, in Calgary, Alberta. In this policy, "we" and "us" mean that business.
1.2 Our Privacy Officer is responsible for how we protect your personal information. The Privacy Officer answers questions about this policy, including questions about our service companies outside Canada.
- Privacy Officer: the owner, Sadhvi Sharma
- Email: privacy@examwise.ca
- Mail: Unit 195, 3015 5 Ave NE, Calgary, Alberta T2A 6T8
- Phone: 778-883-7256
1.3 Alberta's Personal Information Protection Act and Canada's Personal Information Protection and Electronic Documents Act apply to how we handle your personal information.
2. What we collect and why
We collect information only for the reasons below. We do not use it for other reasons without asking you first, unless the law requires or allows it.
2.1 When you join a waitlist
| What we collect | Why |
|---|---|
| Your email address | To email you about the product you chose, as you asked |
| The product you chose (citizenship test or CELPIP) | To send you the right emails |
| When you plan to take your test or exam (optional) | To plan our launch and content |
| Your province or territory (optional) | To plan our launch and content |
| A record of your consent: the words you agreed to, the date and time, and the form you used | To prove that you asked for our emails, as anti-spam law requires |
2.2 When you create an account and sign in
| What we collect | Why |
|---|---|
| Your email address | To create your account, send you sign-in links and codes, and send receipts |
| Your sign-in history and your signed-in devices (when you signed in, the IP address used, and your browser and device type) and a sign-in cookie | To keep you signed in, to keep your account secure, and to limit your account to 2 signed-in devices at a time (Terms of Use and Sale, section 7.3). Your account page lists your devices, without IP addresses, and you can sign them out there. |
| A record of when you agreed to our terms, which version, and the IP address used | To show what we agreed |
2.3 When you buy
| What we collect | Why |
|---|---|
| Your name, email address and the province or territory where you live | To make the sale, send your receipt and copy of the contract, and check that we can sell to you (for example, we do not sell in Québec yet) |
| What you bought, the price, the date, and your access start and end dates | To give you access and keep business records that tax law requires |
| Payment status, the type and last 4 digits of your card, and the billing country and postal code if Stripe gives them to us | To confirm your payment and handle refunds. Stripe handles your card. We never see or store your full card number. |
| A record of when you agreed to our terms at checkout, which version, and the IP address used | To show what we agreed, for example if a payment is disputed |
| Refund requests and card disputes | To handle them |
2.4 When you use Citizenship Test Practice
| What we collect | Why |
|---|---|
| Your answers, mock test scores, flashcard progress and the time you answered | To show your progress by chapter, bring back questions you got wrong, and let you continue on any device |
| How many questions you have answered | To check whether you can get a 7-day refund (see our Refund and Cancellation Policy) |
| How many questions and mock tests you open each hour and each day | To stop automated copying of our questions. We keep only the counts, under a coded key instead of your email, and delete them after 2 days. |
We also look at combined answer numbers, such as how many people get a question wrong, to find questions that may be confusing or wrong. We do this without looking at any one person.
We do not use your answers for advertising. The only decision we make from them is whether you can get a 7-day refund, and we use only the number of questions you answered for that.
2.5 When you contact us
If you email, call or write to us, we keep your message and our reply, so we can help you and keep a record.
2.6 When you visit the website
Our hosting company keeps a short record of each visit to the website (a "request log"). It includes your IP address, your browser and device type, the page you asked for and the time. We use it to run the website, fix problems and protect the website from attacks.
2.7 What we do not collect
We do not ask for your immigration status, your country of birth, your citizenship application number or your street address. Please do not send us these details.
Buying citizenship test practice could suggest that you are applying for Canadian citizenship. For this reason, we treat our list of customers as sensitive information. We never share it with advertisers. We share it only with the service companies in section 4, and in the cases in sections 3.4 and 3.5.
3. Your consent
3.1 When you create an account or buy, you agree to the uses that we need to give you the product. These are the uses in sections 2.2 to 2.6.
3.2 For extra uses that are not needed for the product, such as marketing emails, we ask you separately. You can say no and still buy.
3.3 You can withdraw your consent at any time (see section 10). If you withdraw consent to a use that we need to give you the product, you will not be able to keep using the product.
3.4 We may also use or share information without your consent where the law requires or allows it. For example, we keep records that tax law requires, and we respond to a valid court order.
3.5 If we sell the business. If we sell or transfer the Examwise business, your information may go to the new owner. The new owner must use it only as this policy says. We will tell you before this happens.
4. Service companies we use, and where they are
We use the companies below to run Examwise. We give each one only the information it needs. Each one may use the information only to provide its service to us, except where the table says otherwise.
| Company | What it does for us | What information it handles | Where |
|---|---|---|---|
| Supabase (Supabase Pte. Ltd.) | Our database and sign-in system | Account, sign-in, purchase records, answers and progress, waitlist | Our database is stored in Canada (Supabase's Canada Central region). Supabase is a company based outside Canada. Its staff and systems may handle data from other countries, including the United States. |
| Vercel Inc. | Hosts our website and runs our server code | Everything you send to our website passes through Vercel's servers. Vercel also keeps request logs: IP address, browser and device type, pages requested. | United States, and other countries where Vercel's network delivers web pages |
| Stripe | Takes payments and helps prevent fraud | Your name, email address, card and billing details, and payment details | United States. Stripe also uses some information for its own purposes. Stripe says these include preventing fraud, meeting anti-money-laundering laws, improving its services and training its AI models. Stripe's privacy policy explains this. |
| Resend (Plus Five Five, Inc.) | Sends our emails: sign-in links and codes, receipts, and marketing emails if you agreed to get them | Your email address and the content of each email | United States |
| Namecheap, Inc. (email forwarding) and Google LLC (Gmail) | Stores the emails you send us and our replies | Your messages and email address | United States |
5. Information processed outside Canada
5.1 Most of our service companies are in the United States, or have staff and systems there. Because of this, your information may be stored or processed in the United States and in other countries.
5.2 When your information is in another country, the courts, law enforcement and national security authorities of that country may be able to access it under that country's laws.
5.3 We use agreements with our service companies that require them to protect your information. We are still responsible for your information when a service company handles it for us.
5.4 To get a copy of our written policies about service companies outside Canada, or to ask questions about them, contact our Privacy Officer (section 1.2).
6. How long we keep information
We keep information only as long as we need it. Then we delete it, or change it so that it no longer identifies you.
| Information | How long we keep it |
|---|---|
| Waitlist entry | Until you unsubscribe, or 12 months after that product opens, whichever comes first |
| Record of your waitlist consent and unsubscribe | 3 years after you leave the list. We keep only your email, the words you agreed to and the dates. We use it only to prove you asked for our emails, and to make sure we do not email you again. |
| Account and practice data (answers, scores, progress) | While you have access, and then 12 months after your last access ends, in case you buy again. If you create an account but never buy, 12 months after you last sign in. You can delete it sooner (section 9). |
| Purchase records, including your name, email, province, what you bought, the price, your agreement to our terms, refund requests, and, if you delete your account, how many questions you had answered | 6 years after the end of the year you bought, because tax law requires business records |
| Emails and messages you send us | 2 years after our last message with you |
| Request logs at our hosting company | About 1 day |
| Backups of our database | Deleted information may stay in our database backups for up to 7 days |
Stripe and Google keep their own records under their own policies.
7. How we protect your information
7.1 We use reasonable safeguards to protect your information, including:
- encryption (HTTPS) when information travels between your device and our website;
- access controls in our database, so each user can reach only their own information;
- limits that protect accounts and our content: up to 2 signed-in devices per account, and limits on how fast questions can be opened;
- two-step sign-in on our accounts with our service companies;
- keeping the keys to our database on our servers only; and
- letting only the owner and one person who helps run Examwise see personal information, and only when needed.
7.2 No system is perfectly secure. If you think your account is at risk, contact us right away.
8. If there is a privacy breach
8.1 If personal information under our control is lost, or someone gets access to it without permission, we act quickly to limit the harm.
8.2 Where the law requires it, for example where a breach creates a real risk of significant harm to you, we will:
- tell you by email, at the address on your account or waitlist entry; and
- report the breach to the privacy commissioner that the law requires.
8.3 We keep a record of every breach, even small ones.
9. Your rights: see, correct or delete your information
9.1 See your information. You can ask for a copy of the personal information we have about you, how we use it and who we share it with.
9.2 Correct it. If something is wrong, you can ask us to correct it.
9.3 Delete it. You can delete your account at any time in your account settings or by asking us. When you delete your account, we delete your answers and progress, and your access ends. We keep your purchase records for the time in section 6, because tax law requires it. They include how many questions you had answered when you deleted your account, so we can still answer a refund request. We also keep the record of your marketing consent and unsubscribe for the time in section 6, and we stop sending you marketing emails.
9.4 How to ask. Email privacy@examwise.ca, or write to us (section 1.2). To protect you, we may ask you to confirm the request from the email address on your account.
9.5 Our answer. We answer within 30 days. If we need more time, we tell you within those 30 days. We explain why, tell you that you can complain to a privacy commissioner (section 15), and answer within 30 more days. This is free.
9.6 If we cannot give you some information, for example because it is about another person, we tell you why and how you can complain.
10. Withdrawing your consent
10.1 You can withdraw your consent at any time by contacting our Privacy Officer.
10.2 For marketing emails, you can also click "unsubscribe" in any marketing email (section 11).
10.3 If you withdraw consent to something we need to give you the product, such as your account, we will tell you what this means first. We will still keep information that the law requires us to keep.
11. Emails we send
11.1 Emails about your account and purchase. We send sign-in links and codes, receipts, and important messages about your access, our Terms of Use and Sale or this policy. These are part of the service. They are not marketing.
11.2 Marketing emails. We send marketing emails, such as launch news and study tips, only if you tick a box to ask for them. The box is never ticked for you.
11.3 Unsubscribe. Every marketing email has an unsubscribe link. You can also email hello@examwise.ca. We stop within 10 business days, usually much sooner.
11.4 We send our emails through Resend (section 4). We do not track whether you open our emails or click their links.
12. Cookies, local storage and analytics
12.1 Cookies we need. When you sign in, we use a cookie to keep you signed in. The website cannot work without it, so you cannot turn it off.
12.2 Local storage. The website saves your light or dark display setting in your browser. It also saves your unfinished mock test in your browser, so a dropped connection does not lose your answers. This information stays on your device. You can clear it in your browser settings. Your practice progress and finished mock tests are saved in your account on our servers (section 2.4), not in your browser.
12.3 Payments. When you pay, you are on Stripe's checkout page. Stripe's own privacy and cookie rules apply there.
12.4 Analytics. We do not use analytics tools right now.
12.5 No advertising tracking. We do not use advertising cookies, tracking pixels or tools that follow you across other websites. If we ever plan to add them, we will update this policy first and ask for your consent where the law requires.
13. Children
13.1 Examwise is for adults. You must be 18 or older to create an account or buy.
13.2 We do not knowingly collect personal information from anyone under 18. If you think a person under 18 has given us information, contact us and we will delete it.
14. Changes to this policy
14.1 We show the date of the latest version at the top of this policy.
14.2 Before we make an important change, we email you. Important changes include using your information for a new purpose, or using a new service company in a new country. Where the law requires it, we ask for your consent again.
15. Questions and complaints
15.1 Please contact our Privacy Officer first (section 1.2). We will try to fix the problem.
15.2 You can also complain to a privacy commissioner at any time:
- Office of the Information and Privacy Commissioner of Alberta: oipc.ab.ca, phone 780-422-6860 or toll-free 1-888-878-4044
- Office of the Privacy Commissioner of Canada: priv.gc.ca
- If you live in Québec: Commission d'accès à l'information du Québec
Which office is the right one depends on where you live and what your complaint is about.