Privacy policy

Information you give us. When you create an account we collect your email address and a password (your password is stored only in securely hashed form by our authentication provider, Supabase). As you use the Service we store your quiz answers, scores, mistakes, and subscription status so your progress works across devices.

Payment information. Payments are handled entirely by Stripe. Your card number never touches our servers; we only receive your subscription status and a customer reference.

Automatic technical information. Like most websites, our hosting infrastructure logs technical data such as IP address, browser and device characteristics, and pages visited. This is used to keep the Service secure and running, not to identify you personally.

• To provide the Service: accounts, saved progress, and the mistakes test.
• To process subscriptions and send billing receipts.
• To send service emails such as account confirmation and important announcements.
• To improve the question bank and study materials using aggregated, anonymised answer data.
• To enforce our terms and comply with legal obligations.

We do not sell, rent, or trade your personal information. We share it only with the service providers that run KiwiTest:

• Supabase — database and authentication (stores your account and progress).
• Vercel — website hosting.
• Stripe — payment processing and billing.

We may also disclose information where legally required (for example, a court order), or in connection with a business sale or merger, in which case this policy would continue to apply to your data.

We use Google Analytics to understand how the site is used — pages visited, general location, and device type — so we can improve it. This data is aggregated and does not identify you personally. We do not use advertising networks or social media pixels.

We use the cookies needed to run the Service: authentication session cookies set by Supabase so you stay logged in, and Google Analytics cookies that measure site usage in aggregate. We also use your browser’s local storage to remember your dark mode preference and, for visitors without an account, quiz progress on that device. We do not use advertising or cross-site tracking cookies. You can block analytics cookies in your browser settings without affecting how the Service works.

We keep your personal information for as long as your account is active. If you delete your account, or ask us to, we delete your personal information, except where a longer retention period is required by law (such as tax and accounting records for subscriptions). Residual copies in backups are purged on a rolling schedule.

We use appropriate technical and organisational measures: encrypted connections (HTTPS), hashed passwords, row-level security on the database, and payment handling delegated to Stripe. No internet service can guarantee 100% security, so transmission of information is at your own risk — please use a secure device and a strong, unique password.

Under the New Zealand Privacy Act 2020 you have the right to ask for a copy of the personal information we hold about you and to ask us to correct it. Email hello@mmios.dev and we will respond within 20 working days. You can also ask us to delete your account and data at any time.

If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz. If you are visiting from the European Economic Area or the United Kingdom, you may have additional rights under the GDPR, including access, rectification, erasure, and portability — the same email address handles those requests.

The Service is intended for people aged 16 and over. We do not knowingly collect data from children. If you believe a child has created an account, contact us at hello@mmios.dev and we will deactivate it and delete the data.

We may update this policy from time to time to stay compliant with relevant laws. The updated version applies as soon as it is published on this page, with a revised date at the top. For material changes we will post a prominent notice or email account holders.

Email hello@mmios.dev or use the contact page. KiwiTest, New Zealand.