Privacy Policy

1. Introduction

The Practice Book ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational platform and mobile applications.

By using our Services, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access our Services.

2. Information We Collect

2.1. Account Information: When you create an account, we collect:

• Email address
• Name or display name
• Profile picture (optional)
• Authentication credentials

2.2. Learning Data: As you use our Services, we collect:

• Your responses to questions and exercises
• Scores and performance metrics
• Progress through courses and chapters
• Time spent on activities
• Engagement patterns and learning preferences

2.3. Device Information: We automatically collect:

• Device type and model
• Operating system and version
• Browser type (for web users)
• App version
• IP address and general location (country/region)

2.4. Payment Information: When you make purchases:

• Payment transactions are processed securely through Apple App Store and Google Play Store
• We do not store payment card details on our servers
• We receive transaction confirmations and subscription status from Apple and Google

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our educational Services
• Personalise your learning experience and track your progress
• Process payments and manage subscriptions
• Communicate with you about your account, updates, and support
• Analyse usage patterns to improve our content and features
• Improve our AI systems and content quality
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Payment Processors: Apple App Store and Google Play Store process payments on our behalf
• Cloud Service Providers: Google Firebase for hosting, authentication, and data storage
• Analytics Providers: To help us understand how users interact with our Services
• Legal Authorities: When required by law, court order, or to protect our rights

All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication systems
• Regular security assessments
• Access controls limiting who can view your data

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and personal data
• Data Portability: Request your data in a machine-readable format
• Withdraw Consent: Where processing is based on consent, you may withdraw it

To exercise these rights, you can delete your account through the app settings or contact us at hello@thepracticebook.org.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our Services.

Upon account deletion, we will delete or anonymise your personal data within 30 days, except where we are required to retain certain information for legal, tax, or regulatory purposes.

Anonymised or aggregated data that cannot identify you may be retained indefinitely for analytics and service improvement purposes.

8. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for authentication and core functionality
• Analytics Cookies: Help us understand how users interact with our Services
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings, but disabling essential cookies may affect the functionality of our Services.

9. Children's Privacy

Our Services are intended for users aged 13 and above. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to delete such information.

Users between 13 and 18 should have parental or guardian consent to use our Services.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our servers and service providers are located in various regions.

We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where applicable.

11. Legal Compliance

We comply with applicable data protection laws, including:

• Protection of Personal Information Act (POPIA) - South Africa
• General Data Protection Regulation (GDPR) - where applicable
• Other applicable regional data protection regulations

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: