Privacy policy

This policy explains what we collect, why, and your choices. We aim to follow Alberta’s Personal Information Protection Act (PIPA) and Canada’s PIPEDA.

What we collect

  • Account: email address, an optional first name, password (stored as a secure hash by our authentication provider) and sign-in times. Our authentication provider also records the network (IP) address and device of each sign-in, for security.
  • Signing in with Google: if you choose “Continue with Google”, Google shares your email address, your name and a link to your Google profile picture with us. Our sign-in provider (Supabase) keeps these with your account until you delete it. We use only your email and first name, and we never show your picture. Google will know you signed in to Class 7 Practice; we never see your Google password.
  • Your agreement: which version of the Terms of Service and this Privacy Policy you agreed to, when, and whether you agreed on the sign-up form or after signing in with Google. When you buy Full Access, the Terms version you confirmed and when. We don’t store your IP address for this.
  • Study data: the questions you answer, your answers, timing, mistakes, bookmarks, mock exam results and display preferences.
  • Full Access: if you buy it, a record of the purchase (amount, currency, date, when your 12 months of access end, Stripe identifiers, refund or dispute status). We never receive or store card numbers or security codes — Stripe processes payments. If you use an access code: which code it was, the name we gave it (for example the school or partner it was made for), when you used it and when that access ends. If we give you Full Access ourselves, a record of that.
  • Support and reports: messages you send through the support form, the group licence request form (with your organization’s name and type and the number of learners) or “Report a problem”, the name and email you give, the page you were on and your browser type. A copy is emailed to us so we can reply.
  • Notices to us: when you create an account, buy Full Access or get a refund, use an access code, are given Full Access, or unsubscribe, our system keeps a short note for us with your email address (for a purchase, also the amount and receipt number), and most of these notes are also emailed to our inbox.
  • Technical: limited server logs (e.g. IP address, request time) kept by our hosting providers for security and troubleshooting, and counters that limit how often something can be tried. Most are kept under your account; for the support form, under a one-way scrambled code of your network address and of the email address you typed, not the addresses themselves.
  • Where you came from: when you open class7.ca, we add one to a daily count of where visits come from: the name of a tagged link or QR code (for example on a partner’s website, a flyer or a sticker), or otherwise the name of the website or app that linked to us (for example Google, Instagram or Facebook), or “direct” if there isn’t one. We keep only the site’s name, not the page you came from or what you searched for, and the count says nothing about who you are. Your browser remembers that name for up to 60 days (in local storage, not a cookie), and if you create an account in that time we note it with your account, so we can see which partners and websites bring learners to us. We don’t record your location or IP address for this. The note is part of your account and is deleted with it.
  • Free test before signing up: your browser keeps your progress in the free practice test on your device. If you then create an account, we note with it how many of those questions you had answered (a number from 0 to 20, nothing else), so we can see whether the free test helps and give you the bonus questions first. It is part of your account and is deleted with it.
  • Emails and unsubscribing: besides the emails you ask for (confirming your account, resetting your password, Full Access after a purchase, grant or access code), we may sometimes email you about your studies or the site. Every such email has an unsubscribe link. If you use it, we put your email address on a do-not-email list with the date, so we never send you those emails again. You can undo it from the same link.

We do not use analytics, advertising or third-party tracking cookies. We only use cookies needed to keep you signed in. Your browser also keeps a few settings in its own storage on your device, such as dark mode and whether you’ve seen a tip.

Why we use it

To provide your account and practice features, sync progress across devices, process and verify purchases, prevent abuse, answer support requests, send the emails described above (such as one reminder when you still have bonus questions waiting), and see which partners and websites bring learners to us and whether the free test helps. We do not sell personal information.

Service providers

Supabase (database and sign-in; stored in Canada, ca-central-1). Vercel (hosting; its servers for this site are in the United States). Stripe (payments; may process data in the United States and other countries). Resend (sends our emails: sign-up, password-reset and Full Access emails, the reminder about bonus questions waiting, and the emails we receive about new accounts, purchases, refunds, access codes, support messages, question reports and unsubscribes; United States). Google (optional sign-in, and our own email inbox; United States). GitHub (stores our weekly encrypted database backups; United States). These providers act on our behalf under their own security and privacy commitments. Questions about how they handle your information: Vasyl Omelchuk, hello@class7.ca.

Retention and deletion

We keep your data while your account exists. You can delete your account at any time in Account → Your data. This permanently removes your account, study progress, bookmarks, preferences and the record of what you agreed to. Some records are kept after deletion: purchase records (without your name or email) for accounting and tax, support messages and question reports you sent us (and the email copies we received) so we can finish handling them, the copies of our notices about you that were emailed to our inbox, Stripe’s own payment records, and, if you unsubscribed, your email address on our do-not-email list (so we keep honouring it). Our database is backed up once a week. Each backup is encrypted, kept for up to 90 days and then deleted, so information you delete can stay in an older backup for up to 90 days. You can ask us to delete support messages by contacting hello@class7.ca.

Your rights

You can access and correct your information in the app, or ask us for a copy or correction by contacting hello@class7.ca. Our privacy contact is Vasyl Omelchuk, hello@class7.ca. If you have concerns, you may contact the Office of the Information and Privacy Commissioner of Alberta.

Children

Learners can be 14 or older. If you are under 18, please use this service with a parent or guardian’s permission.

Version 2026-11-06 · Last updated November 6, 2026.