Privacy Policy

Updated June 2026

1. Who we are

Thai Citizenship Master Prep ("the Service") is operated by [OWNER TO COMPLETE: legal entity, address, jurisdiction]. We are the data controller for personal data processed via the Service.

2. What we collect

  • Account data: email, password hash (only if you sign up).
  • Purchase data: Stripe customer id, payment status, amount, currency. Card details are processed by Stripe — we never see or store them.
  • Usage data: quiz progress and readiness score are stored locally in your browser. We do not upload this unless you sign in.
  • Technical data: IP address, browser user agent (used to deliver the Service and prevent abuse).

3. Why we use it (legal bases under GDPR)

  • Contract: to deliver the Premium product you purchased.
  • Legitimate interest: to keep the Service secure and improve it.
  • Legal obligation: tax and accounting records.
  • Consent: any non-essential cookies (see Cookie Policy).

4. Who we share with

  • Stripe — payment processing.
  • Lovable Cloud / Supabase — hosting and database.
  • Email delivery provider — sending receipts.

We do not sell personal data.

5. International transfers

Some processors are located outside Thailand / the EEA. Where required we rely on Standard Contractual Clauses or equivalent safeguards.

6. Retention

Account and purchase records are retained for as long as your account exists, plus the period required by tax law (typically 7 years for invoices). Local quiz progress lives only in your browser until you clear it.

7. Your rights

You have the right to access, correct, delete, restrict, port, or object to processing of your personal data, and to lodge a complaint with a supervisory authority. To exercise these rights, contact us.

8. Security

We use TLS in transit, encrypted storage at rest, row-level security on databases, and follow least-privilege access. No system is 100% secure.

9. Children

The Service is not directed at children under 16. We do not knowingly collect data from them.

10. Changes

We will post any update here and revise the "Updated" date.

11. Contact

Data protection contact: [OWNER TO COMPLETE: privacy email] · contact form.