SPARKBIZSOLS ("we", "us", "our") operates naatipractice.com. This policy explains what personal information we collect, how we use it, and your rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Information we collect
We collect the following categories of personal information:
Account information: email address and display name when you sign up.
Payment information: order ID, plan type, amount, and currency. We do not store card numbers — payments are processed by Razorpay.
Practice data: your dialogue attempts, scores, streak, and study planner entries, stored locally in your browser and optionally in our database.
NPS responses: if you submit a satisfaction score, we store the score, your language, and optionally your email.
Usage data: page views, events, and performance metrics via Google Analytics 4 (only if you accept analytics cookies).
Email address for marketing: if you opt in via the email capture form, we add you to our mailing list on Resend.
2. How we use your information
To provide, maintain, and improve the NAATI CCL practice service.
To process your payment and activate your plan.
To send transactional emails (purchase receipts, account notices).
To send study tips and promotional emails (only if you opted in; unsubscribe any time).
To analyse aggregate usage and improve content.
To comply with legal obligations.
3. Cookies and analytics
We use cookies for authentication (session management) and, with your consent, for analytics via Google Analytics 4. You can accept or decline analytics cookies via the banner shown on your first visit. Declining analytics cookies does not affect your ability to use the service. Our in-app help & support chat stores your conversation history locally in your browser so it persists between visits; it does not set third-party cookies.
4. Third-party services
Supabase (database hosting, authentication) — data stored on servers in the US under Supabase's data processing agreement.
Razorpay (payment processing) — governed by Razorpay's privacy policy.
Resend (email delivery) — email addresses are shared only for the purpose of sending emails you requested.
Google Analytics 4 (usage analytics) — only activated with your consent.
Google (Gemini API) (AI help & support chat for paid users) — messages you send to the coach are processed by Google to generate replies, governed by Google’s privacy policy. Free users’ help chat is answered on-device and no messages are sent to third parties.
5. Data retention
Account data is retained for as long as your account is active. Practice data stored in your browser (localStorage) is controlled by you and can be cleared via browser settings. Supabase records are retained for a minimum of 2 years for fraud prevention and legal compliance. Email marketing data is deleted within 30 days of an unsubscribe request.
6. Your rights
Under the Australian Privacy Act you have the right to:
Access the personal information we hold about you.
Request correction of inaccurate information.
Request deletion of your data (subject to legal retention requirements).
We use industry-standard measures including HTTPS encryption, row-level security in our database, and hashed authentication tokens. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
8. Children's privacy
Our service is not directed to persons under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Continued use of the service after changes constitutes acceptance.