Privacy Policy
TCF Canada Exam Preparation
Last updated: October 8, 2026
SmartPrep Labs LLP ("we", "us") provides the TCF Canada application. This policy describes the information collected through the App, its purposes, recipients, storage and your choices. Contact: support@smartpreplabs.com.
Optional AI processing on iOS: before starting a new AI operation, the App asks for explicit permission in Partage pour l’IA. Choose Pas maintenant to decline or Autoriser to allow. Declining starts no AI request and consumes no rewarded ad or free-attempt reservation. Review or withdraw permission in Réglages > Partage pour l’IA. Previously saved responses and reports remain available. Existing Android versions may have different controls; contact support to exercise your privacy choices.
1. Information collected and collection methods
- Account: authentication identifier, sign-in provider, and email, display name or photo when provided through sign-in. Anonymous accounts also have an authentication identifier.
- Your learning content: recordings you create, typed responses, photos of handwritten answers you submit, transcripts, feedback, reports, scores, task references, learning progress and study preferences.
- Purchases: Store transaction and product identifiers, subscription status and entitlement information reported by Apple, Google and RevenueCat. We do not receive your full payment-card details.
- Operation and diagnostics: device and operating-system information, App version, network/IP information, crash reports, error categories, usage and security records, and advertising identifiers or interactions where permitted.
Information is collected directly when you sign in, record or enter an answer, submit a photo, request AI assistance, make a purchase, use learning features or contact support; through App/device SDKs; and from authentication and purchase providers.
2. Purposes
We use information to provide practice and mock exams, save responses and history, synchronize account information, supply the AI assistance you request, manage subscriptions and free allowances, present ads where applicable, prevent abuse, diagnose failures, provide support and meet legal or accounting obligations. Avoid putting sensitive personal information in your answers or images. We do not sell your learning content to AI providers.
3. AI recipients and data shared
| Requested feature and data | Recipients |
|---|---|
| Speech transcription: your recording and spoken content | Groq first; OpenAI as fallback if transcription cannot be completed. |
| Pronunciation assessment: your recording, task context and reference text when present | Google Cloud Vertex AI. |
| Writing/speaking evaluation: your answer or transcript and associated task instructions; feedback translation: selected report text | OpenAI. Google Cloud Vertex AI is a fallback for evaluations and mock feedback; translation uses OpenAI. |
| Handwriting recognition: the photo you submit | OpenAI first; Google Cloud Document AI as fallback. |
| Hints, recommendations and study plans: task context, relevant learning results and progress statistics | OpenAI. Google Cloud Vertex AI is a fallback for the study report. |
| Read-aloud speech: text and language/voice selection | Google Cloud Text-to-Speech. |
Requests pass through our authenticated server. A primary or fallback provider processes the data needed for the requested function; both may receive input when a fallback is necessary. We do not deliberately include account email, profile photo, advertising identifier or purchase history in AI prompts. Content you supply can itself contain personal information. Withdrawal stops future requests, including retries; it cannot undo processing already started with permission.
4. Storage, retention and deletion
Firebase Authentication stores account identity. Cloud Firestore stores account information, progress, usage/entitlement state, reports, transcripts or response text and processing records. Cloud Storage may hold account-associated recordings or images. Device storage keeps saved responses, recordings, report history, pending requests, consent preferences and cached content. Learning data is kept to provide saved history while your account remains active, or until removed through available App controls or account deletion.
Account deletion is available in the App settings. The authenticated deletion operation removes account-associated App records and applicable stored recording/image objects, then removes the authentication account; local account data and permission are also removed. You can contact support for access, correction or deletion requests. We may retain limited purchase, accounting, security or legal records where required by law or necessary to address fraud. Account deletion does not cancel a Store subscription; manage it with your Store account.
Provider retention differs from App storage. Groq states that ordinary inference input/output is not retained by default, but may be logged for reliability or abuse investigation for up to 30 days, with legal exceptions. OpenAI describes API abuse-monitoring retention of up to 30 days by default, with endpoint-specific rules and legal exceptions. Google Cloud processing and retention depend on the applicable Vertex AI, Document AI and Text-to-Speech terms and configuration. We do not promise that every processor deletes every request within 24 hours or that zero-data-retention settings apply to all requests.
5. Other services and protection
We use Google Firebase for authentication, storage and diagnostics; Google AdMob for advertising where applicable; Apple and Google for Store purchases; and RevenueCat for subscription and entitlement management. These services receive the information needed for their functions under their applicable terms.
We select and use processors under applicable confidentiality, security, purpose-limitation, retention, deletion and data-protection terms, with the same or equal protection required by this policy and applicable law. Requests use encrypted transport, server authorization and restricted infrastructure access. No system can guarantee absolute security. AI input is used to provide the requested service under the provider's API or cloud terms; this policy does not claim an independently verified organization-specific zero-retention or model-training setting.
- Groq privacy
- OpenAI privacy
- Google Cloud privacy and Firebase privacy and security
- Google and AdMob privacy
- Apple privacy
- RevenueCat privacy
6. Your choices and rights
In current iOS versions, choose Pas maintenant before AI processing or withdraw permission through Réglages > Partage pour l’IA. Manage microphone, notifications, tracking and advertising choices in device settings. Delete your account in the App or contact support for applicable access, correction, deletion, restriction, objection or portability rights. Withdrawing AI permission preserves saved learning content and does not remove Store entitlements. Support may need to verify account ownership before fulfilling a request.
7. Children, international processing and changes
The App is intended for exam preparation and is not directed to children under 13. We do not knowingly collect information from children under 13. Data may be processed outside your country, including the United States and Europe, under applicable contractual and legal safeguards. We publish policy changes here with an updated date and obtain a new in-app permission where a material change requires it.
SmartPrep Labs LLP | support@smartpreplabs.com