Privacy Policy

1. Introduction

TechnologiesRehman ("we," "us," "our," or the "Company") operates the My NPPE Academia platform (https://mynppeacademia.ca) and companion mobile applications. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, take practice exams, use the AI tutor, or purchase access.

We are committed to protecting your privacy and complying with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal privacy law.

2. What Personal Information We Collect

We collect personal information in the following categories:

• Account Information: Email address, password (hashed), province of residence
• Payment Information: Stripe processes payment details; we never store credit card data
• Quiz/Exam Data: Questions answered, scores, completion timestamps, domain performance
• Usage Data: Pages visited, features used, session duration, AI tutor requests
• Device Information: Browser type, IP address, approximate location (from IP)

You control what personal information you provide. We collect only what is necessary to provide our service.

3. How We Use Your Information (PIPEDA Principle 3)

We use your personal information for the following purposes:

• Service Delivery: Creating your account, delivering quizzes and exams, AI tutor assistance
• Payment Processing: Processing subscription and one-time payments via Stripe
• Communication: Email verification, account notifications, service updates
• Analytics: Understanding usage patterns to improve the service
• Legal Compliance: Complying with applicable laws and regulations
• Security: Detecting and preventing fraud, abuse, and unauthorized access

Important: We will not use your information for purposes other than those stated above without obtaining your explicit consent first.

4. Third-Party Data Sharing (PIPEDA Principle 5)

We share your personal information with the following service providers:

All third-party providers are contractually required to protect your data with the same safeguards we use.

5. Data Security (PIPEDA Principle 7)

We implement comprehensive security measures to protect your personal information:

• HTTPS encryption for all data in transit
• Passwords hashed with industry-standard algorithms (bcrypt)
• Row-Level Security (RLS) in database—you only see your own data
• Session timeout after 15 minutes of inactivity
• Input validation and sanitization to prevent injection attacks
• Regular security audits and vulnerability assessments
• Access logs for all data modifications

Note: While we implement strong security measures, no system is 100% secure. Report security concerns to technologiesrehman@gmail.com immediately.

6. Your Privacy Rights (PIPEDA Principles 9-10)

You have the following rights under PIPEDA:

7. Data Retention (PIPEDA Principle 5)

We retain personal information for as long as necessary to provide our service:

• Account Data: Retained while account is active. Deleted 30 days after account deletion.
• Quiz/Exam Data: Retained for the life of your account to track progress. Deleted with account deletion.
• Payment Records: Retained for 7 years for tax and legal compliance (CRA requirements).
• Access Logs: Retained for 90 days for security monitoring.
• AI Tutor Conversations: NOT stored. Deleted immediately after response generation.

8. Cookies and Tracking

We use minimal cookies for:

• Session management (authentication token)
• Remember your preferences (timezone, theme)

We do NOT use tracking pixels, third-party analytics, or advertising cookies. You can disable cookies in your browser settings, but this may affect functionality.

9. Data Breaches and Notification

If we discover a security breach that compromises your personal information, we will notify you by email and post a notice on this page within 30 days, as required by PIPEDA.

To report a security incident, email: technologiesrehman@gmail.com

10. Accountability (PIPEDA Principle 1)

Privacy Officer: We have appointed a Privacy Officer responsible for PIPEDA compliance.

Contact: technologiesrehman@gmail.com

Our Privacy Officer is responsible for:

• Responding to privacy inquiries and complaints
• Ensuring staff training on PIPEDA requirements
• Conducting regular privacy impact assessments
• Maintaining documentation of data processing activities
• Investigating and addressing privacy complaints

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of any material changes by email or by posting a notice on this page. Your continued use of our service after changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact:

For complaints not resolved to your satisfaction, contact the Office of the Privacy Commissioner of Canada at 1-800-282-1376 or www.priv.gc.ca.