Privacy Policy

1. Who we are

Cambraid ("we", "us") is an online Cambridge AS Level preparation platform operated by NuBLime Empire / BitNest Studio for students in New Zealand and Australia. You can reach us at privacy@cambraid.com for any privacy matter.

2. What we collect

Account data: your name, email address and a hashed password (we never store your password in readable form).

Learning data: the topics you open, the questions you attempt, your answers, and derived progress statistics (accuracy, streaks, topic mastery).

Payment data: handled by Stripe. We store only your Stripe customer and subscription identifiers — never card numbers.

Technical data: your IP address (recorded with your consent and for security), and server logs.

3. Why we collect it

To provide the service: accounts, practice sessions, progress tracking and weekly study summaries.

To secure the platform: rate limiting, account lockout and audit logging of administrative actions.

To comply with law: keeping records of your consent and processing deletion requests.

4. Consent

You tick a consent box before an account is created. We record the policy version you accepted and the time of acceptance. When this policy is updated in a way that matters, we ask you to re-consent at your next login.

5. Who we share it with

Stripe (payments), our email provider (transactional email such as your weekly summary), our hosting and database providers, and nobody else. We do not sell personal information. Processors are bound to handle data on our instructions.

6. How long we keep it

Learning and account data are kept while your account is active. Server logs and audit records are kept for security purposes. Consent records are retained as evidence of the permission you gave us.

7. Your rights

Under the New Zealand Privacy Act 2020 and the Australian Privacy Act 1988 you may ask for: a copy of the personal information we hold about you; correction of that information; and deletion of your information.

Deletion is self-service: in your account you can request "Delete my data", which removes your practice history, progress and personal details and anonymises your account row. The same deletion is available through our support address.

You may also unsubscribe from the weekly summary at any time (every email carries an unsubscribe link, and your preference is stored in your account).

8. Students under 16

If you are under 16, ask a parent or guardian to review this policy with you before creating an account, and contact us — we will help exercise your rights.

9. Data breach notification

If a breach is likely to cause serious harm, we will notify affected users and the Office of the New Zealand Privacy Commissioner (and, where the Australian NDB scheme applies, the OAIC) as required by law.

10. Changes to this policy

We will update this page when the policy changes and bump the consent version shown at sign-up. Material changes trigger a re-consent prompt at next login.