Privacy Policy

Last updated: 13 June 2026

Cydonia Technologies ("we", "our", "us") owns and operates the easyNPPE web application ("App", "Service"). We use data collected via this App to provide, operate, protect, and improve our Service. By using our App, you acknowledge that your personal information will be collected, used, disclosed, retained, and protected in accordance with this Privacy Policy.

Cydonia Technologies is registered in the United Kingdom and is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. As our App serves users in Canada, we are also committed to complying with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25. The easyNPPE App is designed for use by NPPE candidates across Canada.

Privacy Officer

The person responsible for the protection of personal information at Cydonia Technologies is:

Mintautas Jackunas
Email: hello@easynppe.ca

You may contact the Privacy Officer if you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your personal information is handled.

Personal Information We Collect

We collect only the personal information reasonably necessary to provide, operate, protect, and improve the App.

Information you provide to us

We may collect the following information when you create an account, use the App, make a purchase, contact us, or interact with App features:

• Email address
• Name, if provided
• Province or territory, if provided
• Engineering or geoscience discipline, if provided
• Account login and authentication information
• Customer support messages and contact-form submissions
• Information you choose to submit in the App, including messages sent to Fleming, our AI tutor

Your email address is required for authentication, account access, service communications, support, and account-related notices.

Other information, such as your name, province, and discipline, may be optional unless stated otherwise at the time of collection.

App usage and study information

When you use the App, we may collect information about your activity and progress, including:

• Quiz attempts
• Quiz results and scores
• Study-guide progress
• Learning Mode activity
• Timed-exam activity
• Achievement badges and milestones
• Glossary, question, and study-topic interactions
• App feature usage
• Technical logs and diagnostic information

This information helps us provide the App, show your progress, support your account, improve the Service, and verify eligibility for the "pass or refund" guarantee.

Quiz performance and study-progress data may be accessible across our different platforms, including our web app, so that you can retrieve and view your results.

Payment and transaction information

Payments are processed by Stripe or another third-party payment provider.

We do not directly collect or store your full credit card or debit card number. Payment information you provide at checkout is processed by Stripe or the relevant payment provider in accordance with that provider's terms and privacy policy.

We may receive and store limited payment-related information, such as:

• Name
• Email address
• Billing details
• Package purchased
• Transaction amount
• Currency
• Payment status
• Stripe customer or transaction identifiers
• Receipts
• Refunds
• Disputes and chargebacks
• Tax information
• Limited card details, such as card brand, expiry month/year, and last four digits, where provided by the payment provider

We use this information to process purchases, provide access to the App, maintain records, prevent fraud, handle support requests, process refunds, and comply with legal, tax, accounting, and payment-network obligations.

Technical and device information

When you use the App, we and our service providers may collect technical information, such as:

• IP address
• Browser type
• Device type
• Operating system
• Approximate location inferred from IP address
• Log data
• Error reports
• Security and diagnostic information
• Pages or features accessed
• Dates and times of access

We use this information to operate, secure, troubleshoot, monitor, and improve the App.

How We Use Personal Information

We use personal information for the following purposes:

• To create, authenticate, and manage user accounts
• To provide access to purchased packages
• To operate and deliver the App
• To display quiz results, study progress, milestones, and other App activity
• To provide customer support
• To communicate with users about account, service, support, security, and App-related matters
• To process payments, refunds, disputes, and chargebacks
• To prevent fraud, abuse, scraping, account sharing, unauthorized access, and misuse of the App
• To monitor App usage, performance, security, and reliability
• To detect, investigate, and prevent technical issues
• To improve App content, features, usability, and user experience
• To validate eligibility for the "pass or refund" guarantee
• To operate Fleming, our AI tutor, where available
• To comply with legal, regulatory, tax, accounting, security, and contractual obligations
• For any other purpose stated at the time of collection

We do not sell your personal information.

AI Tutor: Fleming

Our Ultimate AI package includes an automated study assistant known as "Fleming".

Fleming is powered by a third-party large language model, currently provided by OpenAI, and is guided by curated NPPE study materials.

To generate a response, the following information may be sent to the AI provider for processing:

• The content of your chat messages
• Limited in-app context about what you are viewing, such as the question, study guide topic, glossary term, or related study content on your screen
• Technical information necessary to process and return the response

We do not send your account details, email address, full name, or payment information to the AI provider as part of Fleming prompts, unless you choose to include that information in your own chat message.

We do not use users' personal information, identifiable account data, payment information, or chat messages to train our own AI models. Under our current API arrangement with the AI provider, content submitted through Fleming is not used to train or improve the provider's models unless we expressly opt in to such use.

We may use aggregated, anonymized, or de-identified usage information to monitor, improve, and troubleshoot the App, provided that this information does not identify individual users.

Fleming messages and related in-app context may be processed outside Canada, including in the United States.

The AI provider may retain API data for a limited period for purposes such as abuse monitoring, security, and service operation, according to its applicable policies and our arrangement with the provider.

You are responsible for the content you choose to submit to Fleming. You should not enter personal, confidential, sensitive, privileged, regulated, or third-party information into the chat.

Fleming's responses may be inaccurate, incomplete, out of date, misleading, or inappropriate for your circumstances. Fleming does not provide legal, professional, regulatory, engineering, geoscience, or other professional advice. You should verify important information against official and authoritative sources.

Please also review our Terms of Service for additional terms that apply to Fleming.

Legal Bases for Processing

Where UK GDPR or similar laws apply, we rely on one or more of the following legal bases to process personal information:

• Performance of a contract, where processing is necessary to provide the App, manage your account, process your purchase, or deliver paid access
• Consent, where you have given consent for a specific purpose
• Legitimate interests, such as operating, securing, improving, and protecting the App, preventing fraud and misuse, providing support, and maintaining business records
• Legal obligation, where processing is necessary to comply with applicable legal, tax, accounting, regulatory, or security obligations

Where Canadian privacy laws apply, we collect, use, and disclose personal information for purposes that a reasonable person would consider appropriate in the circumstances, with consent where required by applicable law.

Service Providers and Data Transfers

We rely on third-party service providers to operate, secure, deliver, and improve the App.

These providers may process personal information on our behalf or as independent service providers, depending on the service and applicable terms.

Our service providers may include:

• Google Firebase, for authentication, database storage, and related infrastructure
• Vercel, for hosting, serverless infrastructure, and App delivery
• Stripe, for payment processing, transaction handling, fraud prevention, refunds, disputes, and chargebacks
• Resend, for transactional and account email delivery
• OpenAI, for powering Fleming, our AI tutor
• Analytics, monitoring, security, logging, and error-reporting providers used to operate and protect the App

Each provider receives only the information reasonably necessary to perform its function.

Some of our service providers are based in, or process information in, countries outside Canada, including the United States and the United Kingdom. Your personal information may therefore be transferred to, stored in, or accessed from locations outside your province, territory, or country of residence.

When personal information is processed outside your jurisdiction, it may be subject to the laws of that jurisdiction and may be accessible to courts, law enforcement, regulators, or government authorities where legally required.

We use contractual, technical, organizational, and administrative measures intended to protect personal information handled by our service providers.

Quebec Users

If you are located in Quebec, your personal information may be communicated outside Quebec, including to service providers located in Canada, the United States, the United Kingdom, or other jurisdictions.

Before communicating personal information outside Quebec, we take steps intended to assess and address privacy risks associated with the transfer, including the nature of the information, the purposes of processing, the safeguards available, and the legal framework applicable in the destination jurisdiction.

You may contact our Privacy Officer if you have questions about the communication of your personal information outside Quebec.

Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods may depend on the type of information and the reason it was collected.

For example:

• Account information is generally retained while your account remains active and for a reasonable period afterward.
• Quiz results, study progress, milestones, and App activity may be retained as long as needed to provide the Service, allow retrieval of results, support account functionality, and validate the "pass or refund" guarantee.
• Payment and transaction records may be retained as needed for tax, accounting, fraud prevention, refund, chargeback, legal, and payment-network purposes.
• Support communications may be retained as needed to respond to requests, maintain records, and improve support.
• Technical logs may be retained for a limited period for security, troubleshooting, fraud prevention, and App reliability.

When personal information is no longer required, we will delete, anonymize, or securely retain it in accordance with applicable law and our business needs.

Security

We use reasonable technical, organizational, and administrative safeguards designed to protect personal information against unauthorized access, loss, misuse, disclosure, alteration, or destruction.

These safeguards may include access controls, authentication, encryption in transit where appropriate, secure service providers, monitoring, logging, and other security measures.

However, no method of transmission over the internet or electronic storage is completely secure. While we work to protect your personal information, we cannot guarantee absolute security.

You are responsible for keeping your login credentials confidential and for notifying us promptly if you believe your account has been accessed without authorization.

Cookies and Similar Technologies

The App and our service providers may use cookies, local storage, or similar technologies to operate the App, authenticate users, remember preferences, maintain sessions, improve performance, detect abuse, and understand App usage.

Some cookies or similar technologies may be necessary for the App to function properly. Others may help us improve the Service or understand how users interact with the App.

You may be able to manage cookies through your browser settings, but disabling certain technologies may affect App functionality.

User Communications

We may use your email address to send you:

• Account and authentication messages
• Purchase confirmations and receipts
• Service updates
• Security notices
• Support responses
• Important changes to the App, Terms, or Privacy Policy
• Messages related to your package, access, progress, or refund guarantee

We may also send optional product, educational, or promotional communications where permitted by law. You may unsubscribe from promotional communications where required or where an unsubscribe option is provided. You may still receive transactional, account, security, and service-related messages.

Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, including the right to:

• Access personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent, where processing is based on consent and withdrawal is legally available
• Request deletion of certain personal information
• Ask questions about our privacy practices
• Challenge our compliance with applicable privacy laws
• Request information about how your personal information is used, disclosed, retained, or transferred
• Request data portability where required by applicable law

These rights may be subject to legal limits, verification requirements, and exceptions.

To make a privacy request, contact our Privacy Officer at hello@easynppe.ca.

We may need to verify your identity before responding to a request. We will respond within the time required by applicable law.

Children's Privacy

The App is intended for NPPE candidates and is not directed to children.

You must not use the App if you are under the age of majority in your province or territory of residence, unless you have permission from a parent or legal guardian and such use is permitted by applicable law.

We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us so that we can review and take appropriate action.

Accuracy of Personal Information

We rely on you to provide accurate and up-to-date information where necessary to use the App.

You may contact us to request correction of inaccurate or incomplete personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will take reasonable steps to notify you, such as by posting the updated Privacy Policy in the App or providing notice through the App or by email.

The updated Privacy Policy will apply from the date stated in the updated version, except where applicable law requires a different approach.

Contact Us

If you have questions, concerns, or requests about this Privacy Policy or how your personal information is handled, please contact:

Privacy Officer: Mintautas Jackunas
Email: hello@easynppe.ca

You may also contact us by mail at Cydonia Technologies, 124 City Road, London, EC1V 2NX, United Kingdom.