Privacy Policy

Last updated: 2 June 2026

Draft template. This document is a starting point and has not been reviewed by a lawyer. Replace the bracketed placeholders and have it reviewed before relying on it in production.

This Privacy Policy explains how [LEGAL ENTITY NAME, e.g. Virelith Pty Ltd] (ABN [ABN]) ("we", "us") handles your personal information when you use OPRA Prep. We handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

1. Information we collect

Account data — your email address and authentication details (managed via Supabase).
Usage and study data — quiz attempts, scores, flags, and review progress, so we can show your dashboard and spaced-repetition schedule.
Billing data — handled by Stripe. We store a Stripe customer reference and subscription status, but we never see or store your full card details.
Technical data — basic logs and error reports used to keep the Service running and secure.

2. How we use it

To provide and personalise the Service, process payments, respond to support requests, maintain security, and meet legal obligations. We do not sell your personal information.

3. Third-party processors

We share data only with service providers that help us run the platform:

Supabase — authentication and database hosting.
Stripe — payment processing.
[Hosting/analytics/error-monitoring providers, e.g. Vercel, Sentry].

Some providers may store or process data outside Australia. We take reasonable steps to ensure they handle it consistently with the APPs.

4. Cookies and local storage

We use cookies and browser local storage for sign-in sessions, preferences (such as theme), and to remember your study progress on your device.

5. Data retention

We keep your information while your account is active and as needed to provide the Service or comply with legal obligations. You can request deletion of your account and associated data at any time.

6. Your rights

You may request access to, or correction of, your personal information, and you may withdraw consent or close your account. Contact us using the details below.

7. Security

We take reasonable technical and organisational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Complaints and contact

To make a privacy enquiry or complaint, email [privacy@opraprep.com.au]. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Changes

We may update this Policy from time to time. The "last updated" date above reflects the latest version.