Draft for review before launch. This policy describes how the software actually handles data. The operator’s legal name and contact details still need to be filled in, and it should be checked against the NZ Privacy Act 2020.

Privacy policy

Last updated: [date to be set before launch]

This policy explains what Catalyst Campus (“we”) collects when you use catalystcampus.nz, why, and the choices you have. We follow the New Zealand Privacy Act 2020.

What we collect

  • Account details: your email address and a securely hashed password (managed by our authentication provider, Supabase).
  • Study progress: the answers you choose, which questions you got right or wrong, bookmarks/flags, review queue and similar saved progress, so you can resume on any device.
  • Subscription and payments: your subscription status, each weekly payment, its amount and any refunds. Card and bank details are entered on Stripe’s checkout and are never seen or stored by us.
  • Technical data: standard server logs (such as IP address, browser type and time of request) kept for security and troubleshooting.

Without an account, the free sample stores progress only in your own browser (local storage). It is not sent to us unless you create an account and choose to import it.

How we use it

  • To provide your account, save your progress and unlock what you’ve paid for.
  • To send account emails (confirming your address, password resets and receipts).
  • To keep the service secure and fix problems.

We don’t sell your information or use it for advertising.

Who processes it for us

  • Supabase: accounts and database hosting.
  • Stripe: payments.
  • Our web host: running the site.
  • Google Fonts: serves the website’s fonts, so it receives your IP address when pages load.

Some of these providers store data outside New Zealand. We use providers that protect data to a standard comparable to the Privacy Act.

Optional AI study buddy

If you choose to add your own Anthropic or OpenAI API key in the app, it’s stored only in your browser, and your chat messages go directly from your browser to that provider under their terms. We don’t receive the key or the messages.

Keeping and deleting data

We keep your account and progress while your account is open. You can ask us to see, correct or delete your information at any time. Payment records may be kept for as long as tax law requires.

Cookies

We use essential cookies only, to keep you signed in. There are no advertising or tracking cookies.

Contact

Privacy questions or requests: hello@catalystcampus.nz. You can also complain to the Office of the Privacy Commissioner (privacy.org.nz).