Privacy Policy
Version 1.0 · In effect on October 17, 2026
The French version of this document was written first. In case of a difference, the French version prevails.
This policy explains, in plain terms, what personal information ExamenCompagnon collects, why, how, who it is shared with, how long we keep it and how to exercise your rights. It applies to the https://examencompagnon.ca website and to the service offered by RM Digital Solutions LTD..
1. Person in charge of the protection of personal information
The person in charge of the protection of personal information [responsable de la protection des renseignements personnels] at RM Digital Solutions LTD. is the person who holds the title of Privacy Officer. You can reach them:
- by email: [email protected]
- by mail: 555 Rue Chabanel O, Suite 1541, Montréal, QC H2N 2J2
2. The information we collect
| Category | Examples | Source |
|---|---|---|
| Account | Email address, name (optional), password (stored only in hashed form), interface language | You, at sign-up and in settings |
| Google sign-in | Name, email address and profile photo sent by Google | Google, if you choose "Continue with Google" |
| Billing | Billing address, payment history, invoices and refunds | You and Stripe. We never see your full card number. |
| Study | Target exams, exam language, answers, results, confidence level, flashcards, bookmarks, notes, readiness score | Your use of the service |
| Consents | Choices about tips and offers by email, choice about audience measurement (Google Analytics), acceptance of the terms, with the date, the version of the wording and the IP address | You |
| Audience measurement (only if you accept) | Pages viewed, actions on the site (sign-up, diagnostic, checkout start, purchase), browser, device, Google Analytics cookie identifier, with no name or email | Your browser, with your agreement |
| Security | IP address, browser, date and time of sign-ins and important actions | Automatically, at each sign-in |
| Communications | Emails we send you and your requests to support | You and us |
We collect only what is needed for the purposes described below.
3. Why we use it
- Create and secure your account, and let you sign in.
- Provide the service: questions, practice exams, lessons, spaced review, progress tracking.
- Bill the subscription, issue invoices and refunds, and meet our tax obligations.
- Send you account messages and the notices the law requires (copy of the contract, cancellation confirmation, change of terms or price, confidentiality incident).
- Send you tips and offers by email, only if you consented. This consent is optional, separate from the terms and can be withdrawn at any time.
- Prevent fraud and abuse, and respond to a payment dispute.
- Improve the content with overall statistics per question, without identifying anyone.
- Understand how the site is used, with Google Analytics, only if you have consented.
4. Readiness score
We calculate a readiness score from your answers to suggest what to study. It is used for nothing else, is never shared with a third party and has no effect on your subscription or your rights. Because it assesses your readiness from your answers, it is a form of profiling. You can ask how it is calculated by writing to [email protected].
5. Cookies and tracking
We use no advertising cookies. By default, no tool identifies you, locates you or builds a profile of you, and the only cookies keep you signed in. If you accept it in the cookie banner, we measure audience on the site with Google Analytics 4. This tool, provided by Google, can be used to identify you or follow you from one visit to the next, so it stays off until you give your consent (Law 25, s. 8.1), which is the only basis for this collection. Google then processes this information in the United States, with no name or email. You can decline or withdraw your consent at any time with the “Manage cookies” link at the bottom of the pages or in your settings. If you are signed in, we record your choice, with the date, so that we can prove it. The full list, including what the site keeps in your browser, is on the Cookies page.
6. AI tutor
The questions you ask the tutor are sent to Google (Gemini) to produce an answer. We add neither your name nor your email address. Do not type personal information into it. Under our agreements with Google, these exchanges are not used to train its models.
7. Sharing with third parties and information outside Québec
We do not sell your personal information. We share it only with the providers we need to offer the service, bound by a written agreement that protects your information. Some are located outside Québec. Before sharing information with them, we assess the privacy factors, including the level of protection where it is processed.
| Provider | Role | Information | Location |
|---|---|---|---|
| OVHcloud (website hosting) | Run the site and store the database | All service data | Québec, Canada |
| Stripe | Payment, invoices, taxes and refunds | Name, email, billing address, payment data | United States and Canada |
| Resend | Sending email | Email address, email content | United States |
| Google (sign-in) | Sign-in with a Google account, if you choose it | Name, email, profile photo | United States |
| Google (Gemini) | Tutor answers | Text of your questions to the tutor, without name or email | United States |
| Cloudflare | Protecting and routing the site’s traffic (DNS, content delivery network) and forwarding incoming email | IP address, browser, pages requested, emails sent to our help address | Global network |
We have a written agreement with each of these providers. When information is processed outside Québec, we assess that transfer as Law 25 requires.
We may also share information when the law requires it, for example under a court order.
8. How long we keep it
| Information | Period |
|---|---|
| Account and study data | As long as the account exists. After a deletion request, the account is disabled at once, then permanently deleted after 30 days. |
| IP address and browser in the security log | 365 days, then erased |
| Sent emails (technical copy) | 90 days after sending |
| Sign-in sessions | Deleted when they expire |
| Invoices and refunds | The period required by tax law. Invoices are kept by Stripe. |
| Proof of consent and of acceptance of the terms | As long as the account exists, then deleted with it |
| Confidentiality incident register | At least 5 years |
When an account is deleted, we keep only overall statistics per question (number of answers and of correct answers), with no link to you.
9. Your rights
At any time, you may:
- access your information and get a copy;
- receive it in a structured format: in Settings, Account, the "Download my data (JSON)" button produces a file with everything we keep about you;
- have it corrected if it is inaccurate, incomplete or ambiguous;
- withdraw a consent, for example to tips and offers by email, in settings or with the unsubscribe link;
- ask for the deletion of your account, in settings or by email.
Write to [email protected] for any other request. We answer in writing within 30 days of receiving it. If you are not satisfied with our answer, you may contact the Commission d’accès à l’information du Québec.
10. Security and incidents
Communications are encrypted, passwords are stored in hashed form and access to information is limited to the people who need it for their work. We keep a register of confidentiality incidents. If an incident presents a risk of serious injury, we notify the Commission d’accès à l’information and the people concerned.
11. Changes to this policy
If we change this policy, we publish the new version on this page with its date and tell you by email before it takes effect.
12. Contact us
Person in charge of the protection of personal information: [email protected]. For our internal rules (roles, retention, complaint handling), see the Personal Information Governance page.