Privacy Policy

This Privacy Policy explains what personal information Pratice collects when you use pratice.ca, why we collect it, how we store and protect it, and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

1. Who we are

Pratice ("we", "us", "our") operates pratice.ca — a Canadian-facing online French-learning platform. We are the organization responsible for the personal information described in this policy.

Privacy questions or requests: learn@pratice.ca.

2. What we collect

We collect the following categories of information:

• Account information — your name, email address, hashed password, and optional phone number when you sign up.
• Booking information — the plan or lesson you choose, preferred start times, your level (A1–C2), and any notes you write about your goals.
• Lesson activity — your practice attempts, AI-assessed answers, and messages with your tutor (kept on the platform, contact details masked).
• Payment information — the payment provider, transaction reference, amount paid, and status. We never see or store your card details — PayPal handles the payment itself.
• Technical data — IP address, browser user-agent, and basic session information used for security and for keeping you logged in.
• Communications — emails or contact-form messages you send us.

3. Why we collect it

We use your information to:

• Create and manage your account;
• Match you with a French tutor and deliver the lessons you booked;
• Process payments through PayPal;
• Send transactional emails (booking confirmations, receipts, password resets);
• Improve the platform based on aggregate usage patterns;
• Prevent fraud, abuse, and violations of our Terms of Service;
• Comply with legal and tax obligations.

4. Legal basis

Under PIPEDA, we collect and use your personal information on the basis of your consent (given when you sign up or book a lesson), to perform the contract you entered into with us, and to comply with legal obligations. You can withdraw consent at any time by contacting us — though this may mean we can no longer provide the Service.

5. Who we share it with

We share information only with the following categories of third parties:

• PayPal — to process CAD payments. PayPal's own privacy policy governs their handling of your payment data.
• Email service provider — to send transactional emails (booking confirmations, password resets). Our provider sees your email address and the content of the email we send.
• Hosting provider — where pratice.ca and its database are stored. They do not have access to the contents of your account.
• Your tutor — when a lesson is booked, your first name, level, and lesson notes are shared with the tutor to prepare for the lesson.
• Law enforcement or regulators — only if we are legally required to do so.

We do not sell your personal information. We do not share it with advertisers. We do not use it for behavioral advertising.

6. Where your information is stored

Our database and platform files are hosted on servers located in North America. Payment processing is handled by PayPal, whose data centers may process your information in the United States or other jurisdictions as described in their policy.

If you use Pratice from outside Canada, you understand that your information is transferred to and stored in the jurisdictions above.

7. How long we keep it

We keep account information for as long as your account is active. If you close your account, we delete or anonymize personal information within a reasonable period (typically 90 days), except where we are required to keep records for tax, accounting, or legal reasons.

Messages and lesson records are kept while the account is active and for a short retention period afterward, to resolve disputes and to comply with the No-Solicit Agreement audit trail.

8. How we protect it

We use industry-standard safeguards to protect your information:

• Encrypted connections (HTTPS) for all traffic to and from pratice.ca;
• Passwords stored as strong one-way hashes (never in plain text);
• Session cookies with HttpOnly and SameSite protections;
• Masking of contact details in tutor–learner messages;
• Access controls limiting who can see your data inside Pratice.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by PIPEDA.

9. Cookies

We use a small number of cookies and similar technologies to keep you logged in, to remember your preferences, and to protect against CSRF attacks. We do not use advertising or third-party tracking cookies. See our Cookie Policy for details.

10. Your rights

You have the right to:

• Access the personal information we hold about you;
• Ask us to correct information that is inaccurate or incomplete;
• Ask us to delete your information, subject to legal retention requirements;
• Withdraw consent for optional uses;
• Request a copy of your data in a portable format;
• Complain to the Office of the Privacy Commissioner of Canada if you believe we have mishandled your information.

To exercise any of these rights, email learn@pratice.ca. We respond within 30 days.

11. Children's privacy

The Service is intended for users aged 16 and older. If you are under 16, a parent or guardian must create and manage the account on your behalf. We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child has provided us with personal information without consent, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we update the "Last updated" date at the top of this page. If changes are material, we will notify you by email or through the platform. Continued use of the Service after an update means you accept the updated policy.

13. Contact us

Pratice — Privacy Team
Email: learn@pratice.ca
Or use our contact form.

This document is a plain-language summary of Pratice's privacy practices. It is not legal advice. For legal questions about your privacy rights, consult a qualified privacy lawyer in your jurisdiction.