Objectif 7 – Privacy Policy
Effective October 2, 2026 · objectif7.riekapps.com, provided by RiekApps
Key Points
- Without an account, your drafts, your explanation-language choice and your consent choice stay in your browser’s local storage. Nothing is sent to us.
- An account is needed only for AI corrections. Sign-in is through Firebase Authentication (Google or an email link, no passwords); we store your user id, email, pass status, orders, usage counters and your correction history.
- When you ask for a correction, your text and the topic instructions (never your name or email) are sent from our server to OpenRouter, which routes them to the AI model provider (currently OpenAI). We do not use your texts to train models.
- Payments are processed by Dodo Payments, the merchant of record. We never see your card details.
- Google Analytics 4 loads only if you accept the consent banner, and never receives what you write. There is no PostHog, no advertising and no session replay.
- You can delete your account, your texts, your corrections and your orders yourself from the account page, or by writing to riekapps@gmail.com.
1. What Stays In Your Browser
The practice topics, model answers, timed simulator, word counter, NCLC calculator and guides work without an account. While you practise without signing in, your drafts, the language you chose for explanations (English or French) and your consent choice are stored only in your browser’s local storage.
This data never leaves your device. You can remove it at any time by clearing the site’s data in your browser.
2. The Account
AI corrections need an account and a pass. Authentication is handled by Firebase Authentication (Google) using Google sign-in or a passwordless email sign-in link. There are no passwords. We then store, in Cloud Firestore (Google Cloud, located in the United States, nam5 multi-region), your user id, email, pass status and expiry date, your order records, your usage counters, and your correction history: each text you submit, its topic and instructions, and the AI result.
We do not store profile photos or any data from your Google account beyond the email and user id Firebase returns to us.
3. AI Corrections
When a pass holder asks for a correction, our server (a Cloud Function in the us-central1 region) sends the text you wrote and the topic instructions to OpenRouter, which routes the request to the AI model provider, currently OpenAI. Your name and email are never sent. The result is returned to you and saved in your correction history.
We do not use your texts to train models. OpenRouter and the model provider process the request under their own policies: see OpenRouter’s Privacy Policy and OpenAI’s Privacy Policy.
Marks produced by the AI are estimates and can be wrong. They are not official TCF Canada results.
4. Payments
The 30-day and 90-day passes are one-time payments sold through Dodo Payments, which acts as the merchant of record and handles the checkout, taxes, invoices and refunds. Card or wallet details are entered on Dodo’s pages and never reach RiekApps.
After a payment Dodo sends our server a signed notification containing the payment id, product, amount, currency, status and the email used at checkout, together with the account id we attached when opening the checkout. We store this order record so we can activate your pass, extend it if you buy again, and honour refunds or lost disputes, which remove the days that order added. See Dodo Payments’ Privacy Policy.
5. Analytics And Consent
On your first visit a banner asks whether we may use Google Analytics 4. Nothing loads until you accept; declining keeps every feature working. If you accept, we send page views and a small set of named events (correction requested and completed, with the task number and the mark; paywall viewed; checkout clicked; purchase completed). We never send the text you write.
You can change your choice at any time by deleting the site’s data in your browser, which brings the banner back. See Google’s Privacy Policy.
6. Third Parties
- Google (Firebase) — hosting of the site, authentication, the Firestore database and the server function that checks passes and requests corrections.
- OpenRouter and the model provider (currently OpenAI) — processing of submitted texts for AI correction, as described in section 3.
- Dodo Payments — checkout, invoices, taxes and refunds for the passes.
- Google Analytics 4 — only after consent, as described in section 5.
There are no advertising networks, no session-replay tools and no other trackers.
7. Retention And Deletion
Browser data stays until you delete it. Account data, including your texts and corrections, stays until you delete your account. “Delete my account” on the account page removes your authentication record, your texts, your corrections and your order records from our servers; Dodo keeps the invoice records it is legally required to keep. The same deletion can be requested by email.
8. Your Rights
Under the GDPR, Canadian privacy law and comparable laws you can access, correct, export and erase your data and object to its processing. Account deletion is built into the app. For anything else, write to riekapps@gmail.com; we answer within 30 days.
9. Children
Objectif 7 is aimed at adults preparing for the TCF Canada. It is not directed at children under 14 and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will delete it.
10. Changes
Changes to this policy are published on this page with a new effective date. A change that broadens what we collect is announced in the app before it takes effect.
11. Contact
RiekApps — riekapps@gmail.com. See also the Terms of Use and the Support page.