Privacy Notice

Who we are

Domain Eight is a business name of an Australian sole trader based in Victoria, Australia. This Privacy Notice explains how Domain Eight ("we", "us", "our") collects, uses, and looks after personal information when you use the Domain Eight service (the "Service"). You can contact us at support@domaineight.app.

Information we collect

• Account information — your email address, a display name, and authentication identifiers created and managed by our authentication provider (including, if you use it, a Google account identifier via Google Sign-In).
• Study activity — practice and exam-style sessions you start, questions presented to you, answers you select, whether each answer was correct, timestamps, difficulty information, per-domain performance, and adaptive ability estimates.
• Subscription and entitlement status — your current plan (free, monthly, or 6-month) and the dates it applies to, so we can provide the correct access.
• Support communications — messages you send us and any question reports you submit through the Service.
• Limited technical information — our hosting and infrastructure providers may process standard request information (such as IP address and browser user-agent) for security, abuse prevention, and reliability. Domain Eight does not use this data for advertising and does not run analytics or marketing tracking.

How we use your information

• To provide, maintain, and improve the Service.
• To create and administer your account.
• To track your study progress and personalise practice.
• To determine what content and features your subscription entitles you to.
• To respond to your support requests and question reports.
• To protect the Service against fraud, abuse, and security threats.
• To meet legal, accounting, and tax obligations.

Service providers we use

We rely on a small number of trusted service providers to operate Domain Eight:

• Supabase — authentication, database, and application backend services.
• Paddle — our payment provider and, where applicable, Merchant of Record. Paddle handles checkout, payment processing, subscription billing, applicable taxes, invoicing, and refund processing. When you purchase, Paddle collects and processes the information needed to complete your transaction. See Paddle's privacy notice at paddle.com/legal/privacy.
• Lovable / Lovable Cloud — application hosting and client-side error reporting used to help us diagnose and fix issues.

Payment information

Payments and subscription billing are handled by Paddle. Domain Eight does not receive or store your full payment card details. We may receive limited transaction information from Paddle (such as your customer or subscription identifiers and the plan you purchased) so that we can grant the correct access.

Cookies and browser storage

Domain Eight uses only what is reasonably necessary to run the Service. Our authentication provider stores a session in your browser's local storage so you can stay signed in, and a small user-interface preference cookie is used to remember collapsed/expanded sidebar state in signed-in areas. Domain Eight does not use analytics, advertising, or marketing cookies, and does not embed third-party tracking pixels.

Retention

We retain personal information for as long as your account is active and for a reasonable period afterwards to meet legitimate business, security, legal, accounting, and tax obligations. Study activity is retained while your account exists so that your progress and history remain available to you.

Your choices and requests

You can access and update your basic account information from within the Service. For any request relating to your personal information — including access, correction, or deletion — please contact us at support@domaineight.app. We will review and respond to requests in accordance with applicable law.

Security

We use reasonable technical and organisational measures designed to protect personal information, and our infrastructure providers apply encryption in transit and at rest for the services they host. No internet-based service or storage system can be guaranteed to be completely secure.

Children

Domain Eight is not directed to children and is intended for use by adults preparing for a professional certification.

International users

Domain Eight is operated from Australia. Personal information may be processed by our service providers in the jurisdictions where they operate. Rights available to you may vary depending on the country in which you live.

Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be indicated by updating the "Last updated" date above.

Contact

For privacy questions or requests relating to your personal information, contact Domain Eight at support@domaineight.app.