Last updated: 6 October 2026. This notice covers the NZ Learner Android app and this website. The same notice is available in the app under Profile → Privacy Policy.
Your information
Privacy notice
NZ Learner is an independent study app for the New Zealand Class 1 (car) learner licence theory test. It is not affiliated with, endorsed by or an official product of NZ Transport Agency Waka Kotahi (NZTA) or the New Zealand Government.
NZ Learner is developed and run by BlueOrbit, an independent developer (“we”, “us”, “our”). This notice explains what information the app uses, why, who receives it, how long it is kept and the choices you have. Contact us about privacy at blue0orbit@gmail.com.
The app is intended for people aged 16 and over. It is not directed to children under 16. If you are under 16, please do not create an account.
Information we collect
| Area | What is involved |
|---|---|
| Your account | An account is required. When you register with email and password, or sign in with Google or Facebook, we receive your email address, display name, a link to your profile photo (from Google or Facebook), your Firebase user ID and your sign-in method. Email accounts are verified by email. Firebase Authentication handles your password; we never see it. Facebook Login asks only for your email address and public profile. |
| Learning records | Questions, images and translations are built into the app, so no study content is downloaded. Your answers, study sessions, results, bookmarks, mistakes, streaks, XP, reminder settings, cached Pro status and daily exam allowance are stored only on your device, separately for each account. They are not uploaded or synced to the cloud. Uninstalling the app or clearing its data removes them, and signing in on another device does not restore them. |
| Purchases | If you buy Pro, Google Play handles the payment. We receive purchase details such as the product, order ID, purchase time and a purchase token, but never your card or bank details. The app checks the purchase on your device; we do not run our own purchase server. |
| Advertising | When ads are shown to free users, Unity Ads may process your device advertising ID, IP address, device and app information and your interactions with ads. The app requests non-personalised ads only. Pro users see no ads. |
| Optional usage analytics | Google Analytics for Firebase is off by default. If you switch it on, the app sends fixed feature-event names only (for example, that a mock exam was completed), never question wording, answers, account identifiers or purchase tokens. The Analytics SDK also collects standard information such as an app-instance ID, device model, Android and app versions, and approximate location derived from your IP address. |
| Optional crash reporting | Firebase Crashlytics is off by default. If you switch it on, crash reports contain a sanitised technical error trace and device and app details such as model, Android version, free memory and storage, and app version. Exception messages are removed, and no account IDs, credentials, purchase tokens or answers are attached. |
| Sign-in protection | Firebase App Check sends device and app integrity signals to Google (Play Integrity) to protect sign-in from abuse. |
| Study reminders | Reminders are scheduled on your device. We do not use a push-notification server. |
| Support emails | If you email us, we receive your email address and anything you include in your message. Do not send passwords, sign-in codes or purchase tokens. |
| This website | These static pages use no cookies, analytics, tracking scripts or forms. GitHub, which hosts the site, may keep technical request logs such as IP addresses. |
How and why we use information
We use your information to:
- create, verify and secure your account and sign you in;
- provide practice, mock exams, progress tracking and study reminders on your device;
- provide and restore Pro and confirm that a purchase belongs to your account;
- show ads to free users and manage the daily free mock exam and rewarded extras;
- if you opt in, understand which features are used and fix crashes;
- protect the app from fraud and abuse, and answer your support and privacy requests.
We do not sell your personal information, and we do not use it for personalised advertising.
If you are in the European Economic Area (EEA), the UK or Switzerland, our legal bases are: our contract with you (your account, app features and purchases); your consent (optional diagnostics, and advertising choices where consent is required); our legitimate interests (keeping the app secure, preventing fraud and abuse, and funding free features with non-personalised ads); and legal obligations (keeping records the law requires).
Service providers and sharing
We share information only with the providers that run parts of the app, and only for the purposes above:
- Google: Firebase Authentication, Google sign-in, Google Play Billing, Google Play in-app reviews (if you rate the app), Firebase App Check with Play Integrity, the User Messaging Platform and, only if you opt in, Google Analytics for Firebase and Firebase Crashlytics.
- Meta: Facebook Login, if you choose it.
- Unity: Unity Ads.
Ads. The app requests non-personalised ads only and tells Unity that consent to personalised advertising has not been given. Unity may still process your advertising ID, IP address (which can indicate your approximate location), device and app information and ad interactions to deliver and measure ads and to prevent fraud. Where the law requires it, including in the EEA, UK and Switzerland, Google’s User Messaging Platform asks for your choices before ads are requested and stores them on your device.
Diagnostics. Google signals, advertising identifiers and ad personalisation are turned off for Analytics. Diagnostics are not linked to your account.
These providers may process information outside New Zealand, including in the United States. Firebase Authentication processes data in the United States. The providers’ privacy policies, linked below, explain how they protect it. We may also disclose information when the law requires it.
Your choices in the app
- Profile → Usage and crash reporting: separate switches for usage analytics and crash reporting, both off by default. Switching a choice off stops future collection, resets the app’s analytics data on your device and deletes unsent crash reports; it does not delete data already sent. Advertising choices never switch these on.
- Profile → Privacy Preferences: review your advertising privacy choices, where available.
- Device settings: turn study-reminder notifications on or off.
- Profile → Delete Account: delete your account (see below).
Security
The app sends information over encrypted connections (HTTPS) and relies on the security measures of Google, Unity and Meta. We collect only what the app needs and keep your learning records on your device. No system is completely secure, so please protect your device and sign-in details.
How long information is kept
- Learning records stay on your device until you delete your account, clear the app’s data or uninstall the app. Signing out does not erase them.
- Your account is kept until you delete it. Google then removes it from its live and backup systems within 180 days. Sign-in IP address logs are kept for a few weeks.
- Analytics (if enabled): event data is kept for 2 months and user-level data for 14 months, restarting when you use the app again. Aggregated reports may be kept longer.
- Crash reports (if enabled): kept for 90 days before Google starts deleting them.
- Support and privacy emails: deleted 90 days after your request is resolved, unless needed for an ongoing dispute or a legal obligation.
- Google Play and Unity keep their own records under their own policies.
Deleting your account
Open Profile → Delete Account. You need an internet connection and a recent sign-in. This deletes your NZ Learner account and erases that account’s learning records on this device. You can also email blue0orbit@gmail.com or follow the steps on the account deletion page. We may ask you to confirm that you control the account’s email address.
Account deletion does not remove Google Play purchase and order records (kept by Google), information already shared with Unity, diagnostics already sent (removed under the periods above) or learning records on other devices (clear the app’s data or uninstall it there). It does not refund or transfer Pro.
Your rights
Under the New Zealand Privacy Act 2020, you can ask for access to the personal information we hold about you and ask us to correct it. If you are in the EEA, UK or Switzerland, you also have the rights of access, rectification, erasure, restriction, objection and data portability, and you can withdraw your consent at any time without affecting processing that took place before.
To make a request, email blue0orbit@gmail.com, if possible from the address linked to your account. Never send your password, sign-in codes or purchase tokens. We will respond within the time the law requires. Learning records exist only on your device, so you can see them in the app, but we cannot access or recover them.
If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner. In the EEA, UK or Switzerland, you can also complain to your local data protection authority.
Changes to this notice
We may update this notice when the app or the law changes. We will publish the updated notice with a new “Last updated” date and highlight material changes in the app or on this website.
Contact
Privacy and support contact: blue0orbit@gmail.com. The developer personally handles support and privacy requests. See also the Terms of Use.