This policy covers the Android app Finnish Exam (package com.ykicivics.finlandcitizenship), published by Navritto Solutions Private Limited. It is separate from the privacy policy for navritto.com, which covers the website.
In short: You can use the free content with no account, and nothing about that use leaves your phone. If you sign in (optional), your practice history syncs to our servers in the EU so it survives a new phone, keyed to an account identifier rather than your name. Non-subscribers see ads — in the EEA and the UK you are asked about ad personalisation first and can change your answer at any time. We never sell your data or share your practice answers, and you can delete your account and everything tied to it from inside the app at any moment.
1. Who we are (the data controller)
The controller of any personal data described here is Navritto Solutions Private Limited, a company registered in Haryana, India (our CIN and registered office are shown at the foot of this page). You can reach us about privacy at info@navritto.com. This policy covers the Finnish Exam app only; the navritto.com website has its own separate policy.
2. What we collect, and only if you sign in
Signing in is optional. The free topics, the exam guide and all app settings work without an account, offline, and nothing about that use is transmitted to us. If you choose to sign in with Google, we receive and store:
A user identifier
A random identifier created by Firebase Authentication. Everything below is keyed on it, not on your name.
Your email address
Provided by Google as part of sign-in, and used to identify your account if you contact us for support. We never receive your Google password — sign-in is handled by Google.
Your display name
Provided by Google and shown to you in Settings so you can see which account you are signed into.
Your practice history
Which questions you have answered and whether each answer was correct, with the time answered. This is what lets your progress follow you to a new phone.
Your subscription status
Whether your account currently has an active subscription. Payment is handled entirely by Google Play; we never see or store your card details, billing address, or any payment information.
3. What stays on your phone
- Your settings — translation visibility and playback speed.
- Your practice history, whether or not you are signed in.
- A record of which account claimed a subscription purchased on the device. This never leaves the phone and is excluded from Android's cloud backup and device transfer.
4. The legal basis for using your data
Under the GDPR we rely on the following legal bases, each limited to what the purpose needs:
Your account and progress sync
Performance of a contract with you (Article 6(1)(b)). When you sign in, processing your account identifier, email and practice history is necessary to provide the account and cross-device sync you asked for.
Your subscription
Performance of a contract (Article 6(1)(b)) — storing that your account has active access so paid content unlocks.
Personalised advertising
Your consent (Article 6(1)(a)), which you give or decline in the consent form shown in the EEA and the UK, and can change at any time in Settings. Non-personalised ads that fund the free app rely on our legitimate interests (Article 6(1)(f)), limited to the minimum needed to show a non-personalised ad.
Keeping the service working and secure
Our legitimate interests (Article 6(1)(f)) in operating the app and preventing abuse.
5. Advertising
People who have not subscribed see banner ads provided by Google AdMob. Subscribers see none.
If you are in the European Economic Area or the United Kingdom, you are shown a consent form the first time the app runs, asking whether your data may be used for personalised advertising. No ad is requested before you answer, and you can reopen that choice at any time under Settings → Ad privacy choices. Google's own handling of advertising data is described at https://business.safety.google/privacy/. Outside the EEA and UK the form is not shown, because the consent framework it implements does not apply there.
6. Who processes your data
Google Firebase (Authentication, Cloud Firestore, Cloud Storage)
Sign-in, progress sync, and delivery of subscription content. Your account data is stored in the European Union (europe-north1, Finland).
Google Play Billing
Subscription payment and renewal.
Google AdMob
Advertising, shown only to non-subscribers.
We use no other third-party services, no analytics platform, and no advertising network other than AdMob. We never sell your data, and we never share your practice answers with anyone.
7. International data transfers
Your account data (your identifier, email, display name and practice history) is stored in the European Union. Some processing by Google — for example payment handling and advertising — may take place outside the EEA. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses together with the additional safeguards described in Google's own privacy documentation, so your data keeps an equivalent level of protection.
8. How long we keep it
Your practice history and account record are kept for as long as your account exists. You can delete your account, and the copy of your progress we hold, from inside the app at any time under Settings → Delete account — this is immediate and needs no request to us. Practice saved on your phone is not removed by that (use Settings → Clear practice), and a subscription must be cancelled separately in the Play Store, because only Google can stop a payment. Full instructions are on our account-deletion page.
9. Your rights
If you are in the EEA or the UK, the GDPR gives you the right to:
- Access the personal data we hold about you, and receive a copy.
- Correct data that is wrong or incomplete.
- Erase your data — the in-app Delete account control does this immediately.
- Restrict or object to our processing, including objecting to processing based on our legitimate interests.
- Data portability — receive your data in a portable form.
- Withdraw consent to personalised advertising at any time, in Settings, without affecting anything done before you withdrew it.
To exercise any of these, write to info@navritto.com. You also have the right to lodge a complaint with a data protection supervisory authority — in your own EEA country, in Finland with the Office of the Data Protection Ombudsman (tietosuoja.fi) since your account data is stored there, or in the UK with the Information Commissioner's Office (ico.org.uk).
10. Automated decision-making
We do not carry out automated decision-making that produces legal or similarly significant effects about you. The estimated grades the app shows are informational study feedback based solely on your own practice answers, and never determine any real result.
11. Children
This app is intended for adults preparing for a citizenship application. It is not directed at children and we do not knowingly collect data from anyone under 13.
12. Changes to this policy
If this policy changes materially, the “last updated” date above will change and the new version will be published at this same address before it takes effect.
13. Contact
Questions or requests about this policy can be sent to info@navritto.com. We aim to respond within 30 days. The controller is Navritto Solutions Private Limited; our Corporate Identity Number is shown at the foot of this page and can be verified on the Ministry of Corporate Affairs portal.
14. Independence and disclaimer
Finnish Exam is an independent learning tool. It is NOT affiliated with, endorsed by, or connected to the Finnish National Agency for Education (Opetushallitus / OPH), the Finnish Immigration Service (Maahanmuuttovirasto / Migri), or the Government of Finland. Practising here produces no certificate, grade or qualification of any kind.
Back to Finnish Exam, or see all Navritto apps.