Who we are
Aphelion Engineering Pty Ltd, Perth, Western Australia, publishes Golden Wattle for Android. This policy covers the Android app and its purchase-verification and reviewer-access service. Contact bijan@aphelionengineering.com.au about privacy, support or a data request.
Study data stays under your control
Study answers, mock history, bookmarks, reading progress, review schedules, preferences and an optional test date are stored on your device. The app does not send these records to our verification service. Study works offline, without an app login, advertisements or an added analytics SDK. We do not use your data for advertising or tracking across apps.
Android may back up durable study data and preferences according to your device and backup-provider settings. Unfinished sessions, purchase caches and installation keys are excluded from the app's backup snapshot. Device backups are handled by Android and your chosen provider.
Google Play purchases and verification
Google Play handles payment and its own account information. We do not receive your payment-card details or Google-account email through the app. Google Play provides purchase and product information so the app can display offers, check ownership and restore access.
For purchase verification, the app sends our service purchase tokens and product identifiers, an installation public key, a signed request with a timestamp and single-use identifier, and a Play Integrity token. We use these to confirm the purchase, issue access for that installation, prevent replay and fraud, and process renewals, cancellations and refunds. Purchase checks can run after a purchase, on restore and when the app refreshes existing ownership.
Play Integrity checks whether the app is recognised, has a Play licence and is running on an acceptable device. Google processes app and device information for those checks. Our configuration does not request optional app-access risk, Play Protect, recent-device-activity or device-attribute responses. Google operates Play and Integrity under its own terms and privacy policy.
Optional reviewer access
Google Play reviewers can enter a review code to use Premium study features without a purchase. For this optional action, the app sends the code, its installation public key, a signed request with a timestamp and single-use identifier, and a Play Integrity token to our service over HTTPS. The service compares the code with a protected credential hash and returns a signed access grant bound to that installation. The app does not retain the entered code.
Reviewer grants last up to 24 hours and never extend beyond the configured review period. They are stored in the encrypted local access cache, outside Android backup. Replay and rate-limit records and operational logs follow the retention periods below. The service does not log review codes or request bodies. Ending reviewer access on the device removes the local reviewer grant and preserves purchases and study progress.
Operational records and providers
Google Cloud hosts our verification service and purchase database in Sydney. Its service logs include connection information such as IP address, app/device user-agent information, request time, route, response status and timing. We use these records to operate, secure and troubleshoot purchase verification and reviewer access, not to profile your study activity. Our service code does not log purchase request bodies, purchase tokens or Integrity tokens.
Google Cloud also processes operational and administrative records. The project's log storage is configured as global; Google and other providers may process information outside Australia under their applicable terms. We do not sell personal information. We use providers to operate the service and may disclose information when required by law.
How long records remain
Purchase records are checked while active. Their deletion deadline is renewed on verification and set to 30 days after the last check. Inactive purchases stop scheduled checks. Deletion is automatic after that deadline but is asynchronous, so removal is not immediate. Replay and rate-limit records have deletion deadlines of one or two days.
Routine service logs have a 30-day retention setting. Google's mandatory administrative and system audit logs have a locked 400-day retention setting. Google Play retains its own purchase and account records under its policies; deleting this app does not delete those records.
If you email support, we receive your email address, message and any attachments you send. We keep correspondence only as long as needed to respond, investigate and meet applicable legal obligations, and review it for deletion when no longer needed.
Your choices and requests
Reset progress removes study answers, review schedules, reading progress, session history and the current session. It keeps bookmarks, preferences, cumulative free-use counters and purchase ownership. Clearing Android app storage removes local app data; manage device backups separately in Android settings. Neither action cancels a Google Play subscription.
Email bijan@aphelionengineering.com.au to request access, correction or deletion of information we hold, or to raise a privacy concern. We will explain what we can identify and what we need to verify the request. We may ask for a Google Play order reference to locate a purchase; do not send payment-card details or a password. Where information must be retained for a legal obligation, we limit retention to what is required. Deleting a server purchase record may affect verification and does not cancel a subscription; a later purchase or restore check may create a new record.
Optional device features
Reminders are local and optional, with Android notification permission. Reading aloud uses installed offline Android speech voices. Installing voices, opening an official resource or sending a support email uses another app or provider under your control. Support opens a draft; nothing is sent until you choose to send it.
This is a general citizenship study aid. We do not ask learners for a name, date of birth, citizenship status or government identity document. Please avoid including unnecessary sensitive information in support messages.
Security and policy changes
App-to-service requests use HTTPS. Purchase caches are encrypted on the device and installation keys are protected by Android Keystore. Server access is restricted to authorised service identities. No system can guarantee absolute security. We update this policy when the app's data practices change and show the revision date above.