CCL Mate
Start free

Privacy Policy

Last updated: 5 November 2026

CCL Mate is a practice app that helps people prepare for the NAATI Credentialed Community Language (CCL) test. This policy explains what information the CCL Mate app, online practice (cclmate.com/practice) and this website (cclmate.com) handle, and why. In short: your study progress stays on your device unless you sign in to an account to keep it in sync across your devices, mock-test recordings are used only to mark your answers, and we never sell your data.

CCL Mate is a registered business name of H Dangi, a sole trader in Western Australia (ABN 79 271 876 944). In this policy, “we” and “us” mean H Dangi, trading as CCL Mate. Contact: admin@cclmate.com.

CCL Mate is an independent practice app and is not affiliated with NAATI. We handle personal information in line with the Australian Privacy Principles.

What stays on your device

If you use the app without an account, your name (if you enter one), your chosen language, test date, topic, settings, study progress, scores and mock-test history are stored only on your device. We do not receive them. Uninstalling the app deletes them. The exceptions are "Challenge a friend", signing in to an account and mock-test marking, all described below. Your settings (such as theme and sounds) always stay on the device. Your recordings are kept on the device and are never saved to your account; mock-test recordings are also sent for marking, as described under Voice recordings.

Your account (optional in the app, needed for online practice)

You can sign in with Google or with an email address and password, so that your progress is the same on every device: your phone, tablet, computer (Windows) and the online practice. When you sign in we receive your email address and, with Google, the name on your Google account, through Firebase Authentication. We then keep a copy of your study progress in your account in Google Cloud Firestore in Australia: your name and test date, chosen language, daily goal and topic, word reviews and their schedule, right and wrong answers, game results, daily activity (for your streak), and your mock-test results (marks, feedback and the written transcript of each answer, but not the recordings). Only you can read or change it, after signing in. We use it only to show you the same progress everywhere.

You can delete your account at any time in the app (Settings, Account, Delete account). This permanently deletes your account and the progress saved in it, on every device. You can also ask us to delete it: see cclmate.com/delete-account. Signing out keeps your progress in your account and removes it from that device.

Voice recordings

In speaking and sentence practice, the app records your answer so you can play it back. These recordings stay on your device.

In a mock test, your answers are marked by AI. Each recording is sent over an encrypted connection to our server (Google Cloud Functions for Firebase, in Australia) and processed by Google's Gemini AI through Google Cloud Vertex AI. Google may do this processing outside Australia, and it chooses the country, so we cannot tell you which one. Each recording is used only to produce your mark and feedback. We do not keep recordings on our server after marking, we do not listen to them, and Google Cloud does not use your recordings or what you said to train its AI models. Your results include a written transcript of what you said. It is saved with your mock-test results on your device and, if you are signed in, in your account, so you can see it on your other devices. A copy of each recording stays on your device so you can replay your own answers.

To stop the marking service being overused, our server also counts how many answers are marked each day for each account or anonymous identifier and for each internet address. The address is stored only as a scrambled code (a hash), not as the address itself.

Challenge a friend

This game is optional. When you create or join a challenge, the app saves to our database (Google Cloud Firestore, in Australia) the challenge's words, the name you choose to show, your score, how many answers you got right and how long you took, together with your anonymous identifier. Anyone with the challenge's 6-character code can see these names and scores; challenges cannot be searched or listed. Everything about a challenge is deleted automatically 30 days after it is created or played.

Anonymous sign-in

To protect the marking service from abuse, the app signs in anonymously with Firebase Authentication until you sign in to an account. This creates a random identifier that is not linked to your email or phone number. We use it only to limit how many marking requests and language unlocks one device can make, and in "Challenge a friend" to make sure each player can add only their own score.

Language downloads

When you set up the app, it downloads your language from Google Cloud Storage. The content is encrypted, and the app asks our server (Google Cloud Functions for Firebase, in Australia) for the key that unlocks it. To stop the content being copied, the server records your anonymous identifier with the language it unlocked (each copy of the app can unlock only its own language) and counts key requests per day, with your internet address stored as a scrambled code (a hash) instead of the address itself. The key is kept in your phone's secure key store.

Early-access list (this website)

If you join the early-access list, we store your email address, the CCL language you chose and the date you joined, in Google Cloud Firestore in Australia. We use them only to email you about the launch of CCL Mate, and we delete them within 12 months, or sooner if you ask. Each email includes a way to unsubscribe.

Android test requests (this website)

If you ask to join the Android test, we store the email address you give (the Google account you use on Google Play), your CCL language and the date, in Google Cloud Firestore in Australia. We use them to add you to the test on Google Play, which shows Google your address, to give that address 3 months of Premium, and to email you the download link from admin@cclmate.com. We delete a request within 12 months, or sooner if you ask.

Premium

If you have Premium, we keep a record of it: your account or email address, the plan and when it ends, and, for a subscription, whether it is renewing, cancelled or has a failed payment, the date of the next payment, and when it was started, cancelled or ended. We use it only to give you Premium on every device you sign in to, to manage your subscription and to email you about it, and we keep it while you have Premium and for 5 years after, as the law requires for business records.

Payments

When you buy Premium, you pay on a secure payment page run by Stripe (Stripe Payments Australia Pty Ltd), our payment provider. Stripe collects your card details, or the details of the other way you pay, your email address and, where a payment needs them, your name, country and postcode. Stripe uses them to process the payment and also for its own purposes, such as preventing fraud, under its own privacy policy. To open the payment page we send Stripe your CCL Mate account number and, if your email address is confirmed, that address. Stripe may handle this information outside Australia, for example in the European Union, the United States or India. If you choose to save your details with Link, Stripe's quick-checkout service, Link keeps them under Stripe's own terms. We never see or store your card number. If you subscribe, Stripe keeps your card or other payment method to charge each renewal until you cancel. For a subscription we also send Stripe your browser's time zone, which we use to date your payments.

From Stripe we keep a record of each payment: your CCL Mate account, the email address you gave on the payment page, the plan, the amount and currency, the date, when your Premium ends after it, whether you accepted our terms on the payment page, whether it was refunded or disputed, and Stripe's reference numbers for the payment. We also count how many payment pages each account opens in a day, to stop misuse. Our server's logs (Google Cloud Logging) also note each payment's account number, plan and Stripe reference; they are kept for 30 days and may be stored outside Australia. We keep the payment records in Google Cloud Firestore in Australia and use them only to give you Premium, to answer your questions about a payment or a refund, and for our accounts and tax records, which the law requires us to keep for 5 years. If you delete your account, we delete your progress as described above, but keep these payment records for 5 years because the law requires us to keep business records.

For a subscription we also keep Stripe's reference numbers for your customer record and subscription, each renewal payment and any failed payment, when and how you cancelled or resumed (for example on the Premium page, through Stripe's page or by email), which version of our terms and subscription wording you were shown and accepted, the time zone your browser reported when you subscribed (used only to date your payments and emails), and your card's brand and last 4 digits (shown in your confirmation email). We email you about your subscription from admin@cclmate.com through Google Workspace (Gmail): a confirmation when it starts, reminders before renewals, and confirmations when you cancel, resume or it ends. These emails contain no advertising. We keep a record of each one (when, to which address, which kind, and the facts it gave, such as the plan, amounts and dates). Stripe emails your receipts and, if a payment fails, how to update your card. We keep these subscription and email records for 5 years. If you delete your account, your subscription is cancelled straight away and these records are kept for 5 years, like the payment records.

This website

This website does not use advertising cookies; for the statistics cookies, see Visitor statistics below. It is hosted on Firebase Hosting, which, like any web server, briefly processes technical information such as your IP address to deliver the page. The site loads its fonts from Google Fonts, which receives your device's IP address to deliver them. On the Premium page (cclmate.com/premium) you can sign in to your CCL Mate account, as in the online practice (see Your account): the page loads Google's Firebase code from www.gstatic.com and keeps your sign-in in your browser. It also keeps in your browser the plan and the CCL language you chose, so they are still chosen after you sign in or come back from the payment page, and a note that you are signed in, so the site's header can show "Open practice". These notes hold no name or email address; the online practice deletes the plan and language once it has used them, and ignores them after 2 hours.

Visitor statistics

To learn how many people visit and which pages help them, this website and the online practice (including the Windows app) use Google Analytics, a Google service. It records the pages you open, the country and city your visit comes from (worked out by Google from your internet connection, not your device's location), your device and browser type, how you found us (for example a Google search), which links you follow (for example to an app store), and when you send one of our forms, the CCL language you chose (never your email address). It sets cookies with a random ID, kept for up to 2 years, so it can tell new visits from returning ones. Google does not store your IP address. We have switched off advertising features and Google signals, and we do not combine these statistics with your account. Google deletes the detailed records after 2 months; our reports keep only totals. Google may process this data outside Australia, for example in the United States. If your browser sends "Do Not Track" or "Global Privacy Control", Google Analytics is not loaded at all. To learn more, see how Google uses information from sites that use its services. We also count the steps of buying Premium, for example which plan was chosen and whether a payment was completed, without your name, email address or account.

What we do not do

Service providers

We use Google services to run CCL Mate: Firebase (Authentication, Cloud Functions, Cloud Firestore, Cloud Storage and Hosting) and Google Cloud Vertex AI (speech marking). Vertex AI may process mock-test recordings outside Australia. Google processes this data on our behalf under the Google Cloud data processing terms. If you install the app from Google Play, Google Play may check for app updates. Google Analytics (Visitor statistics above) and Google Fonts (This website above) are provided by Google under its own terms.

Card payments for Premium are processed by Stripe (see Payments above).

Children

CCL Mate is intended for adults preparing for the NAATI CCL test and is not directed at children under 13.

Your choices and rights

You can delete your account and its progress yourself in the app at any time. You can also ask us what information we hold about you, and ask us to correct or delete it. You can also complain to us, and if you are not satisfied, to the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

If this policy changes, we will update this page and the date above.

Contact

Questions or requests: admin@cclmate.com