Privacy Policy

Controller: Impulse Learning LLC, [address], [email protected].

1. What we collect

• Account data: name, email, password (stored hashed), certification level of interest.
• Usage data: questions answered, scores, weak-area analytics, mock-exam results, and app settings — to power your progress dashboard and adaptive engine.
• Watermark identifier: to deter content theft, the app overlays a watermark containing your account identifier and a timestamp on question screens. This is a security/anti-piracy measure.
• Payment data: processed by our payment processors (Stripe / Apple / Google). We do not store full card numbers; we receive limited billing metadata (e.g., subscription status, last four digits).
• Device/technical data: IP address, device/OS type, app version, and crash logs.
• Support communications: messages you send us.

2. How we use it

To provide and personalize the Service (adaptive practice, progress tracking), process subscriptions, secure the Service and prevent content theft/fraud, provide support, send service and (with consent where required) marketing emails, and comply with law.

3. Legal bases (GDPR, where applicable)

Performance of contract (providing the Service), legitimate interests (security, anti-piracy, product improvement), consent (marketing), and legal obligation.

4. Sharing

We share data with service providers acting on our behalf: hosting, database, analytics, email, and payment processors (Stripe, Apple, Google, and our hosting and email providers). We do not sell your personal information. We may disclose data to comply with law or protect our rights.

5. Data retention

We keep account and progress data while your account is active and as needed for legal/accounting purposes, then delete or anonymize it. You can request deletion (see Your rights).

6. Security

We use encryption in transit (HTTPS), hashed passwords, access controls, and the watermarking/anti-copy measures. No system is perfectly secure.

7. Your rights

Depending on your location, you may access, correct, delete, port, or restrict your data, and opt out of marketing. To exercise rights, email [email protected]. California and EU/UK residents have additional rights described here: [insert per attorney].

8. Children

The Service is intended for users 13+ (typically adult EMS students). We do not knowingly collect data from children under 13. If you believe a child provided data, contact us for deletion.

9. International transfers

If you are outside [COUNTRY], your data may be processed in [COUNTRY]; we use appropriate safeguards where required.

10. Changes

We will post updates here and, for material changes, notify you in-app or by email.

11. Contact

[email protected] · [mailing address] · Data requests: [email protected]