Privacy Policy

Account data: email address, display name, and any profile details you choose to provide.

Learning data: answers, wrong-answer notebook, mock exam scores, course progress and study preferences, used to produce reports and recommendations.

Technical data: IP address, browser and device type, access time and page paths, used for security and troubleshooting.

Payment data: handled by a third-party payment provider; we do not store full card numbers.

To provide, maintain and improve the service and sync your progress;

To send essential email such as verification, password reset and important service notices;

To process subscriptions and billing;

To prevent abuse, fraud and security risks.

Strictly necessary cookies keep you signed in and remember your language; core features may break if you block them.

Only after you accept statistics, our own API collects public page paths, predefined source channels and campaign codes, mobile/desktop category, and loading and interaction performance. A random session code is kept in tab-scoped session storage for up to 24 hours. Analytics do not collect full query strings, external referrer URLs, IP addresses, email addresses or answer content.

To measure registration and first learning by source, a consented session is linked to an internal account ID upon successful registration. The server records only the first training visit or practice submission time. Separately, server-confirmed actions such as successful login, formal exam completion, paid AI responses, paid simulator saves and paid export generation are recorded by account with their action type, time, plan and any necessary random record ID for account support, service-use checks and refund disputes. We do not record AI prompts or answers, answer content, simulator content, or raw keyboard or mouse input. After statistics consent, a signed-in session also sends a tab heartbeat about every 30 seconds; estimated active time is counted only while the page is visible and there was recent interaction. It does not record page paths and is not exact online time. Administrators can see the account’s action history and estimated active time. Choose “Only necessary” to stop statistics and delete that tab’s visit analytics, attribution and active-time data. An account-unlinked random revocation marker is retained to prevent an in-flight request from recreating the data. Offline deletion is retried when connectivity returns or when you revisit in the same tab.

We share only the data necessary with processors that help us operate: email delivery, payment processing, cloud hosting and database services, and error monitoring.

These processors may handle data only on our instructions and not for their own purposes.

We keep the data while your account is active. After you delete your account we erase or anonymise it within a reasonable period, except where law requires retention.

Account-linked service action records are kept while the account exists and cleared when the account is deleted. Consented active-time records are also kept while the account exists and deleted when statistics consent is withdrawn for that tab. Raw visit, performance and attribution data have a rolling 90-day retention period with hourly expiry cleanup. After withdrawal, only a random-session revocation marker is kept for up to 90 days to reject late requests, with no source or account link. Backups expire under the existing backup rotation.

You may access, correct or delete your personal data, export it, withdraw consent, and where applicable restrict or object to processing.

If you are in the EU or UK you may exercise these rights under the GDPR; if you are in mainland China, under the Personal Information Protection Law. You may also complain to your local regulator.

We protect data with transport encryption and access controls. No method of transmission over the internet is perfectly secure, and we make no unconditional guarantee of absolute security.

The service targets practitioners and learners in functional safety and is not directed at children for the purpose of collecting personal information.

We will notify you of material changes by in-app notice or email.

Questions about this policy or your data? Contact support@fusacert.com.