Legal
Privacy Policy
Last updated: April 2026
1. Information We Collect
We collect your email address when you register or accept an organizational invitation. We collect mission progress data, capstone submission scores, and session activity timestamps. We do not collect payment information, location data, or device identifiers beyond what is technically necessary to operate the platform.
2. How We Use Your Information
Your data is used exclusively to operate the training platform: to track your progress, generate performance reports for your organization's manager, and authenticate your sessions. We do not sell, license, or share your personal data with third parties for marketing purposes.
3. Data Sharing
Your progress data is visible to the manager of your organization within the platform. Platform administrators can access aggregated analytics for operational purposes. We use Supabase as our database and authentication provider, subject to their privacy policy.
4. Data Retention
Your account and progress data are retained for the duration of your organization's active subscription plus 90 days. Following that period, data is deleted unless a retention extension is requested in writing.
5. Security
Access to the platform requires authentication via magic link email. All data is transmitted over HTTPS. Database access is controlled by row-level security policies that restrict each user to their own data.
6. Your Rights
You may request a copy of your personal data, request deletion of your account, or ask questions about how your data is used by contacting us through the Contact page.
7. Changes to This Policy
We may update this policy as the platform evolves. Material changes will be communicated via email to registered users.