Privacy Policy

2. Information We Collect

We collect only what is "fair and reasonable" to provide our training and arcade services:

• Identity Data: Name, email address, and organization (if provided by your employer).
• Performance Data: Game completion status (Pass/Fail), total time played, and quiz answers.
• Financial Data: We use Stripe and Airwallex for payments. We never see or store your credit card numbers. We only see your "Digital Wallet" balance and transaction history.
• Technical Data: IP address and login timestamps (required for security and Firebase authentication).

3. How We Use Automated Decisions (APP 1.7)

To provide instant feedback, our software uses a computer program to calculate your game scores and issue unofficial certifications.

• How it works: The system analyzes your accuracy on quiz questions and the time taken to complete a scenario.
• The Effect: This determines if you "Pass" or "Fail" a specific training module.
• Your Rights: You have the right to request a manual review of any automated "Fail" result if you believe there was a technical error.

4. Digital Wallet & Arcade Balances

Our "Digital Wallet" functions as a reloadable stored-value system for game access.

• Expiration: Balances are valid for three (3) years from the date of your last top-up or activity.
• Reminders: We will send you an email notification 30 days before any balance is set to expire.
• Forfeiture: After 3 years of total inactivity, remaining balances are forfeited as a service maintenance fee.

5. Employer & B2B Transparency

If you are playing through a business account, your employer has access to a dashboard.

• What they see: Name, date of completion, game name, and Pass/Fail status.
• What they DON'T see: We do not share your specific incorrect answers or granular in-game choices with your employer, ensuring a safe learning environment.

6. Where Your Data Lives (International Transfers)

While we prioritize Australian data sovereignty, some data must travel overseas to function:

• Primary Database: All game scores and wallet balances are stored in Google Cloud (Sydney/Melbourne, Australia).
• Authentication: We use Firebase Auth. Your email and login metadata may be processed in global data centers (primarily the United States).
• Payments: Transaction data is processed globally by Stripe or Airwallex in accordance with PCI-DSS security standards.

7. Data Retention & Deletion

• Certification Records: We retain Pass/Fail history for seven (7) years to ensure your employer can meet their own insurance and audit requirements.
• Right to Delete: You may request the deletion of your account at any time. However, certain transaction records must be kept for legal/tax purposes under Australian law.