Privacy

A transparent privacy baseline for the product checkpoint.

This checkpoint does not enable public account registration, payment or uploaded answer sheets. The final VPS policy must be reviewed against the exact providers and retention periods configured before launch.

Data minimisation

Collect only information needed for authentication, examination preferences, progress, enrolment, support and security. Passwords are stored only as strong hashes; payment card details are handled by the payment provider and are not stored by the application.

Learner controls

Notification preferences, leaderboard participation and session revocation are designed as learner controls. Administrative access is permission-based and audited.

Launch review

Before public registration opens, the platform operator must publish the controller identity, contact channel, provider list, retention schedule and applicable user-rights process.