What SafeStart stores about you

• Your account — the email address and password you sign up with. These are held by Firebase Authentication; the app itself never sees or stores your password.
• Your username, the role you have (learner, trainer, or owner), the cohort you're assigned to, when your account was created, and when you last opened the app.
• Your quiz attempts — for every Pre-Quiz, Post-Quiz and Time Spaced Review: your score, and which individual questions you got right or wrong. The per-question record is what makes Review Questions work, and what your trainer sees, anonymously and counted across the whole group, in the most-missed view.
• Which topics you've opened, so your home screen can show what you've started.
• Your notes, and any questions you submit through “Ask a Question”. Questions carry your username, because someone has to be able to answer you.
• A notification subscription, but only if you turn notifications on. Turning them off deletes it.
• The dates you opened the app — the calendar date only, once a day, so your trainer can see whether the group is still using SafeStart after class. Not the pages you visited, not the times, and nothing about your device.
• Your app session activity — a one-way digest of the sign-in cookie, your internal account id and role, and the last time that session used the server. The cookie and password are not stored in this record. It exists only to sign owners/trainers out after 30 inactive minutes and learners after 8 inactive hours.

Your Field Checklist ticks stay on your own phone and are never sent to the server.

Your notes are private to you. No trainer or administrator can read them.

Your trainer can see your username, your scores per course, when you last opened the app, and any question you submitted — for the learners in their own cohort only. The owner can see the same for every cohort, and can export scores as a spreadsheet for training records. Nobody sees your password.

In Google Cloud Firestore, in Google's europe-west4 region (the Netherlands).

Your training record is kept indefinitely.Your quiz scores and the topics you've opened have no expiry date, and that is a deliberate choice rather than an oversight: a training record that disappears after a few months is not much of a training record, and it is the thing you show an employer or a trainer is asked for during an audit, sometimes years later. You can download it yourself at any time, and you can ask for it to be deleted (see below) — deletion is how it ends, not the passage of time.

The record of a deletion is kept for 12 months, then removed automatically. It holds your username, the internal id of your sign-in account, the date the deletion was asked for, and whether it finished — and nothing from your training record itself. It exists so that “was my data actually deleted, and when?” has an answer for a reasonable period afterwards, and so that a deletion interrupted halfway can be spotted and completed rather than quietly leaving half of it behind.

App-session records last no longer than the session cookie's 14-day absolute lifetime. They are removed sooner on sign-out or account deletion, and they stop granting access after the inactivity period described above.

If your username was ever changed, a record of that change — the old name, the new one, and the date — is kept for 12 months as well, then removed automatically. Only the owner can rename an account, and this is what makes it possible to answer afterwards whether it happened and when.

The dates you opened the app are kept indefinitely too, alongside the training record they sit next to, and are deleted with it.

SafeStart uses no third-party analytics, no advertising, and no tracking across other websites. There is no Google Analytics here, no advertising pixel, and no script from another company running in this app. The one thing SafeStart measures about usage, it measures itself: the calendar dates you opened it, described above, stored in the same database as everything else and visible only to your own trainer. Nothing about you is sold or shared with anyone outside your own training programme.

You don't need to ask anyone. Home → Download my training recordgives you a spreadsheet of every course you've taken here and your best score in each quiz — the same record your trainer sees, for you only. It downloads straight from your own account.

If you want something the export doesn't cover — your notes, your submitted questions, or anything else held about you — email admin@safestart.art and ask.

Email admin@safestart.art. The owner can delete your saved data from within the app, which removes your account record, your topic history, every quiz attempt, your notes, your submitted questions, and the record of the dates you opened the app. This cannot be undone.

Two things need saying plainly. A record that a deletion happened — your username and the date — is deliberately kept afterwards, so the deletion itself is auditable. And your sign-in account (your email address, held by Firebase Authentication) is removed separately, so say if you want that gone too — otherwise the email address stays, even once the training data is gone.

Your anonymous contribution to the group-wide “most missed questions” counts stays, since it holds no identifying information — only a tally of how often each question was answered wrongly, across everyone.

SafeStart is a companion to classroom HSE training, not certified training. The certificate it produces confirms you completed a course here; it is not a regulatory certification and does not replace one.