Privacy Notice

1. Who we are

ASVAB Command Center is operated by Drift Easy (“we”, “us”). For the personal data described below, Drift Easy acts as the data controller.

2. Personal data we collect

• Account data: email, password (hashed), callsign / display name, optional service-branch preference, optional MOS targets.
• Usage data: quiz answers, scores, drill history, fitness logs, recruit–recruiter relationships, redemption-code activity.
• Technical data: IP address, device/browser info, session identifiers, error logs.
• Support data: messages you send us through the in-app support channel.
• Marketing data (optional): subscription preferences if you opt in to product emails.

Payment-card and billing-address data are collected directly by our reseller Paddle and are not stored by us.

3. Why we use it & legal basis

• Provide the Service (account creation, scoring, recruiter dashboards, code redemption) — performance of contract.
• Security & fraud prevention — legitimate interests.
• Customer support — performance of contract / legitimate interests.
• Improve the Service (aggregate analytics, error monitoring) — legitimate interests.
• Legal compliance (tax, accounting, lawful requests) — legal obligation.
• Marketing emails (only if you opt in) — consent, which you can withdraw at any time.

4. Who we share it with

• Paddle.com Market Ltd — Merchant of Record. Paddle handles checkout, payments, billing, tax compliance, invoicing, and refunds. See Paddle’s Privacy Notice.
• Hosting & infrastructure providers (database, authentication, file storage, error logging) operating as our processors.
• Recruiters — if a recruit redeems a recruiter’s code, that recruiter sees the recruit’s callsign, readiness status, weak categories, and bonus targets in their recruiter dashboard. Recruits opt in by entering the recruiter’s code.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law or to protect our rights.

We do not sell your personal data.

5. International transfers

Data may be processed in countries outside your own, including the United States and the European Union. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We keep account and usage data while your account is active and for a reasonable period afterwards (typically up to 24 months) for support, dispute resolution, and legal-compliance purposes. Transaction records are kept for the period required by tax law (typically 7–10 years), held primarily by Paddle. We delete or anonymise data when it is no longer needed.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data or complete incomplete data;
• Request deletion of your data;
• Restrict or object to certain processing;
• Data portability;
• Withdraw consent for processing based on consent;
• Lodge a complaint with your local data-protection authority.

To exercise these rights, contact us via the in-app support channel. We will respond within one month.

8. Security

We use industry-standard technical and organisational measures including encryption in transit, hashed passwords, role-based access control, and Row-Level Security on our database. No system is perfectly secure, but we work hard to protect your data and notify users of material incidents where required.

9. Cookies

We use only essential cookies and similar technologies needed to keep you signed in and to operate the Service. We do not currently use third-party advertising or cross-site tracking cookies. If this changes, we will update this notice and request consent where required.

10. Children

The Service is intended for users aged 13 and older (or the age of digital consent in your jurisdiction). We do not knowingly collect data from younger children. If you believe a child has provided us data, contact us and we will delete it.

11. Contact

Questions about this notice or how we handle your data? Contact Drift Easy via the in-app support channel. For payment-related privacy questions, contact Paddle at paddle.net.