Privacy Policy

Learners — no personal data required. Hygi. does not ask for your name, email, phone number, contacts, photos, location, health data, or payment details. There is no learner account to create.

The learning data Hygi. stores is your progress — which lessons you have finished, quiz scores, badges, and the trophy. This is written to your device's local storage. It is not transmitted to us, it is not linked to your identity, and we cannot read it.

Hygi. also keeps a copy of anonymous usage events (quiz starts and completions, badge milestones, home-screen install signals, and which glossary terms you tap) in the same on-device storage so the in-app Insights dashboard can show you your activity. That log stays on your device and the "Clear this device's data" button on the Insights page erases it.

Separately, we collect anonymous product analytics so we can tell whether the lessons are working: page views, quiz starts and completions (lesson title, score out of total, and pass/fail), badge and trophy milestones, whether the app was launched from a home screen, and which homepage CTA variant you saw. These events carry no name, email, account, quiz answer text, or precise location. Analytics only runs after you tap "Allow analytics".

With your consent, we also collect anonymous lesson metrics in the backend to improve the course: which quiz questions are missed most, which glossary terms people tap, how many result-card images are shared or downloaded (and from which lesson or screen), and how many trophies are earned. Sharing a result card is entirely optional: we do not read your contacts, we do not know who you shared with, and we never receive the recipient's details — only an anonymous count of the share action. These rows are stored in our database but contain no account ID, name, email, or anything else that could identify you.

The floating Hygi Helper chat lets you ask questions about the course, glossary, and the cyber hygiene guide. Your conversation history is stored only in your browser's local storage; we do not keep it on our servers. When you send a message, it is passed to our AI gateway (Google Gemini via Lovable AI Gateway) to generate a response. Do not include passwords, account numbers, or other personal information in your messages. You can clear the chat history at any time by pressing the "Start a new conversation" button in the chat panel.

Hygi. contains no advertising SDKs and no cross-app or cross-site tracking, and we do not sell data or build advertising profiles. Services we use:

• Google Analytics 4 — anonymous product analytics only after you opt in. Google's handling of that data is governed by the Google Privacy Policy.
• Cloudflare Turnstile — an invisible CAPTCHA used on sign-in, support, and account-deletion forms to keep bots out. It may collect a token and basic technical signals to verify the request is from a human.
• Lovable AI Gateway / Google Gemini — powers the help chat. Chat messages are sent to generate replies but are not stored on our servers.
• Sign-in with Apple or Google — offered only to staff who need the admin and Insights pages. It is never required to read lessons, take quizzes, or earn badges, and we receive nothing from those providers beyond the email address tied to the account.

Lesson pages link out to public cybersecurity guides published by Dartmouth, Caltech, Cal Poly, Harvard T.H. Chan School of Public Health, and CISA. If you follow one of those links, that organization's own privacy practices apply. Our hosting provider may keep standard, short-lived server logs (such as IP address and requested page) for security and reliability; these are not used to build a profile of you.

The homepage may show different wording or placement for the "Start Learning" button so we can learn which version helps more people begin a lesson. We assign a random variant when you first visit and stamp it on anonymous analytics events. The variant ID is not linked to any personal information.

Because your progress lives only on your device, you are always in control. You can erase everything at any time by clearing site data for Hygi. in your browser or device settings, using "Reset progress" on the Support page, or by deleting the app from your home screen. That clears lessons, quizzes, badges, the trophy, and the on-device event log.

If you hold a staff account, you can permanently delete it — along with your email preferences and any admin role — from Account settings inside the app. Deletion is immediate and cannot be undone. You can also email builtstrong1@outlook.com to request deletion.

You can turn analytics off at any time from the Support page, or block it with your browser's tracking protection or a content blocker. Turning analytics off stops new anonymous events from being sent; it does not delete your on-device learning progress.

Hygi. is an educational app suitable for general audiences. It does not knowingly collect personal information from anyone, including children under 13, and it contains no ads, in-app purchases, or user-to-user communication.

These are the answers that apply to Hygi. for the Apple App Store privacy ("nutrition label") questionnaire and the Google Play Data safety form:

• Data used to track youNone. Hygi. does not track users across apps or websites and includes no advertising or attribution SDKs. Analytics data is not shared with data brokers or used for advertising.
• Data linked to youEmail address, and only for optional staff accounts used to reach the admin and Insights pages. Learners never need an account, and no learning activity is linked to an identity. Staff can delete their account and email in-app at any time.
• Data not linked to youProduct interaction and usage data: page views, quiz starts/completions with score, badge and trophy milestones, home-screen install events, glossary taps, missed quiz questions, optional result-card shares or downloads (an anonymous count only, with no recipient data), and homepage A/B variant. Collected anonymously via Google Analytics or stored in aggregate backend metrics only after the user opts in, and not linked to any identity. Your saved progress, badges, and chat history remain in on-device storage only.
• Contact info, identifiers, location, health, financials, contacts, photos, browsing historyOnly an email address for optional staff sign-in (Apple, Google, or email/password). No location, health, financial, contacts, photo, or browsing-history data is collected. CAPTCHA tokens are processed by Cloudflare Turnstile only when a form is submitted.
• Usage data / diagnostics / crash dataProduct interaction (usage) data is collected anonymously for analytics, only with consent. No crash-reporting SDK is present and no other diagnostics are collected.
• Data encryption in transitYes. The app is served over HTTPS/TLS and all third-party API calls (analytics, CAPTCHA, AI gateway) use encrypted connections.
• Data deletion request methodIn-app: staff accounts are deleted from Account settings (Delete account), which removes the auth user, email preferences, and roles immediately. Learners clear on-device data with Reset progress on the Support page, by clearing site data, or by removing the app. Anonymous analytics and lesson-metric events cannot be tied to an individual; requests can also be sent to builtstrong1@outlook.com.
• Account creation, third-party login, ads, in-app purchases, user-generated contentAccounts exist only for optional staff sign-in. No ads, no in-app purchases, and no user-generated content. Chat messages are processed by an AI assistant but are not stored on our servers or shared.
• Age rating / audienceSuitable for all ages (4+). No objectionable content, no communication features.

If this policy changes, we will update the date at the top of this page. Questions about privacy in Hygi. can be sent to the app's publisher, NorthBridge, at builtstrong1@outlook.com.