Privacy Policy

At MRPX Technologies LLC ("we," "our," or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Android application, visit our website, or interact with our services.

Android Application Privacy

Information We Collect

• Account Information: Username and email address for app registration
• Usage Data: App performance metrics, crash reports, and feature usage analytics
• Device Information: Device type, operating system version, and unique device identifiers
• Simulation Data: Training session data, progress tracking, and performance metrics

How We Use Your Information

• Provide and maintain the app service
• Personalize your training experience
• Improve app functionality and performance
• Send important updates and notifications
• Provide customer support

Payment Processing & Stripe Integration

Secure Payment Processing

We use Stripe, a PCI DSS Level 1 certified payment processor, to handle all credit card transactions. This ensures the highest level of security for your payment information.

Payment Information We Collect

• Billing Information: Name, email, and billing address
• Payment Method: Payment method type (credit card, debit card)
• Transaction Data: Payment amounts, dates, and subscription status

Stripe's Security Measures

• End-to-end encryption of all payment data
• PCI DSS Level 1 compliance
• Advanced fraud detection and prevention
• Secure tokenization of payment methods

User Registration & Data Protection

Minimal Data Collection

We follow the principle of data minimization and only collect information that is absolutely necessary for providing our services.

Information We Store

• Username: For app identification and login
• Email Address: For account recovery and communications
• Subscription Status: To manage your access to premium features
• Account Creation Date: For account management purposes

Information We Do NOT Store

• Passwords: All passwords are hashed using industry-standard bcrypt encryption
• Credit Card Numbers: Never stored on our servers
• Personal Identifiers: No SSN, driver's license, or government ID numbers
• Biometric Data: No fingerprint or facial recognition data

Data Storage & Security

Encryption Standards

• All data transmitted to and from our servers uses TLS 1.3 encryption
• Passwords are hashed using bcrypt with salt rounds
• Database connections are encrypted and secured
• API endpoints require secure authentication

Data Retention

• Active Accounts: Data retained while account is active
• Inactive Accounts: Data deleted after 12 months of inactivity
• Deleted Accounts: Complete data removal within 30 days
• Payment Records: Retained for 7 years for tax compliance

Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• Service Providers: With trusted third-party services (Stripe, hosting providers) that help us operate our business
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In the event of a merger, acquisition, or sale of assets
• Consent: With your explicit consent for specific purposes

Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Request data in a portable format
• Opt-out: Unsubscribe from marketing communications

Cookies & Tracking

Our website uses essential cookies for:

• User authentication and session management
• Website functionality and performance
• Security and fraud prevention

We do not use tracking cookies, advertising cookies, or third-party analytics that compromise your privacy.

International Data Transfers

Your data is processed and stored in the United States. We ensure that all data transfers comply with applicable data protection laws and implement appropriate safeguards.

Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Data Breach Response

In the unlikely event of a data breach, we will:

1. Immediately investigate and contain the breach
2. Notify affected users within 72 hours
3. Report to relevant authorities as required by law
4. Implement additional security measures
5. Provide guidance on protecting your information

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Sending you an email notification
• Updating the "Last Updated" date at the top of this policy

Your continued use of our services after any changes constitutes acceptance of the updated policy.