Privacy Notice

1. Who we are

Harjaspreet Singh, operator of Fault Tolerant (faulttolerant.dev), is the data controller for the personal data described here. That means we decide why and how it is processed. Contact us at privacy@faulttolerant.dev.

2. What we collect and why

• Account data — email address, display name, password hash or Google sign-in identifier, and optional profile details such as target role and experience level. Used to create and secure your account and personalise practice. Legal basis: performance of our contract with you.
• Content you create — designs, diagrams, notes, chat messages with the AI coach, interview transcripts, feedback, puzzle scores, and progress. Used to provide the service, save your work, and generate feedback. Legal basis: performance of our contract.
• Usage and technical data — pages viewed, features used, AI credits consumed, device and browser information, IP address, and error logs. Used for security, fraud prevention, troubleshooting, and product improvement. Legal basis: our legitimate interests in running a secure, working service.
• Support messages — what you send us by email. Used to answer you. Legal basis: legitimate interests.
• Marketing — if you opt in, your email for product updates. Legal basis: consent, withdrawable at any time.

Payment card details are collected and processed by Paddle, not by us. We never see or store your full card number.

3. Who we share it with

• Hosting, database, and authentication providers that run the platform on our behalf.
• AI model providers, which receive the design and question content needed to generate feedback.
• Paddle, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance, and invoicing.
• Analytics and error-monitoring tools used to keep the service reliable.
• Professional advisers (legal, accounting) and authorities where required by law.

We do not sell your personal data.

4. International transfers

We are based in India. Our providers may process data outside your country and outsideIndia, including outside the UK and EEA. Where that happens, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or the consent mechanisms available under Indian data protection law.

5. How long we keep it

We keep account data and your saved work for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 90 days, except where we must keep records longer for legal, tax, or accounting reasons. Aggregated, non-identifying statistics may be retained indefinitely.

6. Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its processing, receive a portable copy, and withdraw consent. Under India's Digital Personal Data Protection Act, 2023, you can nominate another person to exercise your rights in the event of death or incapacity. To exercise any of these, email privacy@faulttolerant.dev. We respond within one month. If you are in the UK or EEA, you also have the right to complain to your local data protection supervisory authority.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, hashed credentials, access controls, and row-level database restrictions so accounts can only read their own data. No system is perfectly secure, so we cannot guarantee absolute security.

8. Cookies and local storage

We use strictly necessary cookies and browser storage to keep you signed in, remember interface preferences such as panel width, and protect against abuse. These are required for the service to work. If we add analytics or marketing cookies, we will ask for your consent first and you will be able to change your choice at any time.

9. Children

The service is not intended for children under 16, and we do not knowingly collect their personal data.

10. Changes

We may update this notice and will revise the "last updated" date above. Material changes will be highlighted in the app or by email.