Privacy Policy

Last updated: 02 May 2024

In this Privacy Policy, we, 2nABLE, describe our collection, use and disclosure of personal information.

What types of personal information do we collect?

The principle of data minimisation has been applied throughout our products, where only data relevant to core functionality is collected. The 2nABLE app collects data on a user’s name, email, stage of training, role and progression through the app. Name, email, stage of training and role are collected and stored in our database when an account is made, which is mandatory to use the app features. Progression through the app is both stored locally on the app and in the database to allow data persistence and ensure progress is saved. After login an authentication token is also stored on your device to prevent repeated logins. This token is deleted upon logout or app deletion.

How do we use your personal information?

We may use personal information for internal purposes such as auditing, data analysis security analysis and research to improve our products and services.

To whom do we disclose your personal information?

The principle of least privilege is applied to our database with a series of security rules where only information directly relevant to a user and their use of the app can be accessed by them. For example, a user can access their personal information, such as email address, but this information is inaccessible to other users.

What security measures have we implemented?

2nABLE is GDPR compliant and prides itself on its data protection and security standards. All third parties that the app shares data with, such as for analytics tools and progression oversight, provides equal protection of user data as stated in this privacy policy and required by GDPR and App Store guidelines.

Your choices

Data is retained for 5 years after a user has completed the course. A user’s own personal data can be requested to be deleted or consent to use of personal data revoked at any point through contacting info@2nABLE.org. Once we have deleted your personal data, you will not be able to exercise the right to access, the right to erasure, the right to rectification or the right to data portability. Additionally, if you need any assistance regarding understanding your rights, please feel free to contact info@2nABLE.org.