Privacy Notice

1. Who we are

ViQtor Davis Holdings (UK IMG Navigator) decides how and why your personal data is processed and is therefore the controller. Contact: support@viqtor.co.

2. Personal data we collect and why

• Account data (name, email address, login credentials or Google sign-in identifier) — to create and secure your account. Legal basis: performance of a contract.
• Pathway and planning data (qualification details, exam dates, tasks, saved tool results, uploaded evidence metadata) — to provide the planner and generate your roadmap. Legal basis: performance of a contract.
• Support messages and correction reports — to answer you and improve accuracy. Legal basis: legitimate interests.
• Essential security and error logs (sign-in events, audit records of sensitive actions, request logs and error reports) — to keep the service secure and working. App-controlled error reports carry only fixed diagnostic categories and known page/source templates, never arbitrary error messages or stack text, your answers, notes, file names, emails or link tokens. Unknown routes are reported generically. Legal basis: legitimate interests. These are not optional analytics.
• Optional analytics — only if you choose “Allow”: which pages (as route names such as “/workspaces/-”) and steps are used, result categories, and whether you came back on a later day. When signed in, these events are linked to your account; when signed out, to a random id kept in this browser tab. Never your answers, notes, uploaded-file details or link tokens. Nothing optional is sent or stored before you choose, and withdrawing stops it immediately. Legal basis: consent.
• Team workspaces (pilot) — only the tasks and study plans you choose to share, plus your name and role, are visible to that team. Your profile, saved results, study logs and evidence stay private.
• Pilot studies — if the operator invites you to a pilot and you give consent in the app: your enrolment and consent dates, short ratings and optional comments you submit, and (if you allow optional analytics) whether you reopened a saved result or updated your progress. Please do not include medical or other sensitive details in comments. You can delete feedback or withdraw at any time. Legal basis: consent.
• Notification preferences — to show in-app reminders and, if email reminders are switched on in future, to send only the emails you have asked for. Legal basis: consent, which you can withdraw at any time.

3. Who we share data with

• Service providers / subprocessors — hosting, database and email delivery providers acting on our instructions. Optional analytics are stored in our own database; they are not sent to an advertising or third-party analytics service.
• Payments — we are not currently collecting payments, so no payment provider receives your data for new purchases. Records of earlier subscriptions are kept only as needed for tax, accounting and refunds.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where required by law or to protect our legal rights.

We do not sell personal data.

4. International transfers

Some providers process data outside the UK and EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses together with appropriate additional safeguards.

5. Retention

Account and planning data is kept while your account is active. When you delete your account, your data and uploaded files are removed by an automatic process that retries until each step is confirmed; uploaded files are re-checked for a few hours afterwards in case an upload link was still in use. Automatic backups of your task list are kept for 30 days. Unsaved tool results waiting for sign-in stop being available after 24 hours and are removed by an hourly clean-up. Copies of reminder emails are kept for up to 30 days so a failed send can be retried safely, then cleared. Evidence downloads (ZIP files) expire shortly after creation and are then removed. Security and audit logs are kept for up to 12 months and removed by a weekly clean-up. Pilot studies show their end date and removal date before you consent: identifiable pilot records (enrolment, feedback, comments and internal notes) are removed by a daily clean-up 90 days after the pilot ends — sooner if it ends early — keeping only anonymous totals. Optional analytics events follow your account: they are deleted when you delete your account. Records required for tax or accounting are retained for the period required by law. We do not make promises about backups kept by our hosting providers beyond these periods.

6. Your rights

Depending on where you live, you may have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent. You can delete your account and data at any time from Billing in your settings, or email us. We respond within one month. If you are in the UK or EEA you can also complain to your supervisory authority (in the UK, the Information Commissioner's Office).

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, row-level access controls, least-privilege service credentials, breached-password screening at sign-up, and audit logging of sensitive operations.

8. Cookies

We use strictly necessary cookies and local storage for sign-in sessions and your theme preference, and a record of your optional-analytics choice. Optional analytics storage (a per-tab id and the day of your last visit) is used only after you allow it and is cleared when you withdraw. We do not use advertising or cross-site tracking cookies. You can clear or block cookies in your browser, though sign-in will not work without the essential ones.

9. Your privacy choices

10. Changes and contact

We will update this notice as the service changes and revise the date above. Questions or requests: ViQtor Davis Holdings, support@viqtor.co.