Privacy Policy — Pipefitter Academy Pro

Last updated: 14 May 2026 · Version 1.0

      This policy explains what data Pipefitter Academy Pro collects, why, how long it is kept, and your rights. We collect only what is strictly necessary to provide the service.
    

1. Controller

The data controller is Artur Moniz, operating Pipefitter Academy Pro as an individual developer.
Contact: piping.arturmoniz@gmail.com

For EU/EEA users: the processing described in this policy has its legal basis in Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(f) GDPR (legitimate interests) where indicated.

2. Data We Collect

2.1 Account data (Google Sign-In)

When you sign in with Google, we receive:

Display name
Email address
Profile photo URL
Google account UID (used as your internal identifier)

We do not receive or store your Google password.

2.2 Subscription & billing data

Payments are processed by Paddle (Paddle.com Market Limited), our Merchant of Record. Paddle handles all payment card data, invoicing, and VAT compliance. We receive from Paddle only: subscription status, plan type, and transaction IDs. We never see or store card numbers, bank details, or billing addresses.

2.3 App data you create

Projects and saved calculations you create inside the app
Academy progress (modules completed, quiz scores)
App preferences (language, units system)

This data is stored in your personal Firestore document, access-controlled to your account only.

2.4 ISO Assistant uploads

When you use the ISO Assistant, photos or files you upload are sent to our Cloud Function, which forwards them to the Anthropic Claude API for analysis. Images are not stored on our servers after the response is returned. The Anthropic API processes them under Anthropic's Privacy Policy.

2.5 Usage analytics

We use Firebase Analytics (Google) to collect anonymous, aggregated usage events (e.g. "calculator opened", "PDF exported"). No personally identifiable information is included in these events. You can opt out via your device's advertising settings.

2.6 What we do NOT collect

Location / GPS data
Microphone or camera data
Contacts or call logs
Device files outside what you explicitly upload
Data from users under 13 years of age

3. How We Use Your Data

Purpose	Data used	Legal basis
Authenticate your account	Google UID, email	Contract
Deliver Pro features after payment	Subscription status from Paddle	Contract
Save your projects & progress	Projects, quiz scores, preferences	Contract
Provide AI-assisted ISO reading	Uploaded images (transient)	Contract
Improve the app	Anonymous analytics events	Legitimate interest
Send product updates (optional)	Email address	Consent (opt-in only)

4. Third-Party Services

Service	Purpose	Privacy policy
Google Firebase (Auth, Firestore, Hosting, Analytics)	Authentication, database, hosting, analytics	firebase.google.com/support/privacy
Paddle	Payment processing, subscription management, VAT	paddle.com/legal/privacy
Anthropic (Claude API)	AI analysis of ISO drawings (ISO Assistant)	anthropic.com/legal/privacy

No data is sold to, or shared with, any third party for advertising or profiling purposes.

5. Data Retention

Account & project data: retained while your account is active. Deleted within 30 days of account deletion request.
ISO Assistant images: not retained — processed and discarded in real time.
Analytics events: aggregated data retained up to 14 months (Google Analytics default).
Paddle billing records: retained by Paddle per their legal obligations (typically 7 years for tax records).

6. Your Rights

EU / EEA users (GDPR)

You have the right to:

Access — request a copy of data we hold about you
Rectification — correct inaccurate data
Erasure — request deletion of your account and all associated data
Portability — receive your project data in a machine-readable format
Objection — object to processing based on legitimate interest
Withdraw consent — for any processing based on consent (e.g. marketing emails)

To exercise any right, email piping.arturmoniz@gmail.com. We will respond within 30 days.

You may also lodge a complaint with your national supervisory authority (e.g. CNPD in Portugal, ICO in the UK, BfDI in Germany).

California users (CCPA / CPRA)

California residents have the right to know what personal information is collected, request deletion, and opt out of sale. We do not sell personal information. To exercise your rights, contact us at the email above.

Delete your account

You can delete your account from the Profile tab inside the app, or by emailing us. Account deletion removes all your data from Firestore within 30 days.

7. Security

All data is transmitted over HTTPS. Firestore access is protected by server-side security rules that restrict each user to their own documents. API keys and secrets are stored exclusively in Google Cloud Secret Manager and are never exposed in the client-side app bundle.

8. Children

Pipefitter Academy Pro is intended for professional tradespeople and vocational students aged 13 and over (16 in the EU/EEA). We do not knowingly collect data from children under these ages. If you believe a child has provided us with personal data, contact us immediately.

9. Changes to This Policy

If we make material changes, we will notify you via the app or by email at least 7 days before the change takes effect. The "last updated" date at the top of this page reflects the current version.

10. Contact

Artur Moniz
piping.arturmoniz@gmail.com