Privacy Policy

1. Overview

DAX Trainer is a Power BI DAX practice platform. This Privacy Policy explains how we handle information when you browse concept pages, create an account, submit verification answers, appear on leaderboards, request a password reset, or use the admin tools.

This policy reflects the current app design. If our legal entity, hosting providers, analytics tools, payment tools, or email providers change, we will update this page.

2. Information We Collect

• Account information: email address, display name, country, password hash, role, account creation date, and account update date.
• Learning activity: concepts started or completed, answer attempts, numeric verification results, completion dates, points, and leaderboard position.
• Admin content: exercise text, PBIX build instructions, answer keys, uploaded PBIX files, preview images, completed files, and upload metadata.
• Password reset data: hashed reset tokens, reset request timestamps, expiry timestamps, and whether a reset token has been used.
• Technical data: server logs, IP address, browser or device data, request timestamps, error logs, and security events generated by the hosting platform.
• Communications: messages you send to us, support requests, and email delivery data for account-related messages.

3. How We Use Information

• Create and secure learner and admin accounts.
• Authenticate sign-ins and keep users signed in with secure session cookies.
• Save concept progress and mark concepts as understood after correct answers.
• Operate global and country leaderboards.
• Provide password reset links and account recovery.
• Host downloadable PBIX practice files and related images.
• Improve content quality, diagnose bugs, prevent abuse, and protect the service.
• Comply with legal obligations and enforce the Terms of Service.

4. Public Leaderboards

Leaderboards may show your display name, country, points, completed concepts, and ranking. Do not use a display name that contains private information if you do not want that information shown publicly.

5. Cookies and Local Storage

DAX Trainer uses an authentication cookie to keep signed-in users logged in. The cookie is HTTP-only, limited to the site, and used for account security. We may also use essential storage or cookies required by hosting, security, and framework infrastructure.

6. Passwords and Security

Passwords are stored as hashes, not plain text. Password reset links use random tokens; the app stores a hashed version of each token and expires reset links after one hour.

No internet service can promise perfect security. We use reasonable technical and organizational measures for the type of data processed by the app, including secure cookies, server-side session validation, hashed passwords, and limited admin access.

7. Service Providers

We use service providers to host the website, store data, deliver account emails, and operate security or infrastructure features. These providers may process data only as needed to provide their services. Current or expected providers include:

• Vercel for hosting and deployment.
• MongoDB Atlas for database storage and file storage.
• An email delivery provider, such as Resend, for password reset emails.
• GitHub for source control and deployment workflows.

8. Legal Bases Where Applicable

If privacy laws such as the UK GDPR or EU GDPR apply, we process personal data under one or more legal bases: providing the service you requested, legitimate interests in running and improving the app, consent where required, and compliance with legal obligations.

9. International Transfers

The app and its providers may process information in countries other than where you live. Where required, we rely on appropriate safeguards or provider commitments for international data transfers.

10. Data Retention

• Account data is kept while your account remains active.
• Progress and leaderboard data is kept so your learning history remains available.
• Password reset tokens expire after one hour and are removed through database cleanup.
• Server logs and backups are retained according to provider retention schedules.
• Admin-uploaded PBIX files and images remain until an admin removes or replaces them.

11. Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, export, or object to certain uses of your personal data. You may also ask us to close your account or remove leaderboard information associated with your account.

To make a privacy request, contact privacy@powerbidaxexercise.com. We may need to verify your identity before completing the request.

12. Children

DAX Trainer is not directed to children under 13. If you believe a child has provided personal information without appropriate consent, contact us so we can review and remove it.

13. Changes

We may update this Privacy Policy as the app changes. If changes are material, we will update the effective date and provide a reasonable notice inside the app or by email.

14. Contact

For privacy questions, data requests, or security concerns, email privacy@powerbidaxexercise.com.