01 Who We Are
First Aid Ninja is an AI-powered scenario generation tool for UK first aid trainers, a UK-based business.
Data controller: First Aid Ninja. Contact: [email protected]
We are subject to UK GDPR and the Data Protection Act 2018.
02 What Data We Collect
We collect minimal data. Specifically:
- Email address — collected at the point of purchase to deliver your licence key and for subscription management.
- Payment information — processed securely by our payment provider(s). We do not store card details.
- Scenario generation inputs — the configuration parameters you enter (difficulty, environment, qualification level, and any custom text) are transmitted to Anthropic's API to generate output. These are not stored on our servers.
We do not use tracking cookies, advertising pixels, or behavioural analytics tools. We do not collect your name, location, or any information beyond what is listed above.
03 Data Stored in Your Browser
Your scenario bank, history, favourites, settings, and licence key status are stored locally in your browser using localStorage. This data never leaves your device and is not accessible to us.
Clearing your browser data will delete your locally stored scenarios and settings. We recommend exporting anything you wish to keep.
04 How We Use Your Data
We use the data we collect solely for:
- Delivering your licence key and activating your subscription tier.
- Processing payments and managing your subscription.
- Sending transactional emails (receipts, licence key delivery, renewal notices).
- Responding to support or legal enquiries.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
05 Third-Party Services
Important: Do not enter personal data, candidate names, or real patient information into generation fields. These inputs are transmitted to Anthropic's API.
We use the following third-party services to operate the Service:
- Anthropic — your scenario generation inputs are processed by Anthropic's Claude API. Anthropic's privacy policy applies to data transmitted to their API.
- Payment provider(s) — payment processing is handled by a third-party provider. Their privacy policy governs payment data.
We do not use Google Analytics, Facebook Pixel, or any other third-party analytics or advertising trackers.
06 Cookies
We do not use tracking or advertising cookies. The Service uses essential browser storage (localStorage) to save your settings and scenario bank locally. This is strictly functional and does not track your behaviour across sites.
07 Data Retention
We retain your email address and purchase records for as long as your subscription is active and for up to 6 years afterwards, as required for tax and accounting purposes under UK law.
Scenario generation inputs transmitted to Anthropic's API are not retained by us. Please refer to Anthropic's data retention policy for details of how they handle API data.
08 Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data (subject to legal retention obligations).
- Object to or restrict processing.
- Data portability.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
09 Security
We take reasonable technical and organisational measures to protect personal data. Payments are processed over encrypted connections by our payment provider. We do not store payment card details.
10 Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page will always reflect the most recent version. For significant changes, we will notify subscribers by email.
11 Contact
For any privacy-related questions or data requests:
First Aid Ninja is a UK-based business.