Effective Date: April 5, 2026 — Last Updated: September 24, 2026
This Privacy Policy describes how Arcane Visions LLC, doing business as ADVANCE Training Group (“we,” “us,” or “our”), collects, uses, and shares your personal information when you use our website and web application at advancece.app or the ADVANCE mobile app (together, the “Service”).
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.
When you create an account or use the Service, we collect the following information that you voluntarily provide:
When you access the Service, certain information is collected automatically through our infrastructure provider, Cloudflare:
As you use the Service, we generate and store data related to your activity, including:
We use these results to personalize your training and to show readiness: the Service schedules review cards from your past answers and shows your proficiency in each subject area. If you belong to a department, its training officers who hold the relevant permission can see your progress, results and readiness against the department’s standards, including suggested focus areas drawn from your results, and department reports summarize the same information. These results are study and training measures; the Service does not itself make decisions about your employment, certification or pay, and any such decision is made by people in your department.
Signal, the Service’s tutoring feature, accepts questions by typing or, optionally, by voice. The microphone is used only after you tap the microphone control, and recording stops when you tap it again or after the maximum length. The recording is uploaded through our server to our speech-to-text provider (see Section 3) to be turned into text, and is not stored by ADVANCE: our server forwards it for transcription and discards it, and the app does not save it on your device. The text of your question, the earlier questions and answers of the same conversation, and the passages of training content used to answer it are sent to our language-model provider (Section 3) to produce the answer. The Service does not add your name, email address or account identifier to these requests, but anything you type or say, including in earlier turns of the conversation, is sent as you entered it, so avoid including personal or patient details in your questions. Spoken answers (generated audio) are created by our text-to-speech provider from the answer text and passed through our server to your device without being stored on our servers. You can always type instead of speaking, and you can turn spoken answers off.
Your Signal conversation is kept only on your own device, in session storage for the current browser or app session; ADVANCE’s servers record only usage measurements for Signal (for example, seconds of audio transcribed and tokens generated), not the content of your questions or answers.
If you turn spoken answers on, the audio of an answer you have listened to is kept in your device’s memory for the current Signal session — within a fixed memory limit of about 12 MB — so that Play and a change of speed replay it without generating it again. It is discarded when you leave Signal, sign out or delete your account, and it is never written to your device’s storage or to our servers.
We process the information we collect for the following purposes:
We do not sell, rent, or trade your personal information to any third party. We share your data only with the following service providers that are necessary to operate the Service:
| Service Provider | Category | Purpose |
|---|---|---|
| Cloudflare, Inc. | Cloud Computing / Infrastructure | Hosts the Service, provides CDN, DDoS protection, DNS, Workers compute, D1 database, KV storage, and R2 object storage |
| Resend, Inc. | Communication Tools | Sends transactional emails (account verification codes, password-reset links, department invitations and welcome emails); receives your email address and the content of the message |
| OpenAI, L.L.C. | Speech-to-Text / Text-to-Speech | Transcribes voice questions you record for Signal and generates the audio of spoken answers. Receives the recording (for transcription) or the answer text (for speech) only; the Service does not add your name, email address or account identifier, though a recording contains whatever you say; neither the recording nor the generated audio is stored by ADVANCE. Under OpenAI’s published API data controls, API data is not used to train its models by default; its transcription endpoint keeps no abuse-monitoring log of your recording, and the text sent for speech generation may be kept in abuse-monitoring logs for up to 30 days. |
| Anthropic, PBC | Language Model | Generates Signal answers from the text of your question, the earlier questions and answers of the same conversation, and the training passages retrieved for it; the Service does not add your name, email address or account identifier, though the conversation includes whatever you typed or said. Under Anthropic’s published commercial data practices, API inputs and outputs are not used to train its models by default and are deleted from its systems within 30 days, except where longer retention is required to enforce its usage policy or by law. |
Each provider handles this data under its commercial terms with us in order to provide its service; the retention and training statements above for OpenAI and Anthropic summarize the default practices each provider publishes for API customers. A provider may keep data longer where its terms allow, for example to enforce its usage policies or where the law requires it, and data that is reported to a provider as feedback is handled under that provider’s feedback terms. No data is shared with advertisers, data brokers, or any other third parties.
The Service uses a limited number of cookies and similar technologies strictly necessary for functionality:
| Cookie / Token | Purpose | Duration |
|---|---|---|
| Session Token (JWT) | Authenticates your session and maintains your login state | Duration of session / token expiry |
| Refresh Token | Allows seamless session renewal without re-entering credentials | Up to 30 days |
| CSRF Token | Protects against cross-site request forgery attacks | Duration of session |
We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We do not engage in cross-site tracking or behavioral advertising.
Storage on your device. Besides the tokens above, the Service keeps a small amount of data in your browser’s (or the app’s) own storage so it works as expected: your sign-in refresh token; your preferences (selected program, whether spoken answers are on, speech speed); a copy of your selections in an in-progress Test or Exam so it can be resumed; a queue of study activity recorded while you were offline, until it is sent; and your Signal conversation for the current session only. Signing out or deleting your account clears the token, the conversation, the in-progress copies and that account’s speech-speed setting from that device; the remaining preferences (selected program, whether spoken answers are on) stay on the device and identify no one. In the native app, sign-in tokens are held in the device’s secure storage. Spoken-answer audio kept for replay (see 1.4) is held only in memory, never in this storage.
We retain your personal information for as long as you maintain an active account with the Service. Specifically:
When you delete your account in the app, your account record and the personal data above are deleted from our live database at once; a deletion requested by email is completed within 30 days. Copies that remain in database backups and the recovery history are removed after 30 days, and request logs after seven days; data already sent to the providers in Section 3 is retained by them as described there. Files that you or your department downloaded or exported (such as reports, certificates or spreadsheets) and emails we already sent you are outside our systems and are not changed by the deletion. If you were also signed in on another device, that device loses access the next time it contacts us; anything it stored locally, such as study activity recorded while offline, stays in that device’s browser storage, can no longer be sent to us, and is removed when that storage is cleared or the app is removed. Department records and security records are retained as described above, and anything else only where retention is required by law.
We implement appropriate technical and organizational security measures to protect your personal information, including:
While we strive to protect your information, no method of transmission or storage is 100% secure. If you become aware of a security vulnerability, please contact us immediately at andrew@advancece.app.
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors under 18 years of age. If we become aware that we have collected personal information from a minor under 18, we will take steps to delete that information promptly. If you believe a minor under 18 has provided us with personal information, please contact us at andrew@advancece.app.
Regardless of where you reside, you may:
To exercise any of the rights described in this policy, you may:
We will respond to verified requests within 45 days (or as required by applicable law). If we need additional time, we will notify you. We will not charge a fee for processing your request unless the request is manifestly unfounded or excessive. You may designate an authorized agent to submit requests on your behalf.
If you are unsatisfied with our response, you may appeal by emailing us. If your appeal is denied, you may contact your state’s Attorney General.
The Service does not track users across third-party websites and therefore does not respond to Do Not Track (DNT) signals. We do not engage in online behavioral tracking or advertising.
Depending on your state of residence, you may have additional rights under applicable state privacy laws. The table below summarizes the rights available under each state’s consumer privacy legislation. We do not sell personal data or use it for targeted advertising, and the Service does not use automated processing to make decisions that produce legal or similarly significant effects about you. It does use your study and assessment results to personalize your training and to report your readiness, as described in Section 1.3.
| State | Law | Rights |
|---|---|---|
| California | CCPA / CPRA | Access, delete, correct, opt-out of sale/sharing, limit sensitive data use, non-discrimination, “Shine the Light” disclosure |
| Colorado | CPA | Access, correct, delete, portability, opt-out of sale/targeted ads/profiling |
| Connecticut | CTDPA | Access, correct, delete, portability, opt-out of sale/targeted ads/profiling |
| Delaware | DPDPA | Access, correct, delete, portability, opt-out of sale/targeted ads/profiling |
| Florida | FDBR | Access, delete, opt-out of sale/targeted ads/profiling |
| Indiana | INCDPA | Access, correct, delete, portability, opt-out of sale/targeted ads/profiling |
| Iowa | ICDPA | Access, delete, portability, opt-out of sale/targeted ads |
| Kentucky | KCDPA | Access, correct, delete, portability, opt-out of sale/targeted ads/profiling |
| Maryland | MODPA | Access, correct, delete, portability; additional restrictions on sale and sensitive data |
| Minnesota | MCDPA | Access, correct, delete, portability, opt-out of sale/targeted ads/profiling |
| Montana | MCDPA | Access, correct, delete, portability, opt-out of sale/targeted ads/profiling |
| Nebraska | NDPA | Access, correct, delete, portability, opt-out of sale/targeted ads/profiling |
| New Hampshire | NHPA | Access, correct, delete, portability, opt-out of sale/targeted ads/profiling |
| New Jersey | NJDPA | Access, correct, delete, portability, opt-out of sale/targeted ads/profiling |
| Oregon | OCPA | Access, correct, delete, portability, opt-out of sale/targeted ads/profiling |
| Rhode Island | RIDPA | Access, correct, delete, portability, opt-out of sale/targeted ads/profiling |
| Tennessee | TIPA | Access, correct, delete, portability, opt-out of sale/targeted ads/profiling |
| Texas | TDPSA | Access, correct, delete, portability, opt-out of sale/targeted ads/profiling |
| Utah | UCPA | Access, delete, opt-out of sale/targeted ads |
| Virginia | VCDPA | Access, correct, delete, portability, opt-out of sale/targeted ads/profiling |
As additional U.S. states enact consumer privacy legislation, we will extend the same rights and protections to residents of those states. We apply the same practices to every user regardless of state: no sale of personal data, no targeted advertising, and account deletion in the app.
The Service is hosted on Cloudflare’s global network. Your data may be processed in the United States or other countries where Cloudflare maintains infrastructure. Signal voice recordings, question text and answer text are sent to the providers named in Section 3, which may process them in the United States or in other countries where they or their service providers operate. By using the Service, you consent to the transfer of your information to these locations.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised “Last Updated” date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:
Andrew Cohilas
Data Protection Officer
Arcane Visions LLC dba ADVANCE Training Group
43017 Hedgeapple Ct
Ashburn, VA 20147
Email: andrew@advancece.app