1. Scope and roles

This Policy applies to the TBS public portal, account activation, learner dashboard, game, Career Profile, activity feedback, and related support operations.

A company or institution may sponsor your access. Depending on the programme agreement and applicable law, Standout PVT Ltd, Luminary Learning Solutions, and the sponsor may have different privacy responsibilities.

2. Information TBS collects

Account and entitlement

• email address or legacy username;
• password hash, authentication provider, account status, and last login time;
• sponsoring organisation, membership, Access Code batch, claim record, and activation time;
• Terms and Privacy versions accepted, acceptance time, source, and relevant request details.

Learner profile

• display name, age, sex, region or nationality reference, and work experience;
• avatar, narration voice, captions, audio, motion, and other comfort preferences;
• profile-completion status.

Learning and gameplay

• current scene, journey position, choices, attempts, activity results, and completion;
• Career skill scores, evidence coverage, and mapped activity evidence;
• written reflections, chats, conversation practice, feedback, and saved drafts;
• submission identifiers used to prevent duplicate scoring and replay farming.

Technical information

• session cookies, browser/device information, IP address, request metadata, and security logs;
• errors and performance records used to maintain and protect the service;
• support communications you choose to send.

3. How information is used

• validate one-time Access Codes and connect learners to the correct sponsor;
• create accounts, authenticate users, maintain sessions, and block unauthorised game access;
• save and restore exact game progress;
• deliver activities, feedback, narration, captions, and accessibility controls;
• evaluate responses and calculate backend-authoritative skill evidence and scores;
• prevent duplicate submissions, replay farming, fraud, abuse, and security incidents;
• support learners, investigate errors, and improve reliability;
• produce sponsor reporting within approved programme and privacy boundaries;
• meet contractual, legal, accounting, and compliance responsibilities.

4. Information available to sponsoring organisations

Sponsors may need evidence that purchased seats were activated and used, and that learners progressed through the programme. Intended reporting may include:

• learner identity and organisation membership;
• Access Code activation status;
• started/not started status, last active time, current journey position, and completion;
• activity evidence coverage, Career skill scores, skill-group summaries, and aggregated skill gaps;
• group-level participation and completion trends.

5. AI-assisted and automated processing

Some activities may send submitted text, relevant activity context, and identifiers to an AI-assisted service to generate evaluation or feedback. Results may be stored with the activity record so progress and evidence can be maintained.

Automated output may be inaccurate. TBS should minimise data sent to external providers and use appropriate service, security, and data-use terms.

6. Voice input

Voice input is optional. The current version uses browser-provided speech recognition to fill a text response that the learner can review or edit before sending.

• TBS does not intentionally upload or store raw microphone audio in Voice Input v1.
• Your browser, operating system, or speech-recognition provider may process audio under its own terms.
• TBS receives the transcript when the learner explicitly submits it through the activity.
• Typing remains available as the fallback.

7. Cookies and local preferences

TBS uses an essential session cookie to keep you signed in and protect authenticated requests. It is required for the portal and game.

The game may store non-sensitive comfort preferences in the browser. The current service does not use advertising cookies. Optional analytics or marketing technology would require an updated notice and consent approach.

8. When information may be shared

• with the sponsor within the reporting boundary above;
• with hosting, database, media-delivery, security, support, and AI providers acting for TBS;
• with professional advisers and auditors where reasonably necessary;
• with authorities or other parties where required by law, safety, or security;
• with a legitimate business successor, subject to appropriate safeguards.

TBS does not sell learner personal data as an advertising product.

9. Security

TBS uses controls including password hashing, server-side sessions, CSRF protection, one-time hashed Access Codes, row-locked code claims, rate limiting, role checks, membership checks, and backend-authoritative game access.

No online service can guarantee absolute security. Use a unique password and protect your device and account.

10. Retention and deletion

TBS retains account, membership, code-audit, consent, progress, skill, and activity information for as long as reasonably needed to deliver the programme, preserve progress, meet sponsor agreements, resolve disputes, prevent fraud, and satisfy legal obligations.

Some records—such as claimed-code audit, consent history, security logs, or records needed for legal claims—may need to remain after access ends.

11. Learner choices and rights

Depending on applicable law and programme arrangements, you may be able to request access, correction, deletion, restriction, or objection; withdraw optional consent; or raise a concern with TBS, the sponsor, or an appropriate regulator.

12. Changes to this Policy

TBS may update this Policy when the portal, reporting model, AI services, infrastructure, or legal requirements change. Material updates will use a new version and may require acceptance before game access.

13. Privacy questions and contact

For privacy, data-rights, or legal requests, contact compliance@thrivebystandout.com or call +94 7722 666 22. Learners may also contact their sponsoring organisation for programme-specific questions.