Privacy policy

1. Who is responsible for the data

Information about workers who complete training on the platform belongs to their employer: the organization that enrolled them. The organization is the controller of the database under the law: it decides who is trained, which details are entered and what they are used for. The company is the "holder" (processor) that processes the information for the organization, on its instructions and under a data processing agreement signed between the parties.

For enquiries sent through the website's contact form, and for administrator accounts and their activity log, the company itself is the controller.

2. What is kept about a worker

About a worker completing training, the following is kept, only as far as the organization entered it or the worker provided it:

• Account details: full name, employee number (as the organization defines it; some organizations use the national ID number), phone and e-mail (where given), preferred language, the job roles the organization assigned you, and whether you joined yourself through an invitation link.
• Training progress: how far you got, which videos you watched to the end, the answer you chose to each question, the score (for information only — nobody fails), the start and completion times, the language you took the training in and the certificate's expiry.
• The attestation at the end of a training: the name as you confirmed it, the account's employee number (a different number cannot be confirmed), the time, and the signature — drawn on the screen or, if you chose, your typed name — kept as an image.
• Acknowledgements of a job role's risk summary: the name you typed, the exact text you were shown, its language and the time.
• Where the organization runs safety briefings: your attendance and your signature on the administrator's tablet.
• Where a training requires a practical sign-off: the supervisor's name, the date, their note and their signature.
• Where the organization enabled hazard reporting: the reports you filed — kind, description, place and time — and one photo if you attached it. Please do not photograph people when there is no need to.
• Sign-in data: the time of your last sign-in, the number of failed attempts and the time your account was locked if it was; one-time sign-in codes, kept hashed only and deleted after a day; and, if you unsubscribed from reminders, when.
• A record of the messages sent to you — invitation, sign-in code, reminder: the channel, the delivery state and the sending provider's message id, without the message's content.

The platform collects no location data, no biometric data and no medical data. The signature image is not used for automatic identification; it is printed on the certificate and in the worker's training file, as section 5 describes.

3. Other information kept

• About an organization's administrators: name, e-mail, phone and role, and an activity log of which administrative actions were taken, by whom and when. The log records which fields changed, not their values, and holds no passwords, codes, signatures, e-mail addresses or phone numbers.
• About people who write through the website: the details entered in the form — name, company, phone, e-mail and message — and the language they wrote in.
• Connection data: your IP address is used only as a counter for request rate limits and is deleted when the counting window ends (minutes to an hour). Our server logs record, for each request, the path, the outcome, the time taken and the user and organization id — no IP address, no form contents, no passwords or tokens. The hosting provider may record connection data on its own network under its terms.
• Fault records: when a request fails or the app crashes, the time, the page path, the error message, technical details of the fault and the user id are recorded, so that the reference number shown on the screen lets us find the event. These records are deleted automatically after 90 days.

4. What the information is used for

The information is used only for the following purposes:

• To let you sign in and complete the training your organization assigned to you.
• To record that the training was done — by whom, when, in which language and with which signature — and to issue a certificate.
• To let your organization and its safety officer know who was trained, who was not and when a refresher is due, and to present the records to a labour inspector as the law requires.
• To send you an invitation to the training and a sign-in code, and, on plans that include reminders, one reminder by e-mail 30 days before your certificate expires. You can unsubscribe from reminders through the link in the message.
• To secure the system, find faults and give support.

The details of people who completed a training are used for no other purpose. The platform carries no advertising, no behavioural analysis for marketing, no automated decision-making about you, and no sale or rental of information.

5. Who sees the information

• You — your own trainings, certificates, and the reports you filed and their status.
• Your organization's administrators and safety officer — the workers' details and training records, including a report that can be downloaded as a file, and each worker's "inspector file": every certificate with its signature, language and topics, and the signatures on briefings and practical sign-offs, to show a labour inspector. You do not see the internal notes administrators write on a hazard report.
• The platform's administrators at the company — for operation, support, security and writing the training content only, under a duty of confidentiality.
• Whoever scans the QR code on your certificate (for example a guard at a plant gate) — and only your first name and the initial of your last name, the organization's name, and for each training assigned to you: valid (until when), expired or not done. Your employee number, phone, score, dates and signature are not shown. The code stops working if your account is deactivated.

One organization's information is not accessible to another. Information is not passed to any third party other than the sub-processors listed in section 7, and to a competent authority where the law requires it.

6. Cookies and browser storage

The platform uses no cookies, and loads no third-party analytics, advertising, fonts or scripts. Your browser keeps only what the apps need to run:

• In the workers' app: the sign-in token (removed when you sign out, and expired after 12 hours in any case); the language and colour theme; the organization and employee number you last signed in with, to fill them in next time; the channel you chose for codes; and whether you hid the presenter character. A draft of a hazard report or of the attestation form is kept until the tab is closed — never the photo or the signature.
• In the administration interface: the sign-in token, the language, the colour theme, the selected organization and the state of the menu.
• On the website: the language and colour theme only.

The employee number kept for convenience stays in the browser after signing out. On a shared device you can type over it or clear the site's data in the browser.

7. Where the information is stored, and sub-processors

The information is stored on cloud servers of the company's hosting provider. These servers may be located outside Israel; transfers to them are made under the Protection of Privacy Regulations (Transfer of Data to Databases Abroad), 5761-2001. The sub-processors that receive personal information:

• Railway Corporation — hosting of the servers and the database, and private storage of video, image and hazard-report photo files.
• Resend — e-mail delivery (invitations, sign-in codes, reminders), and receiving messages sent to the privacy@, legal@ and accessibility@ addresses and forwarding them to us.
• SMS4Free (Israel) — SMS delivery (invitations and sign-in codes).

Each provider receives only what its service needs — the recipient's address, phone number and the message. The platform does not currently send WhatsApp messages itself; an administrator who chooses to forward an invitation link from their own WhatsApp does so from their own device and account. AI translation, voice and image tools are used to prepare the training content only; no personal information is given to them. There is currently no payment provider. The list is updated in this policy before any change.

8. Information security

The company applies the Data Security Regulations and takes, among others, the following measures:

• All traffic is encrypted (HTTPS). Passwords, sign-in codes, invitation links and access keys are stored hashed only and cannot be recovered.
• Permissions by role and organization: every request is checked against the database, and a request for another organization's data is answered as if it did not exist. A deactivated account loses access at once, even in the middle of a video.
• Account lockout after failed sign-in attempts, request rate limits, and sign-in that expires after 12 hours.
• Video and image files are kept in private storage with no public addresses; every view is re-checked against the viewer's entitlement. A hazard-report photo is shown only to the organization's signed-in administrators.
• An audit trail of every administrative action, and system logs that never contain form contents, passwords or tokens.

In the event of a serious security incident the company notifies the organization concerned and the Privacy Protection Authority, as the regulations require.

9. How long the information is kept

Training records — certificates, signatures, risk-summary acknowledgements, briefing attendance and practical sign-offs — are documentation an employer must keep under occupational safety law. The system therefore does not delete them while the organization's account exists: a worker who leaves is marked inactive and can no longer sign in, and their records remain as the organization's documentation. When the organization's subscription lapses the system becomes read-only and the certificates stay accessible — a worker does not lose proof of training because the employer stopped paying.

Automatic deletion: one-time sign-in codes — after a day; rate-limit counters — when the counting window ends; fault records — after 90 days. An account created by mistake and never used can be deleted completely.

Website enquiries are kept for the business contact and deleted on request. An organization that ends its engagement may ask for the deletion of all its information — certificates included — subject to retention duties in law.

10. Must you provide the information

There is no legal duty towards the company to provide information. The training itself is the employer's duty under occupational safety law, and it is the employer who asks you to complete it. Without a name and an employee number your training cannot be recorded and no certificate can be issued. A phone number and an e-mail address are needed only if the organization sends invitations or sign-in codes through those channels. A hazard report, a photo and reminders are optional.

11. Your rights

Under the Protection of Privacy Law you have the right to see the information kept about you, and to ask for information that is not correct, complete, clear or up to date to be corrected or deleted. You can see your certificates, trainings and reports in the app at any time, and you confirm or correct your name yourself on the attestation screen at the end of each training. Any other request — including correcting your employee number, phone or e-mail — goes to your organization's administrator or safety officer, whose organization is the controller. The company helps the organization answer your request within the deadlines set by law.

You can unsubscribe from reminders with one click on the link in every reminder. The choice is yours alone — your organization's administrator sees that you unsubscribed but cannot reverse it — and it does not affect the trainings themselves.

For privacy matters addressed to the company directly: privacy@lomdasafe.com. If you are not answered, you may contact the Privacy Protection Authority at the Ministry of Justice.

12. Minors

The platform is intended for workers and administrators in organizations and not for use by anyone under 16, other than within lawful employment.

13. Changes to this policy

The company may update this policy. Customer organizations are notified of a material change before it takes effect, and the date of the last update is shown at the top of the page.