Privacy Policy for Ethical Hacking Labs

Last updated: September 2, 2026

Fodor Dávid ("we", "us", or "our") operates the Ethical Hacking Labs mobile application (the "App"). This Privacy Policy explains what information is processed when you use the App, why it is processed, and the choices available to you.

Ethical Hacking Labs is designed as a privacy-conscious cybersecurity education application. Core learning content and labs can be used without creating an account. Certain optional features, such as Cloud Sync and account-based progress synchronization, require an account and an internet connection.

1. Information We Process

Account and Authentication Information

If you create or use an account, we may process information necessary to authenticate you and associate your synchronized progress with your account. This may include:

• Email address
• Name or display name, where provided by an authentication provider
• Unique user or account identifier
• Your chosen in-app codename or display name

Authentication may be provided through email and password, Google, GitHub, or Sign in with Apple. Depending on the authentication provider, its SDK, your device, and your account settings, the provider may also process additional information such as phone number, approximate location, or other account-related information. We do not request such information unless it is required by the relevant service or platform.

Cloud Progress Data

If you enable account-based Cloud Sync, information about your use of the learning system may be synchronized. This can include completed chapters and labs, XP or points, achievements, submitted challenge progress, application preferences, synchronization state, and similar product interaction information.

Users who do not create an account can use the App with progress stored locally on their device.

Subscription and Purchase Information

If you purchase Ethical Hacking Labs Pro, information relating to your subscription or purchase status may be processed so that the App can determine whether Pro functionality should be available to your account or device.

We do not receive or store your payment card number, bank account information, or other payment credentials. Payments are processed by Apple through the App Store or by Google through Google Play.

Technical, Usage, Diagnostic, and Security Information

The App and its third-party service providers may process limited technical information necessary for authentication, subscription management, application security, fraud prevention, diagnostics, service reliability, and analytics. Depending on the service, this may include device identifiers, product interaction information, usage information, diagnostic information, and other technical data.

2. How We Use Information

Information is processed only where necessary to:

• Authenticate users and operate user accounts
• Synchronize learning progress across devices
• Restore and verify Pro subscription entitlements
• Operate, maintain, troubleshoot, and improve the App
• Protect the App against tampering, abuse, fraud, and unauthorized modification
• Comply with applicable legal obligations

We do not sell your personal information.

3. Advertising and Tracking

Ethical Hacking Labs does not contain third-party advertising and we do not use your information for cross-app advertising tracking.

Information processed by our service providers is used for purposes such as App functionality, authentication, subscriptions, security, diagnostics, and service analytics rather than targeted advertising.

4. Third-Party Services

Ethical Hacking Labs relies on a limited number of third-party services to provide optional online functionality and protect the App.

These services may include:

• Google Firebase — authentication, cloud synchronization, Firestore database services, installations, and remote configuration.
• Google Sign-In — optional Google account authentication.
• Sign in with Apple — optional Apple account authentication on supported Apple platforms.
• GitHub — optional GitHub account authentication.
• RevenueCat — subscription entitlement management, purchase validation, purchase history, and restoration of purchases.
• Talsec / freeRASP — application integrity, tampering, runtime security, and security diagnostics.
• Apple App Store and Google Play — distribution, purchases, billing, subscription management, and related platform services.

These providers process information according to their own privacy policies and legal obligations. We select service providers that are expected to provide appropriate protection for the information they process.

5. Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) or similar legislation applies, information may be processed where necessary to provide requested services or perform a contract with you, where necessary for our legitimate interests in operating and securing the App, where required by law, or where you have provided consent when consent is required.

6. Data Retention

Account and Cloud Sync information is generally retained while your account remains active or until you request or perform account deletion. We may retain limited information for longer where required by law, necessary to resolve disputes, prevent abuse, enforce agreements, or comply with financial or regulatory obligations.

Purchase and transaction records processed by Apple, Google, RevenueCat, or other payment-related providers may be retained by those providers according to their own legal and operational requirements.

7. Account and Data Deletion

If you have created an Ethical Hacking Labs account, you can permanently delete your account from within the App.

Navigate to: System → Danger Zone → Delete Account.

Account deletion removes your Ethical Hacking Labs authentication account and associated cloud progress data, except for information we are legally required or otherwise permitted to retain.

If you used Sign in with Apple, the App also revokes the associated Apple authorization as part of the account deletion process.

Deleting your Ethical Hacking Labs account does not automatically cancel an active App Store or Google Play subscription. Subscriptions must be managed separately through the store through which they were purchased.

8. Your Privacy Rights

Depending on your location, you may have rights concerning your personal information, including the right to request access, correction, deletion, restriction of processing, data portability, or objection to certain processing.

You may also have the right to withdraw consent where processing is based on consent and to lodge a complaint with the competent data protection authority.

Requests can be sent to info@vulninspect.com.

9. International Data Processing

Some of our third-party service providers operate internationally. Information may therefore be processed in countries other than the country in which you live. Where required, appropriate safeguards are used for international transfers of personal information.

10. Security

We use reasonable technical and organizational measures designed to protect information processed through the App. However, no electronic transmission, device, service, or storage system can be guaranteed to be completely secure.

11. Children's Privacy

Ethical Hacking Labs contains technical cybersecurity and ethical hacking training material and is not designed for young children. We do not knowingly collect personal information from children in violation of applicable law.

Users must meet the minimum age requirements applicable in their country and the relevant app marketplace.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the App, our service providers, or applicable legal requirements. The current version will be published on this page and the "Last updated" date will be revised.

13. Contact Us

Data controller and App operator: Fodor Dávid, Hungary.

For privacy questions or requests, contact: info@vulninspect.com

Website: https://ethicalhackinglabs.com/