Privacy Policy

BadgeDay, a product of Sirens to Syntax LLC
Effective date: July 26, 2026 · Last updated: August 21, 2026

Who we are

Sirens to Syntax LLC is a Nebraska limited liability company. BadgeDay is our product for firefighters preparing for promotional examinations.

This policy covers the BadgeDay application at app.badgeday.com. Our marketing site and email list are covered by a separate policy at sirenstosyntax.com; if you joined a waitlist rather than an account, that is the policy that applies to you.

Questions, requests, or corrections: grant@sirenstosyntax.com

What we collect

Your email address

You give this to us to create an account. BadgeDay signs you in with a link emailed to that address — there is no password, so there is no password for us to store or for anyone to steal. We use your address to send sign-in links, to answer you if you write to us, and to send you the occasional message about the service itself, such as a change to these terms or a problem with your account.

The documents you upload

This is the heart of the product and the most sensitive thing we hold, so it is worth being precise about what happens to it. When you upload a document, we store:

• the file itself, in private storage scoped to your account;
• its filename and page count;
• the text extracted from it, broken into sections and stored with the section number, section title, and page range each piece came from;
• the practice questions generated from those sections, each carrying the location it came from.

The extracted text is stored in full, because the citation on every question has to resolve back to the exact passage it was drawn from. That is the whole point of the product, and it is not achievable without keeping the text.

Your spoken answers

When you use Oral board, we record the answer you speak. We send that recording to Deepgram to turn it into text. We use the text to write notes on what went well and what to improve. We keep the transcript and those notes with your practice, the same way we keep typed answers. We do not keep the recording.

Your practice

We record which questions you were asked, what you answered — including the text you type for short-answer questions — whether it was right, which questions you saved, and how much of each document you have covered. This is what the coverage tracker and the review screen are built from. It is yours; we do not analyze it across users.

Your billing relationship

Payments are handled entirely by Stripe on Stripe's own checkout pages. Your card number, expiry, and security code never touch our servers. What we store is the identifier Stripe gives us for your customer record, whether your access is currently active, and when it expires. When you open the billing portal to change or cancel a plan, you are on Stripe's site, not ours.

Technical records

Our hosting and database providers keep standard server logs — the kind every web service produces — which may include IP address, request time, and error details. We use them to keep the service running and to work out what went wrong when something breaks. We do not use them to build a picture of you.

What we do not collect

The BadgeDay app runs no analytics. There is no PostHog, no Google Analytics, no product-analytics tool of any kind in the application. There are no advertising trackers or pixels, no cross-site tracking, and no third-party fonts or scripts loaded from anyone else's servers when you use the app — the whole thing is served from one origin.

This is a deliberate difference from our marketing site, which does use analytics. Once you are signed in and working with your department's documents, we would rather know nothing than know something we did not need.

What we never do with your documents

These are commitments, not current practice we might quietly change:

• We never share your documents with other users. Access is enforced at the database itself, not by application code that could be bypassed — a query made with your account's credentials can only ever return your own rows.
• We never pool your documents into a shared library. BadgeDay ships zero content of its own and builds no question bank out of what users upload. Your department's SOGs do not become another candidate's practice material.
• We never use your documents, your answers, or your questions to train or improve any model, ours or anyone else's, and we do not use them to tune the prompts we send.
• We never sell or rent any of it, and we do not share it with advertisers or data brokers.

Who processes it, and why

Producing cited questions from a PDF, and notes from an Oral board answer, means the material passes through a small number of companies. You are entitled to know which, so here is the whole path. For documents: the file goes to our storage; the text is extracted by Microsoft Azure's document analysis service; the extracted sections are sent to Anthropic to draft questions from; the questions come back and are stored against your account. For Oral board: spoken audio goes to Deepgram to be turned into text; that text goes to Anthropic to draft notes. Nothing else is done with it at any stage.

These providers process this material on our behalf and are not permitted to use it for their own purposes. Our infrastructure is located in the United States.

We may also disclose information if legally required to do so — for example, in response to a valid subpoena or court order. If Sirens to Syntax LLC is ever sold or merged, account information may transfer as part of that transaction, and we will notify account holders by email before the transfer takes effect.

Cookies and browser storage

The app sets no analytics or advertising cookies. When you sign in, your browser stores a session token locally so that you stay signed in and do not have to request a new link on every visit. That token is what makes the app work; clearing your browser storage signs you out, and nothing else is kept there.

How long we keep it

We keep your documents and your practice history for as long as your account exists, including through periods when you are not subscribed. A candidate who tests, misses, and comes back for the next cycle should find their reading list where they left it. We do not delete your material on our own schedule.

You are in charge of removing it. Deleting a document removes the file, its extracted text, and every question generated from it. Deleting your account removes all of that, your practice history, your saved questions, and your sign-in identity, and cancels your billing with Stripe first so that nothing continues to charge you. Both are immediate and neither asks us to do it for you.

After a deletion, some information persists briefly in routine encrypted backups and in server logs before it ages out. Stripe separately retains a record of the transaction, as payment processors are required to for tax and anti-fraud purposes. We keep a suppression record of an unsubscribed email address so that we do not email you again by mistake; write to us if you would like that removed too.

Your rights

Regardless of where you live, you may:

• access the information we hold about you;
• correct it if it is wrong;
• delete it;
• get a copy of it in a portable format;
• stop receiving non-essential email from us.

Deletion is built into the app and needs nothing from us. For anything else, email grant@sirenstosyntax.com. We will respond within 30 days. We will not charge you, and we will not treat you differently for asking.

Depending on where you live you may have additional rights under laws such as the California Consumer Privacy Act or the EU/UK General Data Protection Regulation. We honor the rights above for everyone rather than sorting account holders by jurisdiction. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we have not done so in the preceding twelve months.

Do Not Track

Some browsers send a "Do Not Track" signal. There is no agreed industry standard for how sites should interpret it, and we do not respond to it. In this app the question does not really arise: there is nothing here that tracks you.

Security

Access to your documents is enforced by the database itself through row-level security, so a request made with your credentials cannot reach another account's material even if application code were to ask it to. Uploaded files are stored under a per-account prefix with the same restriction. The answers to practice questions are withheld at the database rather than by the interface — the app cannot show you an answer before you have committed one, because it cannot read it. Our service credentials are held as managed secrets and are not present in application images.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you as required by applicable law.

Children

BadgeDay is a paid product for working fire service professionals and is not directed at children. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

Changes to this policy

If we change this policy we will update the "last updated" date above. If the change is significant — a new category of information, a new provider in the path your documents take, or a new use for what we hold — we will email account holders before it takes effect.

Contact

We read every message sent to that address. Email is the fastest way to reach us.