Privacy notice

Your employer decides what training you take and is responsible for your training record.

Jonah is operated by Jonathan Mohhebali, doing business as Jonah Safety Training, who stores and processes that record for your employer. Contact: admin@jonahsafety.com.

Who you are, as your employer entered it: full name, employee ID, job title, work site, crew and your preferred language. An email address if one was given (office staff always have one).

Your photo, if you add one. A photo is optional. You can add it yourself from the home screen, or your safety manager can add it with your permission, and you can ask for it to be removed at any time. It is resized, stored privately and printed on your digital worker ID; without a photo the ID shows your initials. Jonah does not use your photo for face recognition and does not measure or extract anything from your face.

Your training: which sections you have finished, every answer you give in every attempt (including wrong ones), your result for each section, and the certificate issued when you pass. Every attempt is kept, because it is part of the training record.

How you use the course: when you sign in, open a section, finish a video, open the questions and hand in your answers, with the time. Each of these also records the kind of device (phone, tablet or computer, its system and browser) and an approximate city and state worked out from your internet connection. Your safety manager uses this to see who may need help and where the course was done. Jonah never uses GPS, does not keep your IP address for this, does not follow where you go, and does not read anything else on your phone.

Technical data: your IP address is used for a short time to limit repeated sign-in attempts and is normally deleted within an hour. Our hosting providers keep standard server logs under their own policies.

Emails sent for your company: a log of each one: who it went to, which kind, when, and whether it was delivered.

Cookies: only the ones needed to keep you signed in and to remember your language. No advertising cookies, and no tracking on other sites.

Visits to the public pages: we count page views on jonahsafety.com with Vercel Web Analytics. It uses no cookies, keeps no profile of you, and stores no IP address; it only tells us how many people opened a page and from which country. We also count a few button presses on those pages, such as "Request a quote", sending the contact form and "Check" on the certificate lookup, together with the choices made at that moment (for example the plan and crew size picked in the price calculator). These counts never include your name, email, company, what you typed or a certificate number. The screens behind a sign-in are not counted.

• You: your own training, certificates, worker ID and results.
• Your company's safety managers and supervisors: the roster and your training record, including your answers, attempts, activity and photo.
• The HR and safety contacts your company chooses: by email, your name, employee ID, courses, due and expiry dates and training status (see "Emails Jonah sends"). They do not need a Jonah account and cannot sign in to see more.
• Anyone with your certificate: scanning its code opens a public page that shows only whether it is valid, your name, the company, the course, the safety standard, the trainer and the dates. Never your answers, your score, how many attempts you needed, or any other course.
• Our service providers, only to run Jonah: Supabase (database and file storage, in the United States), Vercel (hosting, in the United States) and Resend (email delivery, in the United States).

Jonah does not sell your information and does not use it for advertising.

• To you, only if you sign in with an email address: your sign-in details when you are added, a new password if your safety manager replaces it, your certificate as a PDF when you pass, and a reminder before a certificate expires. Workers who sign in with an employee ID only get no email.
• To the HR and safety contacts your company chooses: an alert before a certificate expires, naming the person, the course and the date; a weekly list of who to follow up with, including who has not started, has stopped making progress or may need help with a course (never scores or how many attempts it took); a monthly report with a PDF of who is expired, overdue or due soon and who finished training; and reminders of OSHA recordkeeping dates.
• To office staff: their sign-in details when they are added, the email that confirms a new company account, and password-reset emails they ask for.

Your company's account owner chooses who receives these emails and can switch each kind off. Emails are delivered by Resend.

Certificates and training attempts are records: they are never deleted, only replaced by a newer certificate or withdrawn. If you leave the company, your account can be switched off and your training record is kept, because your employer may still need to prove your training.

Your record is kept for as long as your employer uses Jonah. If your employer stops using Jonah, its records are handed back to it and deleted from Jonah within 90 days. Backups are kept for 30 days.

The log of emails sent is kept for as long as your employer uses Jonah, and deleted with its records.

Office accounts sign in with their email and a password. Workers sign in with their employee ID and a password created when they are added: your company's account owner can see and replace that password, it is stored encrypted, and every time it is viewed is recorded.

Photos, certificates and signatures are stored privately and shown only to the people above. Data is backed up every night.

You can ask to see your record, to correct your name or other details, or to change or remove your photo. Ask your safety manager, or write to admin@jonahsafety.com; we answer within 30 days. Attempts and certificates are not deleted on request, because they are the legal record of your training, but a mistake can be corrected and a certificate can be withdrawn.

The contact form on jonahsafety.com keeps your name, your company, the email or phone you give us, your crew size, the reason you wrote and your message. A copy is emailed to our inbox so we can answer you. We use it only to reply to you about Jonah. It is not sold or shared.

The form's record is deleted automatically after two years if your company does not become a customer. Ask us at admin@jonahsafety.com and we delete it, and our email copy, sooner. To stop spam, your IP address is used for a short time to limit repeated sends, as described above.

This notice is published in English and Spanish, and both are equally valid. If they ever differ, the English version controls.

If this notice changes, the new version will be posted here with its date.