Privacy Policy

Last updated: 2026-11-07

This policy explains what TEX VIETNAM TECHNOLOGY JOINT STOCK COMPANY (CÔNG TY CỔ PHẦN CÔNG NGHỆ TEX VIỆT NAM; registered name without diacritics: CONG TY CO PHAN CONG NGHE TEX VIET NAM; "TEX Vietnam JSC"), trading as TEXVN ("Simulic", "we", "us"), does with personal data when you use simulic.com and its related domains (the "Service"). TEX Vietnam JSC is the data controller. The short version: we keep only what an account needs, we keep nothing about students unless a teacher adds questions to a link, and you can export or delete everything yourself.

1. Students: no account, and no data unless a teacher adds questions

Students never create an account and never sign in. They open simulations through a link, QR code or embed that their teacher shares.
When a link is opened, our server checks that the link is still active and returns the simulation. It does not set a cookie, does not fingerprint the device, and does not store the IP address.
By default the only thing recorded is a count: how many times each link was opened, per simulation and per day. This number is shown to the teacher who made the link. It cannot be traced back to any person.
A teacher can add up to five questions to a link ("class results"). If they do, a student who opens that link can type a nickname (the teacher's instructions should ask for a first name or nickname, never a full name) and a free-text answer to each question. We store the nickname, the answers and the lab record described below, with the time, against that link. This never includes a cookie or the student's IP address. Only the teacher who owns the link can see them; they are not shown to any other teacher, and not used by us for anything except delivering them to that teacher. The teacher can delete them at any time, and they are deleted automatically after 12 months, or immediately if the link or the teacher's account is deleted.
On a link with questions, the page keeps a lab record while it is open: the results tables the student sees (measurements and the labels of those tables), how many times they ran the simulation, how many controls they used, which built-in checks they got right, and how many seconds the simulation was on screen while the page was visible. The record stays in the student's browser tab. It is sent only when the student presses submit or tries again, together with their answers, and a line next to the submit button says so. If the student closes the page without submitting, nothing is sent. Answers the student has typed but not yet submitted are kept in the same browser tab (its session storage), so reloading the page does not lose them; they are not sent until the student presses submit, and the browser deletes them when the tab is closed. The record comes from the student's browser, so it shows evidence of work, not proof. It is kept and deleted exactly like the answers above, and only the teacher who owns the link can see it.
Simulations themselves run in a browser sandbox that cannot contact the network, so a simulation cannot collect or send data on its own. The class-results panel and the lab record described above are part of the Simulic page around the simulation, not the simulation itself: the simulation stays in its sandbox and passes its results to that page, and the page collects them.
We never send email to students and never collect student email addresses, including from teachers. If a student or parent contacts us directly, we use the message only to answer it.

A summary for teachers and school IT staff is on Privacy for schools.

2. What we collect from account holders

Data	Why	Where it comes from
Email address	To sign you in (we send a sign-in link) and to contact you about your account	You, or your Google or Microsoft account if you sign in with one of them
Name, country, subject you teach or study	To show your name in the Service, to suggest revision paths and simulations for your country and subject, and to understand who uses Simulic	You
Preferred interface language	To show the Service and send emails in your language	You (language menu) or your browser
Google account identifier	To recognise you when you sign in with Google	Google
Confirmation that you are 18 or older and that you accepted the Terms, with the time	Legal requirement	You
Share links you create: simulation, language, settings, title, whether the link is active, and the daily count of how often each link was opened	To run and manage your links	You and the Service
If you add questions to a link: the questions, and, for each answer, a nickname, the free-text answers and a lab record with results tables, number of runs and controls used, built-in checks and seconds on screen (see section 1)	To show you what your students answered and what they did in the simulation	Students who open your link
Simulations you create with AI: your descriptions (prompts), the generated simulation code and text, versions, and which simulation a remix was based on	To create, store, show and deliver your simulations	You and the AI model
If you share one of your simulations with another teacher: the email address you enter, and whether and when they accepted. If you receive such an invitation: the same record, with your account once you accept	To show the invitation in the other teacher's My simulations, to send them one invitation email in your name, and to give them access once they accept. An address without an account is kept only so that the invitation appears if that person signs up	The teacher who shares the simulation
Credit history: credits granted, used and refunded, with the job they relate to	To keep your balance correct	The Service
Purchase records: transaction reference, credit pack, amount and currency	To add credits to your account and to keep accounting records	Paddle, our payment processor
Problem reports you send, with the message and an optional contact email	To fix simulations and answer you	You
Time of account creation, and the time you last used the Service (updated once a day; earlier visits are not kept)	To manage inactive accounts and security, and to count in daily totals how many accounts come back	The Service
Activity log: the app pages you open (page type and time), the simulations you open or play on simulic.com (which simulation, when, and for how many seconds it was on your screen), and when you open checkout. No IP address and nothing you do inside a simulation	To show you the simulations you played recently (only to you, on the home page and in My simulations), to help you when you contact us, and to understand which features teachers use so we can improve them. Kept for 90 days. You can turn it off on the Account page; the list of recently played simulations is then empty	The Service

We do not collect your payment card or bank details: Paddle handles payment as the merchant of record and only tells us that a purchase succeeded.

3. How we use it

To provide the Service: sign-in, your simulations, your links, credits and purchases. Legal basis: performance of our contract with you.
To send transactional email: sign-in links, order confirmations, notices about simulations you asked us to create (for example when a request that failed on our side has been run again and is ready), and the "email me this link" message you request. When a teacher shares a simulation with someone, we send that person one plain invitation email in the teacher's name; we send no reminders. We do not send marketing email unless you ask for it.
If you create a teacher account, one welcome email about an hour later, with simulations for your subject and how to give them to a class. It contains no advertising, and it is the only email with tips we send. You can unsubscribe with the link in the email or on the Account page; sign-in links and order emails still arrive. Legal basis: our legitimate interest in helping you start using the Service.
To keep the Service secure and to prevent abuse, for example rate limits on sign-in requests and on simulation downloads. Legal basis: our legitimate interest in running a safe service.
To understand use of the Service: aggregate statistics (numbers per day), and for account holders an activity log kept for 90 days (section 2), used to show you the simulations you played recently and by our team to support you and improve the Service, never for advertising and never sold or shared. You can turn the activity log off at any time on the Account page. Legal basis: legitimate interest. Students and people using shared links are never included (section 1).
To comply with law, for example tax records for purchases.

We do not sell personal data, do not show advertising, and do not use your data or your simulations to train AI models.

4. Cookies and analytics

The Service sets the cookie simulic_session when you sign in. It keeps you signed in for up to 90 days after your last visit and contains no tracking. It is strictly necessary, so no consent banner is shown. Signing out removes it.
If you choose to pick your role later when you first sign in, the Service sets simulic_role_later for 30 days so that it does not ask again on every visit. It contains no identifier and is used for nothing else.
During Google sign-in, Google sets a short-lived g_csrf_token cookie to protect the sign-in form.
During Microsoft sign-in, the Service sets short-lived cookies that tie Microsoft's reply to your sign-in attempt; they are deleted when sign-in completes.
When you buy credits or Pro, or open the billing page to update a payment method, the Paddle checkout runs in a Paddle window and may set Paddle's own cookies under Paddle's privacy policy. Other pages do not load Paddle.
Visitor numbers for the public pages are measured with Cloudflare Web Analytics, which uses no cookies and no persistent identifiers. Nothing is measured on shared links or embeds. For signed-in account holders, see the activity log in section 2; it uses no cookies.

5. Who processes data for us

Provider	What for	Where
Cloudflare, Inc.	Hosting of the public pages and simulation files, network security, storage of simulations you create, cookieless analytics	Global network; storage in the United States
OVHcloud	Hosting of the application server and database	United States
Paddle.com Market Ltd and affiliates	Payments, invoices, taxes and refunds for credit packs (merchant of record)	United Kingdom, United States
Anthropic, PBC and Google LLC (Gemini API)	The AI models that write simulations. We send your description and, for a remix, the source simulation. We use their paid API services, whose terms do not allow them to use this data to train their models.	United States
Google LLC	Sign in with Google (only if you choose it); the "Share to Google Classroom" button	United States
Microsoft Corporation	Sign in with Microsoft (only if you choose it): Microsoft confirms your email address	United States
Microsoft Corporation	The "Share to Microsoft Teams" button (only if you use it)	United States
Sendinblue SAS (Brevo), with Resend, Inc. as a backup when Brevo is unavailable	Sending sign-in links, order confirmations, notices about your simulations, the welcome email for teachers, invitations when a teacher shares a simulation, and the messages you request	European Union (Brevo), United States (Resend)

Each provider acts under a contract that limits what it may do with the data. Because our servers are in the United States, your data is transferred there. For users in the European Economic Area, the United Kingdom and Switzerland, transfers rely on the providers' standard contractual clauses or on their participation in the EU-U.S. Data Privacy Framework.

6. How long we keep data

Your account, links, simulations and credit history: as long as your account exists.
Activity log (section 2): 90 days, or until you turn it off or delete your account.
Class answers and lab records (section 1): 12 months after they are submitted, or sooner if you delete them yourself. They are also deleted immediately if you delete the link or your account.
Invitations to share a simulation: until the invited teacher declines, the owner stops sharing or withdraws the invitation, or the simulation or either account is deleted. After sharing stops, the record stays so that the other teacher can still open the answers collected on their own links.
Sign-in links: 15 minutes, then only a one-way hash for a short time to prevent reuse.
Purchase records: up to 10 years after the purchase, as required by accounting and tax law, even after the account is deleted. These records are then kept without your name or email.
Problem reports: until the problem is fixed, then up to 2 years.
Server logs used for security: up to 30 days.
Aggregate statistics contain no personal data and are kept indefinitely.

7. Your rights

From the Account page you can, at any time and without asking us:

See and correct your name, country and subject.
Export everything we hold about you as a JSON file: profile, links, link counts, the questions, class answers and lab records collected on your links, simulations (including prompts and code), the simulations you shared and those shared with you, credit history, purchases, reports and your activity log.
Turn off the activity log. We stop recording and delete what was recorded.
Delete your account. This immediately removes your profile, links, simulations and their files, credit history, activity log and pending reports. Links you shared stop working. Purchase records are kept in anonymised form as described above.

Depending on where you live, you may also have the right to object to or restrict certain processing, to data portability, and to complain to a supervisory authority (in the EU, your national data protection authority; in the UK, the Information Commissioner's Office). If you have any question or request that the Account page does not cover, email us at [email protected]. We answer within 30 days.

Residents of California and other US states with privacy laws: we do not sell or share personal data for advertising, and we do not use it for profiling with legal effects. The rights above cover your rights to know, delete and correct.

8. Children

Accounts are only for adults. We do not knowingly collect personal data from anyone under 18. Students use Simulic through their teacher's links without an account or contact details; section 1 explains what is stored when a teacher adds questions. If you believe a child has created an account, email us and we will delete it.

9. Security

All connections use HTTPS. Sign-in uses one-time links instead of passwords, so there is no password to steal. Sign-in tokens are stored only as hashes. Simulation files are served from separate domains in a browser sandbox. Access to the production server and database is limited to the TEXVN team and protected by keys. If we discover a breach affecting your data we will inform you and, where required, the authorities.

10. Changes to this policy

We may update this policy when the Service changes. The date at the top shows the latest version. For material changes we will tell you by email or when you next sign in.

11. Contact

TEX VIETNAM TECHNOLOGY JOINT STOCK COMPANY (CÔNG TY CỔ PHẦN CÔNG NGHỆ TEX VIỆT NAM; registered name without diacritics: CONG TY CO PHAN CONG NGHE TEX VIET NAM; "TEX Vietnam JSC").
Registered address: No. 367-E16, Group 11, Dong Anh Town, Dong Anh District, Hanoi City, Vietnam (Số 367-E16, tổ 11, Thị Trấn Đông Anh, Huyện Đông Anh, Thành phố Hà Nội, Việt Nam).
Email: [email protected].