Privacy policy

Written to follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect. Your name, email address, the exam sitting you chose, a salted hash of a key derived from your password (we never receive the password itself), your study progress (answers, flashcard schedule, OSCE attempts, settings), your notes and saved collections, your membership and requests, and the browser name for each signed-in session. If card payments are on, Stripe processes the payment; we keep only a Stripe customer reference, never card numbers.

Why. To run your account, sync your progress between devices, decide what you can open, and contact you about your membership. Nothing else.

What we don't do. No ads, no analytics or tracking scripts, no selling or sharing of your data. The app sets one cookie, which keeps you signed in. The website remembers your day or night choice in your browser.

Where it's stored. On Cloudflare's network (Cloudflare D1), which may process data outside Canada. Your browser keeps a copy of your progress; the study content is held only in memory while the app is open.

Optional services. If you add your own Anthropic API key for the AI patient, the key stays in your browser and your OSCE messages go straight from your browser to Anthropic.

Your choices. You can see and correct your details on the Account page, export your progress any time, and delete your account (which erases your progress and membership records) from the Account page.

Retention. We keep your data while your account exists. Deleted accounts are erased immediately from the live database.

Contact. Questions or requests about your information: the contact address on our About page.