Privacy Policy
1. What we collect
- Account data: name, email address, and a salted, one-way hash of your password (we never store your password itself).
- Learning data: question attempts and scores, adaptive ability estimates, case-study progress, and flashcard scheduling data — used to run the adaptive engine and show you your progress.
- Technical data: standard server logs (IP address, timestamps, requested pages) kept briefly for security and troubleshooting.
We do not ask for, and you must not submit, real patient information or PHI. We do not collect payment card data unless and until paid plans exist, in which case payment is handled by a dedicated payment processor and card numbers never touch our servers.
2. How we use your data
- To operate your account and personalize your learning (adaptive difficulty, spaced repetition schedules, progress dashboards).
- To secure the Platforms, prevent abuse, and debug problems.
- To communicate with you about your account or material changes to our policies.
We do not sell your personal information, and we do not share it with advertisers or data brokers.
3. Cookies and local storage
The Platforms use browser local storage to keep you signed in (a session token) and to remember interface preferences. We do not use third-party advertising or cross-site tracking cookies.
4. Where your data lives
The Platforms are self-hosted by MyoMed Prep on our own server infrastructure, with traffic routed through a content delivery and security network (Cloudflare) for encryption in transit (HTTPS) and denial-of-service protection. Databases are encrypted at rest where supported, and encrypted backups are made regularly and stored securely. Data is processed in the United States.
5. Retention
We keep account and learning data while your account is active. Server logs are rotated on a short cycle. Encrypted backups age out on a rolling schedule.
6. Your rights and choices
- Access / export: you may request a copy of the personal data we hold about you.
- Correction: you may correct your name and email in your account.
- Deletion: you may request deletion of your account and its data; we will remove it from the live database and let it age out of backups.
- Depending on your jurisdiction (e.g., GDPR, CCPA/CPRA), you may have additional rights; we honor verified requests consistent with applicable law.
7. Children
The Platforms are not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.
8. Security
We use HTTPS everywhere, hashed passwords, token-based sessions, encrypted backups, and a minimal-exposure network design (no direct inbound ports; access via an authenticated outbound tunnel). No system is perfectly secure; if a breach affecting your data occurs, we will notify you as required by law.
9. Changes to this policy
We may update this policy; the "Last updated" date reflects the current version, and material changes will be announced on the Platforms.
10. Contact
Privacy questions or requests: contact MyoMed Prep through the contact page on the company website.