Privacy policy

Last updated July 2026

What we collect

Account information: your email address and authentication credentials, handled by our authentication provider.

Profile information you give us during onboarding: your year of training and country. Both are optional context used to personalize what you see, never required to use the product.

Study activity: pretest and question answers, search-pattern attempts, report exercise attempts, rotation log entries, syntheses you generate, and your progress through the library. This is the core of what makes the product useful to you, and it is scoped to your account by database access rules, not just application logic.

Purchase and billing information: our payment processor handles your card details directly and shares back only what we need to grant access, such as the plan, term, and status of your purchase. We never see or store your full card number.

Standard technical logs (request timestamps, error logs) kept by our infrastructure providers for reliability and abuse prevention.

What we do not collect

Nothing about any actual patient. The rotation log book, synthesis tools, and every free-text field in the product are built with no field for a patient name, date of birth, medical record number, or other identifying detail, and are not a place to put one.

We do not run advertising trackers, and we do not sell or rent your data to anyone.

How we use it

To run the product: authenticate you, apply the entitlements your purchase grants, save your study activity, and show it back to you.

To communicate with you about your account, such as purchase receipts, renewal reminders for fixed-term plans, and material changes to this policy or the educational-use terms.

To maintain and secure the service, including debugging and abuse prevention.

We do not use your study activity or rotation log content to train any model.

Who we share it with

Our database, authentication, and file storage provider, which hosts your account and study data in a US region.

Our payment processor, for checkout, subscription billing, and the billing portal.

We do not share your data with anyone else, and we do not permit any third party to use it for their own purposes.

Cookies

We use a single session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

Your rights

You can export a copy of everything tied to your account, and permanently delete your account, both in one step from account settings. Deleting your account removes your profile, purchase history, rotation log, syntheses, and every attempt you have recorded.

You can ask us questions about your data at any time using the contact details below.

Data retention

We keep your account data for as long as your account is active. If you delete your account, the deletion is immediate and permanent, not a soft delete held in reserve.

Changes to this policy

If we make a material change to this policy, we will update the date below and, where the change is significant, notify you directly.

Questions about this policy: support@radiologyfoundations.com