Privacy policy
Last updated July 2026
What we collect
Account information: your email address and authentication credentials, handled by our authentication provider.
Profile information you give us during onboarding: your year of training and country. Both are optional context used to personalize what you see, never required to use the product.
Study activity: pretest and question answers, search-pattern attempts, report exercise attempts, rotation log entries, syntheses you generate, and your progress through the library. This is the core of what makes the product useful to you, and it is scoped to your account by database access rules, not just application logic.
Purchase and billing information: our payment processor handles your card details directly and shares back only what we need to grant access, such as the plan, term, and status of your purchase. We never see or store your full card number.
Standard technical logs (request timestamps, error logs) kept by our infrastructure providers for reliability and abuse prevention.
What we do not collect
Nothing about any actual patient. The rotation log book, synthesis tools, and every free-text field in the product are built with no field for a patient name, date of birth, medical record number, or other identifying detail, and are not a place to put one.
We do not run advertising trackers, and we do not sell or rent your data to anyone.
How we use it
To run the product: authenticate you, apply the entitlements your purchase grants, save your study activity, and show it back to you.
To communicate with you about your account, such as purchase receipts, renewal reminders for fixed-term plans, and material changes to this policy or the educational-use terms.
To maintain and secure the service, including debugging and abuse prevention.
We do not use your study activity or rotation log content to train any model.
Who we share it with
Our database, authentication, and file storage provider, which hosts your account and study data in a US region.
Our payment processor, for checkout, subscription billing, and the billing portal.
We do not share your data with anyone else, and we do not permit any third party to use it for their own purposes.
Cookies
We use a single session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.
Your rights
You can export a copy of everything tied to your account, and permanently delete your account, both in one step from account settings. Deleting your account removes your profile, purchase history, rotation log, syntheses, and every attempt you have recorded.
You can ask us questions about your data at any time using the contact details below.
Data retention
We keep your account data for as long as your account is active. If you delete your account, the deletion is immediate and permanent, not a soft delete held in reserve.
Changes to this policy
If we make a material change to this policy, we will update the date below and, where the change is significant, notify you directly.
Questions about this policy: support@radiologyfoundations.com