Privacy Policy — ClinicalEthicsPrep

ClinicalEthicsPrep, LLC ("ClinicalEthicsPrep," "we," "us") provides educational question banks and study materials for clinical ethics. This policy explains what information we collect, why we collect it, and the choices you have. Questions? Email support@clinicalethicsprep.com.

1. Information we collect

Account information. Your email address and a password. Passwords are stored only as cryptographic hashes — we never see or store your actual password and cannot retrieve it.
Purchase information. Payments are processed by Stripe, our payment processor. We receive your plan, purchase date, and payment status. We never receive or store your full card number.
Study activity. Which questions you answer, your selected answers, whether they were correct, questions you flag, and timestamps. This is what powers your saved progress and personal analytics.
Technical information. Login session cookies (required for the member area to work) and standard server logs from our hosting providers, such as IP address and browser type.

2. How we use your information

To provide the service: sync your progress, restore your flagged and missed questions, and deliver purchased content.
To show you your personal performance analytics and anonymous, aggregate member averages.
To improve our content: we review aggregate question statistics (for example, the percentage of members who miss a question) to find questions that need better explanations.
To administer accounts, purchases, renewals, and support requests.
To protect the service against fraud, abuse, and account sharing.

3. What we never do

We never sell your personal information.
We never share your study performance with employers, certifying bodies, schools, or advertisers.
We never display your individual performance to other members — peer comparisons shown in the product are aggregates only.

4. Service providers

We use a small number of vendors to run the service, each of which processes data only to provide their function: Supabase (database and authentication), Stripe (payment processing), Vercel (website hosting), and Cloudflare (domain and network services). Each maintains its own security and privacy program.

5. A note for clinicians

ClinicalEthicsPrep is a personal education tool. Please do not enter patient information anywhere on this site. We are not a HIPAA covered entity or business associate, and the service is not designed to receive protected health information.

6. Data retention and deletion

We keep your account and study data while your account exists so your progress is never lost between access periods. You may request deletion of your account and associated data at any time by emailing support@clinicalethicsprep.com from your account email. Some purchase records may be retained as required for tax and accounting purposes.

7. Your rights

You may request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. We respond to verified requests within 30 days. Depending on where you live, you may have additional rights under applicable law.

8. Security

All traffic is encrypted in transit (HTTPS). Passwords are hashed, member data is protected by row-level access controls, and administrative access is limited. No system is perfectly secure; if we learn of a breach affecting your data, we will notify you as required by law.

9. Children

The service is professional education for clinicians and trainees and is not directed to children under 13. We do not knowingly collect information from children.

10. Changes to this policy

If we make material changes, we will update the date at the top of this page and, for significant changes, notify members by email or in-product notice.

11. Contact

ClinicalEthicsPrep, LLC — support@clinicalethicsprep.com