Privacy Policy

We collect the following categories of information:

• Account details — your name, email address, phone number, target exam (Step 1 or Step 2 CK), and target exam date, provided when you sign up or update your account.
• Study activity — schedules, focus and Pomodoro sessions, flashcard reviews, error-log entries, progress, streaks, and leaderboard participation generated as you use the portal.
• Files you upload — such as a profile photo or score reports. These are stored privately.
• Communications — messages you send through the mentorship application, support requests, or contact forms.
• Technical data — basic device, browser, and usage information collected through analytics on our public marketing pages. See our Cookie Policy for details.

We use your data to:

• authenticate you and keep your account secure;
• build and tailor your study schedule and content to your exam and target date;
• track your progress and power your dashboard, analytics, and reviews;
• provide mentorship, respond to support requests, and contact you about your account;
• protect the platform from bots, spam, and abuse;
• improve the service and meet our legal obligations.

We do not sell your personal data, and we do not use it for third-party advertising.

We rely on a small number of trusted infrastructure providers to operate the platform. They process data only on our behalf and for the purposes below:

• Supabase — hosts your account, authentication, study data, and uploaded files.
• Cloudflare — content delivery, file storage (R2), and bot protection (Turnstile) on our sign-up and contact forms.
• Formspree — delivers mentorship and contact-form submissions to us by email.
• Google Analytics — anonymous, aggregated traffic statistics on our public marketing pages (not inside the logged-in portal).

We may also disclose information where required by law or to protect the rights, safety, and security of our users and the platform.

Your data is stored with the providers listed above and protected by access controls and encryption in transit. Some providers process data outside your country (including the United States and the EU); we rely on their standard safeguards for those transfers.

We keep your information for as long as your account is active and as needed to provide the service and meet legal or operational requirements. When you ask us to delete your account we remove your data within a reasonable period, though residual copies may persist briefly in backups before being overwritten. No system is completely immune to risk, but we take reasonable steps to safeguard your information.

You can:

• view and edit your profile information at any time from your account page;
• request a copy of your data, or ask us to correct or delete it;
• opt out of analytics on public pages through your browser settings or the Google Analytics opt-out (see our Cookie Policy).

To exercise any of these rights, contact us at the email below. We may need to verify your identity before acting on a request.

The portal is intended for medical students and graduates and is not directed to anyone under 18. If you are under 18, you may use it only with the consent of a parent or guardian.

We may update this Privacy Policy from time to time. When we make material changes we will update the date at the top of this page. Continued use of the portal after changes take effect means you accept the updated policy.