Privacy policy

Last updated October 2026. Draft pending legal review.

What we collect

Your email address, optional name and career stage, delivery preferences and time zone, your answers to cases, bookmarks, and, if you turn them on, the push notification endpoint your browser provides. Payment details are collected and stored by Stripe; we never see your full card number.

How we use it

To sign you in, deliver your daily case, track your progress, manage your subscription, and improve the questions (for example, finding items that most learners miss). We don't sell personal information, and we don't use it for third-party advertising.

Service providers

Supabase (database and sign-in), Vercel (hosting), Stripe (payments), and Resend (email) process data on our behalf under their own security and privacy terms.

Group licenses

If your seat is provided by a program or employer, the license owner can see which email addresses hold seats. They can't see your individual answers.

Your choices

Change delivery or turn it off in Settings, and unsubscribe from any email using the link in that email. To export or delete your account and answer history, email criticalcaredvm@gmail.com.

Retention

We keep account data while your account exists and delete it within 30 days of a deletion request, except records we must keep for tax or legal reasons.