Privacy Policy

Information we collect

RPHprep collects only the student account, study progress, signup, support, feedback, and subscription information needed to provide and improve the exam-preparation service. This may include name, email, exam goal, quiz attempts, scores, subscription status, and support messages. For fraud, account-sharing, and content-security purposes, RPHprep may also record protected-content views, copy or print attempts, session identifiers, and hashed browser, user-agent, and IP-derived signals. Raw device fingerprints are not required for these controls.

Information we do not want

RPHprep is not intended to collect real patient information, personal health information, health card numbers, prescription records, identifiable clinical cases, actual exam content, recalled exam content, or confidential assessment material.

AI features

If AI features are enabled, users should not submit real patient information, confidential assessment content, recalled exam content, or copyrighted source passages. AI features provide educational support only and may be incomplete or inaccurate.

How information is used

Information is used to provide accounts, learning access, practice history, support, billing operations, safety controls, content correction workflows, and product improvement. Security records may be used to investigate account sharing, automated scraping, or unauthorized redistribution. Marketing messages should require appropriate consent and unsubscribe controls.

Cookies and browser storage

RPHprep uses only cookies and browser storage necessary for account access, security, session management, protected study access, and payment workflows. It may also use local storage for interface preferences such as the student workspace sidebar. RPHprep does not currently use analytics or advertising cookies, and no analytics or marketing vendor is installed. Search performance is measured in Google Search Console, which does not place analytics cookies on the site. Application reliability uses Google Cloud monitoring and logs. If optional cookies are added later, they will remain disabled unless you consent.

Payments and service providers

Payment card data should be handled by Stripe or another compliant payment processor and should not be stored by RPHprep. RPHprep may use trusted service providers for hosting, authentication, payments, support, and email delivery.

Access, correction, and deletion

Users may contact RPHprep to request access, correction, or deletion of personal information where applicable. Some records may need to be retained for billing, security, audit, legal, or operational reasons.

Account security and fraud prevention

RPHprep may use keyed hashes of network and browser signals, device-session records, and coarse country or region information supplied by a trusted hosting provider to detect account sharing, suspicious access, and abuse. It does not use precise location for this purpose. Detailed security signals are scheduled for removal or de-identification after 90 days, while minimal security and audit outcomes may be retained for up to one year.

Automated controls may sign out an older device, request email verification, rate-limit activity, or temporarily lock an account. Users may review devices in Settings and contact support to question a restriction or request access, correction, or deletion where applicable.

Canadian Privacy Officer Contact

RPHprep has appointed a Privacy Officer to oversee compliance with Canadian privacy laws, including PIPEDA and provincial equivalents. For questions about this policy, to request access to your personal data, or to make a privacy-related complaint, you can contact our Privacy Officer at:

Email: privacy@rphprep.ca or support@rphprep.ca