Privacy policy

What we collect

• Account data: your email address, display name, and optional medical education details: country and university of your undergraduate medical degree, years of clinical experience, and specialty or area of interest. Accounts created before October 2026 may also keep an optional school and graduation year.
• Authentication data: a hashed password if you sign up with email, or your Google account identifier if you sign in with Google. We never see your Google password.
• Messages: the content, sender, timestamps and read state of private messages between you and the FMProC Prep admin team.
• Practice data: your answers, scores, attempt timestamps and review-importance ratings.
• Feedback: the question you reported, the issue type, an optional rating and comment, and your account email.
• Contribution data: the amount, currency, date and the payment provider's identifiers, such as Stripe or Buy Me a Coffee. We do not receive or store your card number.
• Support messages: the name, email, topic, subject and message you submit through the contact form, kept as a ticket so we can reply and follow up.
• Usage data: privacy-friendly, cookie-free page analytics through a self-hosted Umami instance, covering page views and referrers.

Why we collect it

We collect it to create and secure your account, save your progress, show your attempt history, respond to your messages, respond to question reports, process voluntary contributions, understand which pages are useful, understand who uses the bank so we can improve it, and keep the service reliable. We do not sell personal data or use it for advertising.

Cookies and local storage

We use a small number of first-party cookies for authentication and session management. They are required for the service to work. Analytics are cookieless. We do not use advertising or cross-site tracking cookies.

Service providers

• Stripe and Buy Me a Coffee process contributions and handle card data. Buy Me a Coffee is a separate service with its own privacy policy.
• Resend delivers verification, password-reset, welcome, support and thank-you emails.
• Google is used only if you choose Google sign-in.
• Cloudflare provides DNS, proxying and tunnel connectivity.
• Our hosting provider stores the application and database.

These providers process data on our instructions or under their own terms. Some may process data outside Canada. Where required, we rely on appropriate contractual safeguards.

Retention

We keep account and practice data while your account exists. If you delete your account, we remove your profile, sessions, attempts, importance ratings and messages, and we detach your identity from feedback and donation records. We may retain donation records in anonymised form for accounting and fraud prevention. We keep server logs for a short operational period.

Your choices

From the account page you can update your profile, export your data as JSON, or delete your account. You can also email us to request access, correction or deletion. If you are in Canada, these rights are provided under applicable privacy law, including PIPEDA where it applies.

Security and children

We use encrypted transport, hashed passwords, scoped sessions and access controls. No service is perfectly secure. The site is intended for adults preparing for postgraduate medical training and is not directed at children.

Changes and contact

We may update this policy as the service changes. We will note material changes by updating the date at the top. Questions or requests: [email protected].