Privacy Policy

1. Introduction

RadPreps ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our gamified exam preparation platform for radiology and medical imaging professionals.

2. Information We Collect

2.1 Personal Information

• Account information: Full name, username, email address, password (encrypted)
• Profile information: Avatar/profile picture, bio, professional credentials
• Payment information: Processed securely through Stripe (we do not store full credit card details)
• Referral information: Referral codes and relationships with other users

2.2 Usage Data

• Quiz attempts: Questions answered, scores, completion time, mode (Exam/CPD)
• Gamification data: XP earned, gems collected, streaks, quest progress, league rankings
• Social interactions: Feed posts, likes, follows, duel challenges and results
• Device information: IP address, browser type, device type, operating system
• Location data: Country/region based on IP address for analytics and localization

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze platform usage.

3. How We Use Your Information

• Provide and maintain the platform and its features
• Process your quiz attempts and track your learning progress
• Calculate and display gamification metrics (XP, gems, streaks, leagues)
• Facilitate social features (feed, follows, duels, referrals)
• Process premium subscriptions and manage billing
• Send notifications about duels, follows, achievements, and platform updates
• Analyze usage patterns to improve our content and features
• Prevent fraud, abuse, and ensure platform security
• Comply with legal obligations and enforce our Terms of Use

4. Information Sharing and Disclosure

4.1 Public Information

The following information is publicly visible to other users:

• Username, full name (if provided), avatar, bio
• XP total, current streak, league tier and rank
• Feed posts and likes
• Followers and following lists
• Duel statistics and leaderboard rankings
• Public quiz achievements shared on the feed

4.2 Third-Party Service Providers

We share information with trusted third parties who assist us in operating the platform:

• Stripe: Payment processing for premium subscriptions
• Resend: Email delivery for notifications and account verification
• Vercel: Hosting and infrastructure
• MongoDB Atlas: Database hosting
• Cloudflare R2: Image and file storage

4.3 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights, property, or safety.

5. Data Security

We implement industry-standard security measures to protect your information:

• Passwords are encrypted using bcrypt hashing
• HTTPS/TLS encryption for all data transmission
• Secure session management with HTTP-only cookies
• Regular security audits and updates
• Access controls and authentication for admin functions

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: View and export your personal data from your profile settings
• Update: Modify your profile information, email, and password at any time
• Delete: Request account deletion, which will permanently remove your data (Note: some data may be retained for legal/fraud prevention purposes)
• Opt-out: Disable email notifications in your account settings
• Data Portability: Request a copy of your data in a structured format

To exercise these rights, contact us at privacy@radpreps.com or use the account deletion feature in your settings.

7. Children's Privacy

RadPreps is intended for professionals and students in the healthcare field. We do not knowingly collect information from individuals under 16 years of age. If we become aware of such collection, we will promptly delete the data.

8. International Data Transfers

Your information may be transferred to and maintained on servers located outside your country of residence. By using RadPreps, you consent to the transfer of information to countries that may have different data protection laws.

9. Data Retention

We retain your information for as long as your account is active or as needed to provide services. When you delete your account:

• Profile information is immediately removed
• Quiz attempts and scores are anonymized
• Feed posts and social interactions are deleted
• Payment records are retained for 7 years for tax/legal compliance
• Aggregated anonymous analytics may be retained indefinitely

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the platform. Continued use of RadPreps after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: