Privacy Policy

Last updated: August 2026

This policy explains what information OphthoAcademy ("OphthoAcademy," "we," "us") collects when you use the OphthoAcademy app (the "Service"), and how we use, share, and protect it.

1. Information We Collect

We collect the following categories of information:

• Account information — the email address and username you sign up with, and your password (stored securely by our authentication provider; we never see or store it in plain text).
• Profile information — an avatar image, if you choose to upload one.
• Study activity — lessons and questions you complete, answers, scores, XP, streaks, badges, bookmarks, and spaced-repetition review history. This is the core data the Service needs to function.
• Content you submit — question reports and any comments you write when flagging a problem with a quiz question.
• Technical information — the app version you're running, and basic usage timing needed to operate features like daily usage limits (when enabled).

We do not currently use any third-party advertising or analytics SDKs. If that changes, this policy will be updated first.

2. How We Use Your Information

• To provide and operate the Service — tracking your progress, awarding XP/badges, and powering spaced-repetition reviews.
• To respond to question reports and improve the accuracy of our content.
• To maintain the security of the Service, including preventing abuse (e.g. automated sign-ups) and enforcing our Terms of Service.
• To communicate with you about your account when necessary (e.g. password resets).

3. Who We Share Information With

We do not sell your personal information. We share limited data with the following service providers, solely to operate the Service:

• Supabase — our database, authentication, and file storage provider. All account and study-activity data is stored with Supabase.
• Cloudflare (Turnstile) — used to verify that sign-ups are coming from a real person, not a bot. Cloudflare processes some technical/device information as part of this check, governed by Cloudflare's own privacy policy.
• Resend — used only to send an internal daily summary of open question reports to our own team; this may include the email address and comment text of a user who submitted a report.

We may also disclose information if required by law, or to protect the rights, safety, or property of OphthoAcademy or our users.

4. International Data Transfers

Our service providers may process and store data outside your own country. By using the Service, you understand that your information may be transferred to and processed in countries with different data protection laws than your own.

5. Your Rights

• Access & correction — you can view and edit most of your profile information directly in the app.
• Deletion — you can permanently delete your account and all associated data at any time from Settings → Account → Delete Account. This action is immediate and irreversible.
• Export — a self-service data export isn't built yet. Until it is, email info@ophthoacademy.com and we'll provide a copy of your data.

If you are located in the European Economic Area or another jurisdiction with its own data protection framework, you may have additional rights under that law — contact us and we'll do our best to accommodate them.

6. Data Retention

We keep your information for as long as your account is active. If you delete your account, your data is removed from our active database immediately; residual copies may briefly persist in backups before being purged on our normal backup rotation schedule.

7. Children's Privacy

OphthoAcademy is intended for medical students, residents, and other adult learners. We do not knowingly collect information from children, and the Service is not directed at anyone under the age of 16.

8. Security

We use industry-standard measures to protect your information, including encrypted connections, database-level access controls that restrict each user to their own data, and secure password hashing handled entirely by our authentication provider.

9. Changes to This Policy

We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you in the app.

10. Contact Us

Questions about this policy or your data? Email info@ophthoacademy.com.