Med Ed Tracker — Privacy Policy

1. Information We Collect

We may collect the following categories of information when you use the Services:

• Account & Profile Information: Name, email address, and password when you create an account. You may also choose to provide a phone number, a profile picture, and notification preferences. If you use the Services as a manager, we collect organization details you provide (such as organization name and address).
• Professional Information: CME and continuing-education activity details, credit records, license details, and renewal/expiration dates that you input.
• Documents You Upload: License or certificate files you upload, and the information contained in them (such as your name, license number, and relevant dates). To save you from entering this manually, the contents of these documents are processed by a third-party artificial-intelligence service (Google Gemini) that extracts the relevant details. See Section 4 (How We Share Information).
• Usage & Device Data: Log files, IP address, approximate location derived from your IP address (such as city, state, and country), browser type, operating system, device information, pages viewed, login history, and your interactions with the Services. We also collect performance and error diagnostics to keep the Services working.
• Cookies & Tracking Data: Information collected through cookies and similar technologies, as described in Section 2.
• Communications: Information you provide when you contact us for support or submit feedback.

2. Cookies & Tracking Technologies

We and our third-party partners use cookies and similar technologies. The categories we use are:

• Strictly Necessary (First-Party) Cookies: We use first-party cookies (for example, secure session cookies such as accessToken and refreshToken) to keep you securely logged in and to operate core features. These are required for the Services to function and cannot be turned off without breaking functionality.
• Analytics Technologies: We use Cloudflare Web Analytics and a Google tag to understand how visitors use the Services (for example, page performance and usage patterns).
• Advertising Technologies: We use Google Ads, which may set advertising cookies (for example, _gcl_*) and includes conversion tracking that measures the effectiveness of our advertising.

You can control or delete cookies through your browser settings. Disabling strictly necessary cookies may prevent you from using parts of the Services.

3. Analytics, Advertising & Do-Not-Track

Analytics. We use Cloudflare Web Analytics and Google's tag to measure usage and performance so we can improve the Services.

Advertising. We use Google Ads, including conversion tracking, to measure and improve our advertising. When you use the Services, Google may set advertising cookies and may receive information such as your IP address, browser type, and the pages you visit.

Third-Party Tracking Across Sites. Third parties, including Google, may collect personally identifiable information about your online activities over time and across different websites or online services when you use our Services, including for advertising and measurement purposes.

Do-Not-Track and Global Privacy Control. Some browsers offer a "Do Not Track" ("DNT") signal. Because there is no industry-standard way to respond to DNT signals, our Services do not currently respond to DNT signals. Our Services also do not currently respond to Global Privacy Control (GPC) signals.

4. How We Use Information

We use the information we collect to:

• Provide, operate, secure, and maintain the Services;
• Track CME activities, licenses, and deadlines you input, and extract details from documents you upload;
• Send reminders, notifications, and service-related communications;
• Improve, personalize, and measure the performance of the Services;
• Detect, prevent, and address security incidents, fraud, and abuse;
• Respond to support and feedback inquiries;
• Comply with legal obligations.

5. How We Share Information

We do not sell your personal information for money. We do, however, use third-party advertising and analytics services (such as Google Ads) that may involve sharing limited information — such as cookie identifiers and IP address — for advertising and measurement, as described in Sections 2 and 3. Some U.S. state privacy laws may treat this kind of advertising activity as a "sale" or "share"; where those laws apply to us, we will honor the rights they provide.

We share information with the following categories of third parties:

• Hosting & Infrastructure: Cloud hosting and database providers that operate the Services and store data (for example, our application host and managed database provider).
• Email Delivery: An email service provider that sends verification, reminder, and account-related emails.
• Advertising: Google Ads, for advertising and conversion measurement.
• Analytics: Cloudflare and Google, to measure usage and performance.
• AI Document Processing: When you upload a license or certificate, the document's contents are sent to a third-party AI service (Google Gemini) to extract information such as license numbers and dates.
• Content Delivery (CDN): Providers that deliver fonts and icons used by the Services (for example, Google Fonts and a content-delivery network).
• Legal Requirements: If required by law, court order, or government request, or to protect the rights, safety, or security of our users or the Services.
• Business Transfers: In connection with a merger, acquisition, financing, or sale of assets, information may be transferred.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information, including encryption of account passwords and transmission over secure connections. However, no system can be completely secure, and we cannot guarantee absolute security of your data.

7. Data Retention

We retain your information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Certain operational records, such as logs and diagnostics, are kept for a limited period and then removed. You may delete your account and associated data at any time, as described in Section 8.

8. Your Privacy Choices & How to Access, Correct, or Delete Your Information

You can review and manage much of your information directly within the Services:

• Access & Correct: Edit your profile in Settings, and add, edit, or delete your licenses and CME activities from your dashboard. You can change your password at any time.
• Delete: You may permanently delete your account and associated data at any time using the Delete Account option in Settings, which removes your account and related records (such as your licenses, activities, and sessions). You may also contact us at the email below for help.
• Notification Preferences: You can manage or turn off reminder and notification emails in your account settings.

If you would like assistance exercising any of these choices, contact us at feedback@mededtracker.com.

9. Your California Privacy Rights

This Policy provides the disclosures required by the California Online Privacy Protection Act (CalOPPA), including the categories of personally identifiable information we collect (Section 1), the categories of third parties with whom we may share it (Section 5), how third parties may collect information across sites and how we respond to Do-Not-Track signals (Section 3), the process for reviewing and changing your information (Section 8), and how we notify you of changes (Section 11).

"Shine the Light" (Cal. Civ. Code § 1798.83). We do not share your personal information with third parties for those third parties' own direct-marketing purposes. California residents may request information about such disclosures by contacting us.

California Consumer Privacy Act (CCPA/CPRA). Some California privacy rights, such as the rights to know, delete, correct, and opt out of the "sale" or "sharing" of personal information, apply only to businesses that meet certain size or data-volume thresholds. To the extent these rights apply to us, you may exercise them — including by using the access, correction, and deletion tools in Section 8 — and we will not discriminate against you for doing so. You may also submit a request by contacting us at feedback@mededtracker.com.

10. Your Responsibilities

• You are responsible for maintaining the accuracy of information you enter into the Services.
• You are responsible for keeping your account credentials secure and not sharing them with others.

11. Children's Privacy

The Services are intended only for individuals who are at least 18 years old and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will take steps to delete it.

12. Intended Use — United States Only

The Services are intended for use by individuals located in the United States. We make no representation that the Services comply with the laws of any other country. If you access the Services from outside the U.S., you do so at your own risk.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted here with a new effective date. For material changes, we will also provide notice by email or through the Services before the changes take effect. Continued use of the Services after changes become effective constitutes your acceptance of the updated Policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy choices, please contact us at:

feedback@mededtracker.com