Privacy Notice

• Account data: name, email address, profile image, and Google account identifier supplied during sign-in.
• Practice data: answers, practice letters, fictional case notes, speaking transcripts, grades, feedback, mistake patterns, and study modules.
• Study-plan data: profession, target score, exam date, weekly goal, and reminder choices you decide to save.
• Billing data: Paddle customer/subscription identifiers, plan status, billing periods, usage counts, and transaction event records. We do not receive full card details.
• Technical data: session identifiers, security/rate-limit records, server diagnostics, and anonymized page/performance measurements.

• To provide the account, practice, grading, progress, billing, export, and deletion features you request (performance of the service agreement).
• To secure the service, prevent abuse, debug failures, and understand aggregate product performance (our legitimate interests in operating a reliable sandbox).
• To record optional exam outcomes, testimonial permission, or reminder preferences only when you choose to provide or enable them (consent, withdrawable at any time).
• To retain billing or security records where applicable law requires it (legal obligation).

The service is for fictional exam practice. It is not designed to process identifiable patient records or provide medical care.

We use providers only to operate the service:

• Google for account sign-in.
• Vercel for hosting, anonymized Web Analytics, and performance measurements. Vercel Web Analytics uses no analytics cookies and does not associate page views with your account.
• Neon for encrypted database hosting.
• AI and speech providers selected for grading, coaching, and transcription. Spoken audio is sent for transcription and then discarded by Stethoscore; the resulting transcript may be stored.
• Paddle as merchant of record for sandbox checkout, subscription management, tax, and invoices.

These providers may process data in countries outside yours. Where required, transfers rely on provider contractual safeguards and applicable transfer mechanisms.

We use a necessary secure session cookie to keep you signed in. The paste-letter form can save an unfinished draft in your browser session; it stays on that device and is cleared when the browser session ends or when you clear it. Vercel Web Analytics records anonymized page, referrer, country, device, and browser aggregates without cookies. We do not use advertising trackers or sell data.

Practice and account content is kept while your account is active so progress remains available. You can export or delete it from the Account page. Deletion removes tenant practice content and anonymizes the retained account record. Billing, fraud-prevention, cost, and security records may be kept for the period required to meet legal, tax, dispute, and audit obligations. Backups age out through the hosting provider's normal rotation. Anonymized quality flags and aggregate analytics may remain because they no longer identify you.

Depending on where you live, you may ask for access, correction, deletion, restriction, objection, portability, or withdrawal of consent. The account page provides direct export and deletion controls; for anything else email support@stethoscore.app. We may need to verify the request. You may also complain to the data-protection authority where you live or work.

We use access controls, row-level tenant isolation, encryption in transit, restricted service credentials, and verified billing webhooks. No service can promise absolute security. Stethoscore is intended for adults preparing for a professional exam and is not directed to children under 18.

Material changes will be shown in the service and reflected in the date above. If a change requires consent, we will ask before applying it.