Privacy Policy

1. Scope

This policy explains what PharmSig collects when you use the service, why we collect it, who it is shared with, and what control you have. It covers pharmsig.com and the PharmSig application.

PharmSig is a training tool. We do not collect, process, or store patient health information. All prescriptions and patient details in the practice content are fictional. Do not enter real patient information anywhere in the service.

2. What we collect

Account information. Your name, email address, and organization name.

Training activity. Quiz scores, questions answered, accuracy, and practice history. If you belong to a pharmacy or academic organization, your administrator can see this activity.

Custom content. Sig codes your organization adds.

Demo requests. If you submit the demo form: your name, work email, institution, and job title.

Payment information. Processed by Stripe. We receive a customer identifier, subscription status, and billing dates. We never receive or store your full card number.

Technical data. Standard server logs including IP address, browser type, and pages requested, used for security and diagnostics.

3. Why we use it

• To provide the service and keep you signed in
• To show your progress, and to show organization administrators their members' progress
• To process subscriptions and prevent duplicate or fraudulent signups
• To respond to demo requests and support enquiries
• To diagnose faults and protect the service from abuse

We do not sell your personal information. We do not use your content to train AI models.

4. Who we share it with

We use a small number of processors, each handling only what their function requires:

• Supabase: database, authentication, and hosting of your account data
• Stripe: payment processing and subscription management
• Resend: transactional and notification email
• Vercel: application hosting, server logs, and privacy-friendly page view analytics
• Google AdSense: advertising on public pages, if and when enabled (see below)

We may also disclose information where legally required, or to protect our rights or the safety of others.

5. Advertising and cookies

We use cookies that are strictly necessary for the service: keeping you signed in and remembering your light or dark theme preference. These cannot be turned off without breaking sign in.

We measure page views using Vercel Web Analytics, which is cookieless and does not track individual visitors across websites. It tells us which pages are visited and where visitors arrived from, not who they are.

We may show advertising on public pages such as the home page and free tools, provided by Google AdSense. Advertising is never shown to signed in subscribers. Paid plans and academic licenses are entirely ad free.

Where advertising is shown, Google and its partners may use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalized advertising in Google Ads Settings, or opt out of third party vendor cookies at aboutads.info.

6. How long we keep it

Account and training data are kept while your account is active. If you cancel, we keep your data for 90 days so you can resubscribe without losing your progress, then delete it. Billing records are retained as long as tax and accounting law requires. Demo requests are kept for up to two years for sales follow up.

7. Security

Data is encrypted in transit. Organization data is separated using row level security, so one organization cannot read another's records. Passwords are stored hashed and are never visible to us. No system is perfectly secure, but we take reasonable measures appropriate to the data we hold.

8. Your rights

You can access and correct your information in your account settings. You can request a copy of your data or ask us to delete it by emailing us. Depending on where you live, you may also have the right to object to or restrict certain processing, or to lodge a complaint with a data protection authority.

We respond to requests within 30 days.

9. Children

The service is intended for pharmacy professionals and students, and is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe we have, contact us and we will delete it.

10. International users

The service is operated from the United States and your information is processed there. If you use the service from outside the US, you consent to that transfer.

11. Changes

We may update this policy. Material changes will be announced by email or in the app before they take effect.

12. Contact

Privacy questions or requests: sigpharmtrainer@gmail.com