How BoardsQuest protects your privacy

Account Information. We collect the email address and password you submit to create an account and sign in. Passwords are stored as hashes, not as plain text. We also store profile preferences such as selected specialties, experience points, unlocked powers, and similar study-progress settings.

Study Activity. When you practice in Quest, Qbank, or Review, we store activity tied to your account. This includes question attempts, selected answers, scores, ratings, written feedback, quest runs, Qbank sessions, streaks, and related progress needed to operate the Services.

Purchase data. If you subscribe, we store subscription status and transaction identifiers from payment providers (for example Stripe on the web, and Apple In-App Purchase on iOS). We do not receive full payment card numbers from Apple In-App Purchase. Stripe collects payment details as the merchant of record for web checkout.

Device and push data. The iOS app may send a push-notification device token, platform, environment, and app version so we can deliver reminders you choose to receive. You can change reminder preferences in the app.

Analytics and passively collected data. We collect data needed to run, secure, and debug the Services. This can include IP address, browser or app version, device type, operating system, and diagnostic logs. We use first-party session cookies and similar technologies that are required to keep you signed in and to protect forms. We do not use Google Analytics.

Feedback and support. If you write to us, we store the emails and messages you send and use them to respond and to improve the product.

De-identified data. De-identified data is non-personal information that is aggregated or de-identified so that it cannot reasonably be used to identify an individual. We use de-identified data to improve questions, refine study features, and develop the Services. We may disclose such information publicly or to third parties, for example in aggregated reports about study patterns.

We process personal data to provide the Service to you:

We use your email address to manage your account, authenticate you, send account messages such as password-reset and email-change links, respond to your requests, and inform you of Service changes.

We use Study Activity to show progress, resume practice sessions, award experience and powers, and personalize question selection.

We use machine learning to generate optional in-product hints and to author and review question-bank content. Hint generation sends the current question text and answer choices to a third-party AI provider. It does not send your email address or account password.

We use purchase data to unlock and maintain Pro access, restore purchases, and handle billing.

We use device and push data to send the notifications you enable, such as daily quest reminders, through Apple Push Notification service.

We use analytics and passively collected data to understand how you use BoardsQuest, to test features, to ensure the Service works, and to protect it from abuse.

We use personal data to improve BoardsQuest. For example: to troubleshoot and protect against errors; perform data analysis and testing; conduct research; develop new products or tools; and refine question content.

We may use your email address to send information about BoardsQuest. You can opt out of non-essential messages by following the instructions in the email or by contacting us. Account and security messages may still be sent.

We use personal data to promote the safety and security of BoardsQuest, our users, and other parties. For example, to protect against fraud and abuse, respond to a legal request or claim, conduct audits, and enforce our terms and other policies.

We never sell personal data. We only share it with consent or when required or permitted by law.

Here are the circumstances under which your personal data may be shared:

When you consent, agree, or direct us to share it. The Services may include links and interactions with third parties that are not controlled by BoardsQuest. We do not share personal data with those parties unless you direct us to do so. Once data is shared with a third party, it is covered by that party’s policies.

To provide the BoardsQuest Services. We transfer data to service providers and other partners who process it for us, based on our instructions and in compliance with this Privacy Policy and other confidentiality and security measures. This processing can include cloud hosting, email delivery, customer support, payment processing, push delivery, and AI inference for in-product hints.

When you subscribe through the website, Stripe processes payment. When you subscribe through the iOS app, Apple processes payment. We receive the subscription and transaction metadata needed to unlock and maintain Pro access. Stripe’s and Apple’s privacy policies apply to data those companies collect as merchants of record.

To comply with the law. We may disclose the information we collect in order to comply with the law, a judicial proceeding, court order, or other legal process, such as in response to a court order or a subpoena. Our policy is to notify you of legal process seeking access to your information, such as search warrants, court orders, or subpoenas, unless we are prohibited by law from doing so. In cases where a court order specifies a non-disclosure period, we provide delayed notice after the expiration of that period. Exceptions include exigent or counterproductive circumstances, for example when there is an emergency involving a danger of death or serious physical injury to a person.

To protect us and others. We may disclose the information we collect where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Service or this Policy, or as evidence in litigation in which BoardsQuest is involved.

Business transfers. If we are acquired by or merged with another company, if substantially all of our assets are transferred to another company, or as part of a bankruptcy proceeding or reorganization, we will give affected users notice before transferring any personal data to a new entity.

You may access and modify personal data that you have submitted by logging into your account and updating your email, password, specialty preferences, billing settings, and notification preferences. Copies of information that you have updated, modified, or deleted may remain in backups or logs for a period of time.

We store information associated with your account until your account is deleted. You can request deletion at any time by contacting us at support@boardsquest.com . We will process deletion requests in a reasonable time. We may preserve information when required for legal reasons or to prevent harm, including as described in the “When is personal data shared?” section.

This Privacy Policy is intended to provide California residents with notice under the California Consumer Privacy Act (CCPA). California residents have the right to:

• Opt out of the sale of personal information;
• Know about personal information collected, disclosed, or sold;
• Request deletion of personal information, and be treated without discrimination should you exercise these rights.

More information regarding the sources from which we collect personal information is in “What personal data does BoardsQuest collect when used?” Business and commercial purposes are in “How does BoardsQuest use personal data?” Categories of recipients are in “When is personal data shared?”

We do not sell any personal information collected from your use of the BoardsQuest Service.

To make a request under the California Consumer Privacy Act, or for any questions or concerns about our Privacy Policy or practices, please contact us at support@boardsquest.com .