Privacy Policy

1.Introduction

This Privacy Policy describes how [Legal Entity Name]("Learn My Drugs," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use the Learn My Drugs websites, applications, and services (the "Service"). It applies to information we process as a controller. Where we process information on behalf of an Organization (see section 10), that Organization is the controller and its own privacy policy may also apply.

By using the Service you acknowledge this Policy. Capitalized terms not defined here have the meaning given in our Terms of Service.

2.Who we are

Learn My Drugs is a study and training platform that helps individuals and teams learn medications by generic name, brand name, and use case. The data controller responsible for your personal information is:

• Entity: [Legal Entity Name]
• Address: [Mailing Address]
• Privacy contact: privacy@learnmydrugs.com

3.Information we collect

3.1 Information you provide

• Account information: name, email address, password (stored only as a secure hash by our authentication provider), and, for sign-in via third parties, the basic profile information that provider shares.
• Profile & organization information: organization name, role (e.g., Administrator or Member), team assignments, and any optional profile details you add.
• User Content: custom study sets, flashcards, quizzes, and other materials you create or upload.
• Communications: the contents of messages you send us (e.g., support requests) and your communication preferences.
• Payment information: if you purchase a paid plan, our payment processor collects your payment details. We receive limited information such as billing contact, plan, and the last four digits and brand of your card — we do not store full card numbers.

3.2 Information we collect automatically

• Learning & usage data: study progress, mastery levels, sets and quizzes opened, answers, quiz scores, attempts, streaks, timestamps, and feature usage.
• Device & log data: IP address, browser type, device type, operating system, language, referring pages, and access times.
• Cookies & similar technologies: identifiers and settings used to keep you signed in and remember preferences (see section 7).

4.How we collect it

• Directly from you when you register, create content, communicate with us, or make a purchase.
• Automatically through your use of the Service, via cookies and similar technologies.
• From your Organization or its Administrators when they add you, assign you content, or manage your account.
• From third-party providers such as authentication and payment processors that help us deliver the Service.

5.How we use information

We use personal information to:

• Provide, operate, and maintain the Service and your account;
• Track and display your learning progress, scores, and recommendations;
• Enable Organization features, including assignments and progress reporting to Administrators;
• Process payments and manage subscriptions;
• Communicate with you about your account, security, updates, and support;
• Send service and (where permitted) marketing communications, from which you can opt out;
• Personalize, analyze, improve, and develop new features for the Service;
• Maintain the security and integrity of the Service, prevent fraud and abuse, and enforce our Terms; and
• Comply with legal obligations and exercise or defend legal claims.

6.Legal bases for processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR/UK GDPR:

• Contract — to provide the Service you request and administer your account.
• Legitimate interests — to secure, analyze, and improve the Service, prevent abuse, and communicate with you, where not overridden by your rights.
• Consent — for certain cookies and marketing communications, which you may withdraw at any time.
• Legal obligation — to comply with applicable laws.

7.Cookies & tracking technologies

We and our providers use cookies, local storage, and similar technologies to keep you signed in, remember preferences (such as your light/dark theme), maintain security, and understand how the Service is used. We use:

• Strictly necessary technologies required to operate the Service and authenticate you;
• Preference technologies that remember your settings; and
• Analytics technologies that help us measure and improve performance.

You can control cookies through your browser settings. Disabling some cookies may affect how the Service works (for example, you may be signed out).

8.How we share information

We do not sell your personal information. We share it only as described below:

• Service providers / sub-processors who process data on our behalf to host, secure, and operate the Service (see section 9), under contracts that limit their use of the data.
• Your Organization — if you use the Service as part of an Organization, your Administrators can access your account and learning activity within that Organization (see section 10).
• Payment processors to process transactions.
• Legal & safety — when required by law, subpoena, or government request, or to protect the rights, property, or safety of Learn My Drugs, our users, or others, and to enforce our Terms.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
• With your consent or at your direction.

9.Sub-processors we rely on

We use the following key providers to operate the Service. Each processes only the data needed for its function:

We may update this list as our providers change. Contact us for the current list of sub-processors.

10.Team & organization data

When you use the Service as a Member of an Organization, the Organization (through its Administrators) can view and manage your account activity within that Organization, including your study progress, quiz scores, completion status, and assigned content. In that context, the Organization is the controller of your information and its own privacy policy governs how it uses that information.

If you have questions about how your Organization uses your data, or you wish to exercise your rights regarding it, please contact your Administrator directly. We will assist Organizations in responding to such requests where appropriate.

11.Data retention

We retain personal information for as long as your account is active or as needed to provide the Service, and afterward only as necessary to: comply with our legal obligations, resolve disputes, enforce our agreements, and maintain security and backups. When information is no longer needed, we delete or anonymize it. If you delete your account, we will delete or de-identify your personal information within a reasonable period, except where retention is required by law or for legitimate backup purposes.

12.Security

We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls, and reliance on reputable infrastructure providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying us of any suspected unauthorized use.

13.International data transfers

We and our providers may process and store information in countries other than the one in which you live, including the United States. These countries may have different data-protection laws. Where we transfer personal information out of the EEA, UK, or Switzerland, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses, where required.

14.Your privacy rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access — request a copy of the information we hold about you;
• Correction — ask us to correct inaccurate or incomplete information;
• Deletion — ask us to delete your information;
• Portability — receive your information in a portable format;
• Restriction / objection — restrict or object to certain processing, including direct marketing;
• Withdraw consent — where we rely on consent, withdraw it at any time; and
• Complain — lodge a complaint with your local data protection authority.

To exercise these rights, email privacy@learnmydrugs.com. We may need to verify your identity before acting on your request, and we will respond within the timeframe required by applicable law. You will not be discriminated against for exercising your rights.

15.U.S. state privacy rights

If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have rights to know, access, correct, delete, and obtain a portable copy of your personal information, and to opt out of the "sale" or "sharing" of personal information and of targeted advertising. We do not sell your personal information and do not share it for cross-context behavioral advertising. To exercise your rights, contact us at privacy@learnmydrugs.com. You may use an authorized agent, and we will verify requests as required by law.

16.Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us at privacy@learnmydrugs.com and we will take steps to delete it. Users must meet the minimum age requirements in our Terms of Service.

17.Third-party links & services

The Service may contain links to third-party websites or integrate third-party services. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you use.

18.Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. Because there is no consistent industry standard for DNT, we do not currently respond to DNT signals. We do honor recognized opt-out preference signals where required by law.

19.Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice through the Service or by email. Your continued use of the Service after changes take effect constitutes acknowledgment of the updated Policy.

20.Contact us

If you have questions, concerns, or requests regarding this Policy or your personal information, contact us at:

• Privacy: privacy@learnmydrugs.com
• Support: support@learnmydrugs.com
• Entity: [Legal Entity Name]
• Address: [Mailing Address]