Privacy Policy

1. Who we are

PA BoardLab ("we," "us") is a board-exam preparation service for physician assistants, available at paboardlab.com and as an iOS app. This policy describes what information we collect, how we use it, and the choices you have.

2. Information we collect

Account information. When you sign up we collect your email address and, if you provide it, a display name, exam type, exam date, and study preferences from onboarding.

Study activity. We record your answers, quiz sessions, bookmarks, self-classified miss reasons, streaks, and progress statistics so the app can track your mastery and build your study plan.

AI tutor conversations. Messages you send to the AI tutor are processed by Anthropic's Claude API to generate responses and are stored with your account so you can revisit them. Do not include patient-identifiable information or anyone's personal health information in tutor messages.

Payment information. Payments are processed by Stripe (web) or Apple (iOS). We never see or store your full card number. We store your subscription status and, for web subscriptions, a Stripe customer identifier.

Technical data. Standard server logs (IP address, browser type, timestamps) collected by our hosting infrastructure for security and reliability.

3. How we use it

To operate the service: personalize your study plan, compute readiness and mastery analytics, sync progress across web and iOS, enforce free-tier limits, and provide the AI tutor. We also use aggregate, de-identified activity (for example, how often a question is missed) to improve question quality. We do not sell your personal information and we do not show ads.

4. Service providers

We rely on a small set of processors: Google Firebase (authentication, database, hosting), Stripe (web payments), Apple (iOS payments), and Anthropic (AI tutor responses). Each receives only the data needed to perform its function.

5. Data retention and deletion

Your data is retained while your account is active. You can request deletion of your account and all associated data at any time by emailing agoodrum@harborhealthsolutions.org from your account email. We will complete deletion within 30 days, except records we must keep for tax or legal compliance.

6. Security

Data is encrypted in transit (TLS) and at rest by our infrastructure providers. Access to production data is limited to the operator of the service. No system is perfectly secure; if we learn of a breach affecting your data we will notify you promptly.

7. Children

PA BoardLab is intended for adult clinicians and PA students and is not directed to children under 13. We do not knowingly collect personal information from children under 13; if you believe a child has provided us information, contact us and we will delete it.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. Email us and we will honor these requests for all users regardless of jurisdiction.

9. Changes

We may update this policy as the service evolves. Material changes will be announced in the app or by email, and the effective date above will be updated.