Home › Privacy policy
Privacy Policy
We collect only what we need to run your account and your practice exams, and we never sell your information.
Last updated October 22, 2026.
What we collect
- Account details: your email address and password. Passwords are stored in encrypted (hashed) form by our authentication provider; we cannot see them.
- Your practice activity: the answers you choose, your scores and your progress, so we can show your results.
- Purchases: which plan you bought, the amount and the date. Card payments are handled by Stripe. We never see or store your card number.
- Messages: anything you send us through the contact form or by email.
- Site usage: anonymous visit statistics (pages viewed, referring site, country and device type) through Vercel Web Analytics, which uses no cookies, and anonymous counts of free-demo use. These are not linked to your identity.
- Login session: a small amount of data stored in your browser to keep you signed in and to allow one active login per account.
How we use it
- To create your account, sign you in and unlock what you purchased.
- To show your scores and review your answers.
- To reply to your questions and send account emails, such as sign-up confirmation and password resets.
- To prevent account sharing and misuse.
We do not sell or rent your personal information, and we do not use it for advertising.
Who we share it with
We use a small number of service providers to run the site, who process data only on our behalf:
- Supabase for accounts and the database.
- Vercel for hosting the website and anonymous visit statistics.
- Stripe for payments.
These providers may store or process data outside Canada, including in the United States, where it may be subject to the laws of that country. We may also disclose information if required by law.
How long we keep it
We keep your account information while your account is open. Purchase records are kept as long as needed for accounting and tax purposes. You can ask us to delete your account at any time.
Your choices and rights
You can ask to see the personal information we hold about you, correct it, or delete your account by emailing info@mcqpharma.com. We will respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.
Security
The site uses encrypted connections (HTTPS), and access to our database is restricted. No system is perfectly secure, but we take reasonable steps to protect your information.
Contact
Questions about this policy: info@mcqpharma.com. If we change this policy, we will update the date above.