Privacy Policy

1. Who We Are

PulmoLearn ("we," "us," or "our") is an online educational platform providing pulmonary disease curriculum to respiratory therapists and healthcare students. We operate at pulmolearn.com.

By creating an account or using PulmoLearn, you agree to the collection and use of information described in this Privacy Policy.

2. Information We Collect

We collect the following categories of information:

• Account information — your email address and password (stored securely and encrypted) when you create an account.
• Payment information — when you purchase access, your payment is processed by Stripe. We do not store your card number, expiry, or CVV. We only receive a confirmation of payment status from Stripe.
• Learning progress — your lesson completion status, percentage progress through each module, and timestamps of when you complete lessons. This is tied to your account so it persists across devices.
• Voucher usage — if you redeem a voucher code, we record which code was used and when.
• Usage data — basic information such as pages visited and time spent, collected through standard server logs. We do not use invasive tracking or advertising analytics.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate your identity
• Provide access to purchased course content
• Save and display your learning progress across sessions and devices
• Process payments and verify voucher redemptions
• Send transactional emails such as account confirmation and password resets
• Respond to support requests you initiate
• Improve the platform based on aggregate, anonymized usage patterns

4. Third-Party Services

We use a small number of trusted third-party services to operate PulmoLearn:

• Supabase — our database and authentication provider. Your account credentials and learning progress are stored on Supabase's infrastructure. Supabase is SOC 2 compliant. See their privacy policy at supabase.com/privacy.
• Stripe — our payment processor. All payment transactions are handled by Stripe and subject to their privacy policy at stripe.com/privacy. We never see or store your full card details.
• Vercel — our hosting provider. Your requests to PulmoLearn pass through Vercel's servers. See their privacy policy at vercel.com/legal/privacy-policy.
• Google Fonts — fonts are loaded from Google's servers, which may log your IP address. See Google's privacy policy.

5. Data Storage & Security

Your data is stored on Supabase's servers located in the United States. We implement row-level security so that your account data is only accessible by you — no other user can query your progress or personal information.

We use HTTPS for all communications between your browser and our servers, ensuring data is encrypted in transit. Passwords are never stored in plain text — they are hashed using industry-standard encryption before being stored.

While we take reasonable measures to protect your data, no method of electronic storage is 100% secure. We encourage you to use a strong, unique password for your PulmoLearn account.

6. Cookies

PulmoLearn uses a minimal set of cookies required to operate the platform:

• Authentication cookies — set by Supabase to keep you logged in between sessions. These are essential and cannot be disabled without breaking login functionality.
• Session cookies — temporary cookies that expire when you close your browser.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies that follow you across the web.

7. Your Rights

You have the following rights regarding your personal data:

• Access — you can request a copy of the personal data we hold about you.
• Correction — you can request that we correct inaccurate data.
• Deletion — you can request that we delete your account and all associated data. Once deleted, your learning progress cannot be recovered.
• Portability — you can request an export of your learning progress data in a readable format.

To exercise any of these rights, email us at hello@pulmolearn.com. We will respond within 30 days.

8. Children's Privacy

PulmoLearn is intended for adults aged 18 and over, specifically healthcare professionals and students in post-secondary education. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that a user is under 18, we will promptly delete their account and associated data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify registered users by email. Continued use of PulmoLearn after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: hello@pulmolearn.com
• Website: pulmolearn.com