Privacy Policy

What this covers

This policy explains what cmeprep.me collects when you use the site, why we hold it, and what you can ask us to do with it. It applies to the website and to your study account.

What we collect

We collect only what the service needs to work:

• Account details — your name and email address, plus a password that is stored only in hashed form. We never see your password.
• Study activity — the tests you create, the answers you select, how long you spend, your scores, and any questions you bookmark or write notes on. This is what powers your dashboard and progress tracking.
• Purchase records — which plan and examination you bought, when your access ends, and the reference number PayPal gives the transaction. We also keep a record of the payment notifications PayPal sends us.
• A session cookie — set when you log in, so the site knows it is still you as you move between pages.

What we do not collect

We do not receive or store your card, bank or PayPal login details. Payments are handled entirely by PayPal on their own systems; we are only told whether a payment succeeded and given a reference for it.

We run no analytics, advertising or tracking of any kind. There are no third-party scripts, tracking pixels or advertising cookies on this site, and the fonts are served from our own servers rather than fetched from an outside provider. The only cookie we set is the login session cookie described above, which is why you are not asked to accept cookie tracking.

How we use it

• To give you access to the question bank and to run your practice tests.
• To show your results, progress and weak areas.
• To confirm what you have paid for and when that access ends.
• To send account emails — verifying your address and resetting your password.
• To keep the service secure and to investigate misuse.

Who else is involved

We keep the list of companies that can touch your data as short as we can. Each one is used for a single purpose:

• Supabase — stores the database, handles logins and hosts uploaded question images.
• PayPal — processes payments. Their own privacy policy governs what they collect when you pay.
• Vercel — hosts the website and serves it to your browser.

Where your data is held

The companies above operate servers outside the Caribbean, so your information is stored and processed abroad. We use them because they provide the security and reliability we could not run ourselves.

How long we keep it

We keep your account and study history for as long as your account exists, because your progress statistics depend on it. Purchase records are kept longer where we need them for accounting. If you ask us to delete your account, we remove your personal details and study history, though anonymous records that cannot be traced back to you may remain.

Your choices

You can change your name and password yourself from your profile page at any time.

For anything else — a copy of what we hold, a correction, or deletion of your account — email support@cmeprep.me from the address on your account and we will handle it. Deleting your account ends any remaining paid access, and we cannot restore your study history afterwards.

Security

The site is served over an encrypted connection, passwords are hashed rather than stored, and access to the database is restricted so that you can only ever read your own records. No system is perfectly secure, but we do not collect data we do not need — which is the most reliable protection there is.

Children

This service is intended for medical students and qualified practitioners preparing for professional examinations. It is not aimed at children, and we do not knowingly create accounts for them.

Changes to this policy

If we change how we handle your information, we will update this page and the date at the top. Significant changes will be notified by email.

Contact

Questions about this policy, or about your data, go to support@cmeprep.me.