Privacy Policy

Master Your Medics ("we," "us," or "our") provides clinical education, competency tracking, and assessment tools for EMS learners and the schools that train them. This Privacy Policy describes what personal information we collect, how we use it, and the choices you have.

By creating an account or using the platform, you agree to the practices described here.

1. Information we collect

• Account information — name, email, password, and role (student, instructor, preceptor, admin).
• Learning activity — course enrollments, lesson progress, quiz and exam attempts, scores, diagnostic results, simulator sessions, submitted patient care reports (PCRs), and completion timestamps.
• Communications — messages, support requests, and question submissions.
• Payment information — handled by Stripe and Shopify; we store order references, product purchased, and fulfillment status but never full card details.
• Device and usage data — IP address, browser type, pages visited, and analytics events used to secure the platform and improve the product.

2. How we use information

• Deliver the courses, assessments, certificates, and books you purchase or are enrolled in.
• Track competency progress and generate reports for you, your instructors, and — where applicable — your school.
• Authenticate accounts, enforce two-factor authentication for staff, and prevent abuse.
• Process payments and fulfill physical and digital orders.
• Send transactional email (receipts, verification codes, course communications) and, where you have opted in, marketing email.
• Improve the platform through aggregated analytics and product research.

3. Organization students — shared learning records

If you are enrolled in Master Your Medics through a school, college, training program, or other partner organization (an "Organization"), your completion status, quiz and exam marks, competency progress, attendance in scheduled events, clinical rotation hours, and submitted patient care reports are made available to that Organization's administrators, instructors, and preceptors.

This data is stored and shared for the purposes of instructional oversight, grading, program management, and accreditation reporting to the regulatory bodies that oversee your Organization's program. Your Organization is the record keeper for this information and may retain it for as long as required by its accrediting body or applicable law, even after your course has ended.

If you leave a cohort or transfer between Organizations, the learning records tied to your time in the original Organization remain accessible to that Organization for its accreditation and audit obligations.

4. Protected health information in PCRs

Patient Care Reports submitted through the platform are intended as de-identified educational records. Our system uses automated screening to flag potential personal health information (PHI) before submission, and preceptors and administrators can flag content for redaction. Do not include patient identifiers, full names, addresses, or other directly identifying information in PCR narratives.

5. When we share information

• Your Organization, as described in Section 3.
• Service providers that operate the platform on our behalf — hosting, payments (Stripe), storefront (Shopify), email delivery, video hosting (Mux), analytics, and support tooling — under contracts that limit their use of the data.
• Legal and safety — where required by law, subpoena, or to protect the rights, safety, and property of users or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to affected users.

We do not sell personal information.

6. Data retention

We retain account and learning data for as long as your account is active and as needed to comply with legal, tax, accreditation, and audit obligations. Organization learning records are retained according to the Organization's own retention requirements. You may request deletion of your account by contacting us; records the Organization must keep for accreditation will remain in the Organization's control.

7. Your choices and rights

• Update your profile and password from the Account settings page.
• Manage trusted devices and two-factor authentication under Account → Security.
• Unsubscribe from marketing email at any time using the link in the message.
• Request access, correction, or deletion of your personal information by emailing us at the address below. Depending on your location, you may have additional rights under GDPR, PIPEDA, CCPA, or similar laws.

8. Security

We use encryption in transit, row-level access controls, staff two-factor authentication, and audit logging to protect your information. No system is perfectly secure; please use a strong, unique password and notify us of any suspected compromise.

9. Children

The platform is intended for adult learners and school-approved students in EMS training. We do not knowingly collect personal information from children under 13.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you by email or in the platform.

11. Contact us

Questions about this policy or your data? Email geoff@masteryourmedics.com.