Last updated November 11, 2026
The short version
We collect what we need to run your account and your practice, and nothing to sell. We don't sell or rent your data, and we don't show you ads.
What we collect
- Account details: your email, your name, where you trained and your exam date, if you add them.
- Practice data: the questions you answer, your choices, how long each took, mistake tags you add, mock exam results and OSCE station scores.
- OSCE conversations: what you say or type during a station is sent to our AI providers to generate the patient's replies and your score. We keep your score and feedback, not the audio. Video stations run with the provider's data retention turned off.
- Payments: Stripe handles your card. We never see or store card numbers. We receive your email, the plan you bought and the payment status.
- Referral invites: if you invite a friend, we keep the email address you enter so the one-time code works only for them. If you ask us to email the invite, we send that person one email naming you as the sender and never email them again unless they sign up. A friend who replies STOP is never contacted.
- Reviews: if you write one, we show the name you choose, your rating, your text, where you trained and how much of RxReady you've used.
- Account protection: a random device ID and your browser type each time you sign in, so an account is used on one device at a time and shared logins can be spotted.
- Site analytics and ads: Cloudflare counts page views without cookies. We also use the Google Ads tag, which sets cookies, to measure whether a visit from one of our ads led to a sign-up or purchase. We record which link or site brought you to RxReady (for example a Facebook group or an ad) when you create an account.
Who processes it for us
- Supabase: accounts and the database
- Cloudflare: hosting, AI models for patient replies, voice and scoring, and analytics
- Anam: video patients in OSCE stations
- Google: ad measurement (Google Ads tag)
- Stripe: payments
- Resend: account emails
Some of these providers store data outside Canada, including in the United States.
How long we keep it
We keep your data while your account exists. Delete your account and we remove your personal data within 30 days, apart from payment records we must keep for tax purposes.
Your choices
You can see and change your details on the Account page. To get a copy of your data, correct it or delete your account, email info@getrxready.ca and we'll reply within 30 days. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Contact
Questions about privacy: info@getrxready.ca.