CorePrep← Back to Login

Privacy Policy

Last Updated: August 27, 2026

1. Introduction

This Privacy Policy explains how CorePrep collects, uses, stores, shares, and safeguards information when you use the CorePrep application, website, question bank, media, analytics, and related services (the "Service").

2. Information We Collect

  • Account details: first name, last name, email, country, and role.
  • Access status: account permissions, administrative role, and account state.
  • Learning data: tests you create, answers, scores, time-on-task, marked questions, review activity, peer-stat interactions, and reset history.
  • Usage and security data: login events, session activity, device and browser information, approximate network information, pages or content viewed, and other access logs.
  • Content-interaction data: question attempts, image and table views, navigation events, timing, and activity patterns used to operate and protect the QBank.
  • Account-specific identifiers: visible or invisible watermarks, forensic identifiers, tracing signals, or similar security markers that may be associated with your account or session.
  • Media you upload as an admin or authorized contributor, such as question stems, explanations, CT stacks, hotspot images, reference tables, captions, metadata, and related files.
  • Community case contribution data, including the contributor name requested for public credit, question text, answer choices, explanations, references, still images, captions, original file metadata, attestations, submission time, and editorial review records.

3. How We Use Your Information

  • To provide and improve the QBank experience (tests, reviews, analytics).
  • To manage account access, account status, authentication, and permissions.
  • To generate aggregated peer-comparison statistics (never identifying individuals).
  • To secure the Service, detect abuse, investigate unauthorized access, prevent account sharing, and enforce the Terms of Use.
  • To detect, investigate, and respond to unauthorized copying, screenshots, redistribution, scraping, resale, or other misuse of CorePrep content.
  • To preserve evidence and records when reasonably necessary for security, legal compliance, intellectual property protection, dispute resolution, or Terms enforcement.

4. Watermarks and Forensic Identifiers

CorePrep may embed visible or invisible account-specific identifiers, watermarks, tracing signals, or similar markers in questions, explanations, images, tables, CT-related media, and other QBank content. These identifiers are used for security, intellectual property protection, abuse prevention, and Terms enforcement. They may help CorePrep trace copied or distributed content back to an account or session without revealing the technical implementation of the marker.

CorePrep may review and preserve watermark records, account activity, content-interaction data, access logs, and related information when investigating suspected unauthorized copying, screenshots, sharing, uploads to other services, account sharing, or other misuse.

5. De-identified Clinical Content and Uploads

CorePrep is intended to use de-identified educational clinical content. Users and administrators must not upload protected health information, patient-identifying information, or clinical content that they are not authorized to provide. Uploaded files may be stored and processed to operate, secure, maintain, and improve the Service.

If you believe content in CorePrep includes identifiable patient information or creates a privacy concern, contact support@radcoreprep.com promptly.

Community case images are kept private while a submission is reviewed. If a submission is accepted, included images are copied into the private question-asset library and the original submission images are deleted after the copy is verified. If a submission is declined, its original images are deleted after the reviewer confirms the decision. Submission text, attribution, attestations, and review audit records may be retained. A reviewed contributor display name may appear publicly in the Service with a published question.

6. Data Storage and Security

Data is stored in Supabase (PostgreSQL and Storage). Row Level Security and access control policies are enforced on all tables. Files you upload (images, CT stacks, media, tables, and related assets) are stored in Supabase Storage. We use TLS for data in transit; Supabase manages encryption at rest. No production data is stored in browser localStorage beyond transient session tokens handled by Supabase auth.

No system can guarantee perfect security. CorePrep uses administrative, technical, and access-control safeguards intended to protect account, learning, upload, and security data.

7. Data Sharing

We do not sell your personal information. Aggregated, anonymized performance data may be used for benchmarking, analytics, and product improvement; individual users are not identifiable in these aggregates.

We may share information with service providers that help operate CorePrep, such as hosting, authentication, database, storage, analytics, email, security, and support providers. We may also disclose information when we believe it is reasonably necessary to comply with law, enforce the Terms of Use, investigate suspected misuse, protect intellectual property, respond to security incidents, or protect CorePrep, users, content owners, patients, or the public.

8. Data Retention

CorePrep keeps account, learning, upload, usage, security, and IP-enforcement records for as long as reasonably needed to provide the Service, improve the QBank, comply with legal obligations, resolve disputes, protect content, enforce the Terms of Use, and maintain security. Security, watermark, forensic identifier, and investigation records may be retained for as long as reasonably necessary for business, legal, and security purposes.

9. Your Choices

  • Update profile information in the app.
  • Request a password reset at any time.
  • Request account deletion by contacting support; deletion removes your profile and associated test history from Supabase.

Some records may be retained after an account deletion request when reasonably necessary for legal compliance, security, audit, fraud prevention, intellectual property protection, dispute resolution, or Terms enforcement.

If you contributed a case, CorePrep may retain the submission and review audit after account deletion, including the submitter name and email recorded at submission time. The account identifier is unlinked when the account is deleted. Published contributor attribution may remain unless CorePrep agrees to change it.

10. Contact Us

Questions or requests: support@radcoreprep.com.