Privacy Policy

Last updated: May 8, 2026

Introduction

PathoLearn ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and mobile application, including any other media form, media channel, mobile website, or mobile application relating or connected thereto (collectively, the "Site").

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Site.

1. Information We Collect

1.1 Information You Provide Directly

• Account Registration: Email address, full name, and password when you create an account
• Uploads: Histopathology slides and images you upload for analysis
• Activity Data: Your quiz answers, flashcard reviews, notes, and annotations
• Payment Information: Billing details (processed by Flutterwave; we do not store credit card numbers)
• Communication: Feedback, support tickets, and survey responses

1.2 Information Collected Automatically

• Device Information: Device type, operating system, browser type, IP address, and device identifiers
• Usage Data: Pages viewed, time spent, clicks, features used, and interactions with content
• Location Data: Approximate location based on IP address (not precise GPS)
• Cookies & Analytics: Vercel Analytics and browser cookies for site performance and user experience

1.3 Third-Party Information

If you sign in with Google OAuth, we receive your Google account email and name.

2. How We Use Your Information

We use collected information for:

• Creating and managing your account
• Providing AI-powered slide analysis and learning features
• Processing subscriptions and payments
• Tracking your progress and study history
• Improving our Site and features
• Sending transactional emails (receipts, password resets, trial expiry reminders)
• Responding to support requests
• Complying with legal obligations
• Preventing fraud and ensuring security

We do NOT use your email for marketing or promotional content without explicit consent.

3. Data Sharing & Third-Party Services

We share data with the following third parties:

• Supabase: Stores your account data, slides, quiz answers, and flashcard reviews. Supabase uses industry-standard encryption and security practices.
• Flutterwave: Processes payments. We never store your credit card details. Your payment data is handled by Flutterwave's secure payment gateway.
• Vercel: Hosts our Site. Your interactions with the Site generate analytics data processed by Vercel Analytics.
• OpenAI / Claude API: Your slide images and quiz data are sent to AI models to generate analyses. We only send the minimum data necessary for AI analysis.

We do not sell your personal data to third parties. We do not share your data with advertisers, data brokers, or marketing companies.

4. Data Security

We implement industry-standard security measures:

• HTTPS encryption for all data in transit
• Password hashing and secure authentication
• Access controls limiting employee data access
• Regular security monitoring

No method of transmission over the internet is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security. You use the Site at your own risk.

5. Data Retention

• Active Accounts: Your data is retained as long as your account is active
• Deleted Accounts: Upon account deletion, personal data is removed within 30 days. Anonymized usage data may be retained for analytics.
• Payment Records: Retained for 7 years for tax and legal compliance
• Backups: Data may exist in backups for up to 90 days

6. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Correction: Update or correct inaccurate data
• Right to Deletion: Request deletion of your account and personal data
• Right to Portability: Request your data in a portable format
• Right to Opt-Out: Opt out of analytics and non-essential cookies

To exercise these rights, email hello@getpatholearn.com with your request.

7. Cookies & Tracking

PathoLearn uses cookies for:

• Session management (keeping you logged in)
• Site analytics (Vercel Analytics)
• Dark mode preference
• iOS install prompt dismissal

You can disable cookies in your browser settings, but this may affect Site functionality.

8. Children's Privacy

PathoLearn is intended for medical students and healthcare professionals (ages 18+). We do not knowingly collect data from children under 13. If we become aware of such collection, we will delete the data immediately. If you believe we have collected a child's data, email hello@getpatholearn.com.

9. Educational Use & Disclaimer

PathoLearn is for educational purposes only and not for clinical diagnosis. Your uploaded slides and analyses should not be used for clinical decision-making. We are not liable for any clinical decisions made based on PathoLearn content.

10. International Data Transfers

Your data is processed and stored on servers in the United States (via Supabase and Vercel). By using PathoLearn, you consent to the transfer of your data to the US, which may have different data protection laws than your country.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, if significant, by email. Continued use of the Site after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy questions, data requests, or concerns, please contact:

Email: hello@getpatholearn.com
Website: www.getpatholearn.com

We will respond to privacy requests within 30 days.

This Privacy Policy is provided for informational purposes. It is not legal advice. For specific legal compliance questions (GDPR, CCPA, HIPAA), consult with a privacy attorney.