Privacy Policy

Effective date: October 13, 2026
Last updated: October 13, 2026

1. Who we are

Redox Education ("Redox," "we," "us," or "our") is operated by Redox Educators LLC, doing business as Redox Education. This policy explains how we collect, use, share, and protect personal information when you use:

• our website at redoxedu.com, including our checkout and billing pages (the "Website");
• our learning platform at learn.redoxedu.com, including any school-branded version of it at another web address (the "Learning App"); and
• our iPhone app, which gives you access to the Learning App on iPhone with offline study and reminders (the "iPhone App").

Together we call these the "Services."

Contact: support@redoxedu.com
Mailing address: Redox Educators LLC, 16192 Coastal Highway, Lewes, DE 19958

If your school or program gave you access to the Learning App, your school may also have its own privacy policy that applies to how it uses your information. See section 5.

This policy does not cover our separate clinical rotation portal, which handles clinical compliance documents and has its own privacy notice.

2. Information we collect

2.1 Account information

To use the Learning App you need an account. You can sign up yourself, or you may be invited by your school or educator. When you create an account we collect:

• your full name;
• your email address;
• a password (stored by our authentication provider in hashed form; we never see it in plain text);
• your role (for example student, educator, or administrator) and the school, program, course, or organization you belong to, if any;
• for some course sign-ups, details your course asks for, such as your lab or class section and an acknowledgment of course terms; and
• if you are under 18, confirmation that a parent or guardian has agreed to our Terms of Service.

If your school or educator invites you, they give us your email address so we can recognize your invitation.

2.2 Purchase and subscription information

When you buy a plan, you pay on the Website through Stripe, our payment processor. Stripe collects your card or other payment details directly. We never receive or store your full card number or security code.

From Stripe we receive and keep:

• a Stripe customer ID and subscription ID that link your purchase to your account;
• the plan you bought, its price, the billing period, and whether it renews automatically;
• the status of your subscription (for example active, canceled, or past due) and key dates such as start, renewal, cancellation, and end dates;
• records of charges, refunds, and invoices, including the amount, currency, and date; and
• limited details Stripe shares for receipts and tax purposes, such as your billing country and postal code, and the card brand and last four digits shown on your receipt.

Your iPhone App does not sell anything. It reads your plan and subscription status from your account so it can show the content you have access to.

2.3 Study activity

When you study, we record your activity so we can show your progress and adapt your practice. This includes:

• questions you answer, the answers you choose, whether they were correct, your confidence rating, the time spent, and the study mode;
• quizzes, question sets, practice sessions, and focused study sessions you start and complete;
• flashcard reviews and their scheduling;
• which topics, notes, and learning materials you open or complete;
• diagnostic and practice assessments and your responses, including saved drafts;
• clinical case and surgical practice attempts;
• study plans, rotations, readings, and exam dates you add, and the practice exam scores you enter; and
• questions you flag for review.

We use this activity to calculate study estimates such as readiness or projected score ranges. These estimates are educational tools only. We do not use them to make decisions that have legal or similarly significant effects on you.

2.4 Content you create

• Study notes you write, including unsaved drafts kept temporarily in your browser.
• Messages you send to and receive from educators, tutors, or Redox staff in the Learning App.
• Feedback, error reports, and question flags you submit.

Educators and tutors may also create content about you, such as tutoring session notes, assignments, and study plan entries. That content is part of your record in the Learning App.

2.5 Communications

When you email us or message us in the Learning App, we keep the content of that communication and your contact details so we can respond.

2.6 Device and technical information

Like most online services, our hosting and database providers automatically receive technical information when you use the Services, such as your IP address, browser and device type, operating system, pages requested, and the date and time of requests. This is used to deliver the Services, keep them secure, prevent fraud and account sharing, and diagnose problems.

On the Website we use Vercel Web Analytics, which counts page views and collects general information such as the page visited, referring site, country, browser, operating system, and device type. It does not use cookies and is not used to identify you.

2.7 Website contact form

When you submit the contact form on the Website we collect your name, email address, phone number (if you provide it), the type of visitor you are and the service you are interested in, your message, and, if you arrived through one of our campaign links, the name of that campaign.

2.8 Information we do not collect

We do not collect government identification numbers or health information through the Website, the Learning App, or the iPhone App, and we do not store payment card numbers. Study content in the Learning App is about medicine, but it is educational material, not your own medical information. Please do not enter your own or anyone else's health information in notes or messages.

3. How we use information

We use personal information to:

• create and manage your account and sign you in;
• process purchases, manage your subscription, send receipts, renewal reminders, and other billing notices, and handle refunds;
• provide the Services, including showing your progress, scheduling flashcards, building study plans, and tracking exams;
• let your school, educators, and tutors support you (see section 5);
• deliver messages and send notifications, including email alerts when you receive a new message and, in the iPhone App, study reminders you turn on;
• respond to inquiries and support requests, and follow up about services you asked about;
• keep the Services secure, prevent fraud, abuse, account sharing, and unauthorized copying of our content, and fix problems;
• understand in aggregate how the Services are used so we can improve them; and
• comply with legal, tax, and accounting obligations and enforce our Terms of Service.

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use it to show you ads.

We do not send your study activity, notes, messages, or other personal information to artificial intelligence services, and we do not use them to train artificial intelligence models. If we ever want to change this, we will update this policy and give you notice first, and where the law requires, we will ask for your consent.

4. Legal bases (for users in the European Economic Area and United Kingdom)

If data protection laws such as the GDPR apply to you, we rely on these legal bases: performing our contract with you or your school (providing the Services and processing payments); our legitimate interests (security, fraud prevention, improving the Services, responding to inquiries), balanced against your rights; your consent (for example push notifications, which you can withdraw at any time); and compliance with legal obligations (for example tax records).

5. Who can see your information

5.1 Your school, program, and educators

If you joined through a school, program, course, or organization, the Learning App is designed so that the people supporting you can see your learning record:

• educators and tutors assigned to you, or to a course or program you are enrolled in, can see your study activity, progress, scores, study estimates, and study plan, can see notes you choose to share with them, and can message you;
• administrators for your school or organization can see the progress of students who belong to it; and
• authorized educators and Redox staff can open a read-only "student view" preview of your account to help with support or teaching. These previews are logged.

Your study notes are private by default. For each note you can choose to keep it private, make it visible to your educators, or share it more widely within your course. Private notes are not shown to educators or school administrators. Administrators of one school cannot see students who are not connected to that school.

If you study on your own and did not join through a school, no school or educator can see your record.

5.2 Schools that are our customers

When a school or program contracts with us, we process its students' information on the school's behalf and under its direction, as a service provider. Where the U.S. Family Educational Rights and Privacy Act (FERPA) applies, we act as a "school official" with a legitimate educational interest, we use education records only to provide the Services to the school, and we do not re-disclose them except as the school authorizes or the law allows. If the school's agreement with us has different rules for its students' information (for example about retention or deletion), that agreement controls. Contact your school with questions about its use of your information.

5.3 Redox staff

A small number of Redox staff can access account, billing, and study data when needed to provide support, maintain content, investigate problems, or keep the Services secure.

5.4 Other users

Other students cannot see your study activity. People you message can see your name and the messages you send them.

5.5 Service providers

We share information with service providers that process it on our behalf under contract, only as needed to run the Services. See section 6.

5.6 Legal and business transfers

We may disclose information if required by law or legal process, to protect the rights, safety, or property of Redox, our users, or others, or in connection with a merger, acquisition, or sale of assets. In a business transfer, this policy will continue to apply to the information transferred, and we will notify you before your information becomes subject to a different policy.

6. Service providers

Stripe also uses some payment information for its own purposes, such as fraud prevention and meeting its legal obligations, as described in Stripe's own privacy policy.

Our servers and database are located in the United States. If you use the Services from outside the United States, your information will be transferred to and processed in the United States.

7. Cookies and similar technologies

We use only the cookies and browser storage needed to run the Services, process payments securely, and remember your preferences. We do not use advertising or cross-site tracking cookies.

Learning App:

• Sign-in cookies (set by our authentication provider) keep you signed in securely.
• Theme cookie remembers whether you chose light or dark mode.
• View mode and preview cookies are used only for educators and staff to switch views or open a read-only student preview.
• Browser local storage remembers interface preferences (such as whether the sidebar is collapsed and whether focus mode is on), keeps unsaved drafts of notes you are writing, and temporarily remembers questions you flag before they are saved.

Website:

• Theme preference is stored in your browser's local storage.
• Vercel Web Analytics is cookieless.
• Checkout pages are provided by Stripe, which sets its own cookies needed to process payments securely and prevent fraud.
• Website staff sign-in cookies are used only by Redox staff.

You can clear cookies and local storage in your browser settings, but you may be signed out and your preferences reset.

8. The iPhone App

The iPhone App gives you access to the Learning App on iPhone using the same account, the same data, and the same privacy protections described in this policy. In addition:

• No purchases in the app. The iPhone App does not offer in-app purchases and does not collect payment information. It reads your plan and subscription status from your account.
• Offline study packs. If you download a topic for offline study, the notes, figures, questions, and flashcards for that topic are stored on your device. Answers and flashcard reviews you make while offline are saved on your device and sent to our servers when you are back online. You can remove downloaded packs in the app's settings, and deleting the app removes them from your device.
• Secure sign-in. Your sign-in session is kept in your device's secure storage.
• Reminders and push notifications. Study reminders and exam countdown notifications are off unless you allow them. iOS asks for your permission first, and you can turn them off at any time in the app or in iOS Settings. If you allow push notifications, we store a device token so Apple can deliver them. Notifications do not show your scores or other performance details on your lock screen.
• No tracking, advertising, or third-party analytics. The iPhone App does not track you across other companies' apps or websites, does not include advertising or third-party analytics or crash reporting tools, and does not use the device advertising identifier. We do not sell data collected through the iPhone App.
• Account deletion. You can delete your account inside the iPhone App (see section 10).

Our App Store privacy label summarizes this: we collect contact information, user content, purchase history, identifiers, and usage data linked to your account to provide the app, and we do not use any data to track you.

9. How long we keep information

• Account and study data are kept while your account is active. When you delete your account, they are deleted as described in section 10.
• Educator-created records about you, such as tutoring session notes, are deleted with your account.
• Shared course content that you did not create (questions, notes, and materials written by educators) is kept, with any link to you removed.
• Billing and transaction records (Stripe customer and subscription IDs, plan, amounts, dates, refunds, and invoices) are kept for up to 7 years after the transaction, even if you delete your account, because tax and accounting laws require it. These records are not used for any other purpose after your account is deleted.
• Website inquiries are kept for up to 24 months after our last contact with you, or until you ask us to delete them, unless they become part of a customer relationship.
• Support emails are kept for up to 24 months after the conversation ends.
• Technical logs held by our hosting and database providers are kept for limited periods under those providers' standard retention settings.
• Backups may hold deleted data for up to 30 days until they expire.

If your school's agreement with us requires a different retention period for its students' records, we follow that agreement.

10. Your choices and rights

10.1 Access and correction

You can see your account details, study activity, notes, messages, and plan in the Learning App. To request a copy of your information or to correct something you cannot change yourself, email support@redoxedu.com.

10.2 Deleting your account

You can delete your student account at any time from Account, Delete account in the Learning App or the iPhone App. You will be asked to confirm and re-enter your password. Deletion is permanent and removes your profile, study activity, notes, study plans, exam records, messages, notifications, course and school memberships, and records educators created about you. It cannot be undone.

If you have a paid subscription, deleting your account also cancels it so you are not charged again. You can also cancel first from your account settings on the Website and keep studying until the end of the period you paid for. Billing records are kept as described in section 9. Refunds, if any, follow our Terms of Service.

Educator, tutor, administrator, and staff accounts are closed by request to support@redoxedu.com.

If your school manages your account, deleting it removes your access through that school. Your school may keep its own separate records.

10.3 Communications

We send account, security, billing, and subscription emails (such as receipts, renewal reminders, and price change notices) because they are needed to operate the Services and in some cases are required by law. We do not add you to marketing emails unless you ask to receive them, and every marketing email includes a way to unsubscribe. You can also write to support@redoxedu.com. You can turn off push notifications in the iPhone App or in iOS Settings.

10.4 U.S. state privacy rights

Depending on where you live, state laws (for example in California, Colorado, Connecticut, Virginia, and other states) may give you rights to know what personal information we collect and how we use it, to access, correct, or delete it, to obtain a portable copy, and to opt out of the sale or sharing of personal information, its use for targeted advertising, or certain profiling. We do not sell or share personal information for targeted advertising, and we do not use it for profiling with legal or similarly significant effects. We do not collect sensitive personal information for the purpose of inferring characteristics about you.

To exercise your rights, email support@redoxedu.com. We will verify your request using information associated with your account, and you may use an authorized agent where the law allows. We will not discriminate against you for exercising these rights. If we deny your request, you may appeal by replying to our decision.

California notice at collection. In the past 12 months we collected these categories of personal information: identifiers (name, email, account ID, IP address); commercial information (plans purchased and subscription history); internet or other electronic network activity (study activity and technical information); education information (study records, including records maintained for a school); and inferences (study estimates such as readiness). We collect them from you, your school or educator, Stripe, and automatically from your use of the Services, for the purposes in section 3, and keep them for the periods in section 9. We disclose them for business purposes only to the service providers in section 6 and, for school accounts, to your school.

10.5 Rights in the EEA, UK, and similar jurisdictions

If laws such as the GDPR apply to you, you may have the right to access, correct, delete, restrict, or object to our processing of your personal information, to data portability, and to withdraw consent at any time. You also have the right to complain to your local data protection authority. Contact us at support@redoxedu.com to exercise these rights.

We aim to respond to requests within 30 days, or sooner where the law requires.

11. Children and minors

The Services are designed for college, nursing, pre-medical, and medical students and other adult learners. You must be at least 16 years old to use the Services, and if you are under 18 a parent or guardian must agree to our Terms of Service on your behalf.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, or from anyone under 16 who is using the Services, we will delete it and close the account. If you believe this has happened, contact support@redoxedu.com.

We do not sell or share the personal information of anyone, including users under 18.

12. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information. These include encrypted connections (HTTPS), hashed passwords, database access rules that limit each user to the data they are permitted to see, limits on repeated password attempts, logging of staff previews of student accounts, payment processing by a certified payment processor so we never handle card numbers, and secure storage for your sign-in session in the iPhone App. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep it private. If we learn of a security breach affecting your personal information, we will notify you as the law requires.

13. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above, and if the changes are significant we will give notice in the Services or by email before they take effect.

14. Contact us

Questions or requests about this policy or your information:

• Email: support@redoxedu.com
• Mail: Redox Educators LLC, 16192 Coastal Highway, Lewes, DE 19958