Privacy

What we collect

Account. Your email address, your display name, and — if you choose to share it — your clinical setting. That is the whole profile.

Learning activity. Your practice answers, review ratings, and the schedule of when each card is next due. This is what makes spaced review and your progress screens work.

Usage events. We record first-party events in our own database — an event name, such as a sign-in or a completed review, plus a few technical properties. Your email address is never stored inside an event.

Feedback. Messages sent through the feedback form are emailed to us. We do not keep a copy in the product database. A reply address, if you give one, is used only to reply.

Abuse limits. When you submit a public form, we briefly record your network address (IP) to limit abuse. These records are pruned automatically.

Who processes it

Four providers run the service, each only for its job: Supabase stores the database and handles sign-in. Resend delivers our emails. Vercel hosts the site and gives us aggregate page analytics that are not tied to your account. Stripe processes payments — your card number never touches our servers.

These providers store and process data in the United States. If you use NeuroDash from outside the US, your data is transferred to and handled there.

How long we keep it

Your account and learning activity are kept while your account is active, so spaced review and your progress keep working.

When you delete your account, the data tied to it is removed within 30 days. Usage events are kept for up to 24 months, then discarded or aggregated. The short IP records used for abuse limits are pruned within 30 days.

Who can use NeuroDash

NeuroDash is built for clinicians and students who assess the dizzy patient — emergency medicine, neurology, medical students, and physiotherapy. It is not directed to children, and you must be at least 16 to create an account.

Cookies

We use cookies to keep you signed in, plus one short-lived cookie that remembers your profile passed its setup check. There are no advertising or cross-site tracking cookies.

Email we send

Account email — confirmation links, password resets, and a one-time welcome after signup — goes only to you, only when you trigger it or create an account.

Every lifecycle email carries a one-click unsubscribe link, and you can manage email from your account. You can also ask through the contact page.

Your rights over your data

Access and export. From your account page you can download everything tied to your account — your profile, practice history, schedules, and usage — as a JSON file.

Deletion. You can delete your account and its data from your account page. Any active membership is canceled, and the deletion is permanent. If you prefer, you can still ask through the contact page.

Changes to this page

If our practices change, this page and the date at the top change with them.

Questions

Anything unclear, or anything you think we got wrong — write to us through the contact page.