Legal

Privacy Policy

Last updated: October 12, 2026

This policy explains what personal data Appcellent Yazılım Hizmetleri Anonim Şirketi ("we", "us") collects when you use HealthcareExams, why we collect it and what choices you have. We collect only what we need to run the study service, and we never sell your data.

1. What we collect

DataWhenWhy
Email addressWhen you create an account or ask for your score report or study planTo sign you in, send what you asked for and send account emails
Study details: exam, test date, target school, daily study timeWhen you enter themTo build your score report and study plan
Your answers and practice historyWhen you practiseTo score tests, track progress and choose what to review
Subscription status (plan, renewal date)When you subscribeTo give you access and send renewal reminders
Usage data: pages viewed, buttons used, device and browser type, approximate location from IPWhen you use the siteTo understand what works, fix problems and improve the Service
Messages you send usWhen you contact supportTo answer you

We do not collect your card or bank details. Payments are handled entirely by Creem (see below).

2. Legal basis (EEA, UK)

We use your data to perform our contract with you (account, subscription, study features), on the basis of our legitimate interests (security, improving the Service, product analytics), with your consent where required (optional marketing emails, non-essential cookies), and to meet legal obligations (tax and accounting records).

3. Who processes your data

  • Creem (Armitage Labs OÜ, Estonia) — our Merchant of Record. Creem processes your payment, billing address and tax details under its own privacy policy and tells us your subscription status.
  • Supabase — database and sign-in.
  • Cloudflare — hosting, content delivery and security.
  • Resend — sending account and study emails.
  • Mixpanel — product analytics.
  • Google — sign-in with Google, if you choose it.

These providers process data only on our instructions and under data processing agreements. Some are located in the United States; transfers rely on Standard Contractual Clauses or an equivalent safeguard.

4. Emails

We send account emails you cannot opt out of while you have an account (sign-in links, receipts, renewal reminders). Study emails such as a daily practice question or exam-week tips are optional: every one has an unsubscribe link.

5. Cookies

We use cookies and local storage that are needed to keep you signed in and save your progress. We use analytics cookies only where the law allows or with your consent. We do not use advertising cookies.

6. How long we keep data

We keep account and study data while your account is open. When you delete your account, we delete it within 30 days, except records we must keep by law (for example invoices and tax records, which Creem and we keep for the legally required period). Analytics data is kept for up to 25 months.

7. Your rights

You can ask to access, correct, download or delete your data, object to or restrict how we use it, and withdraw consent at any time. California residents have the right to know, delete and correct personal information and to not be discriminated against for using these rights; we do not sell or share personal information for cross-context behavioural advertising. Email privacy@healthcareexams.com and we will reply within 30 days. You can also complain to your local data protection authority.

8. Children

The Service is meant for people preparing for nursing and healthcare school and is not directed at children under 16. We do not knowingly collect data from children under 16.

9. Security

Data is encrypted in transit and at rest, access is limited to people who need it, and sign-in uses one-time email links or Google instead of passwords.

10. Changes

If we change this policy in a way that matters, we will email account holders before it takes effect.

11. Contact

Data controller: Appcellent Yazılım Hizmetleri Anonim Şirketi
Email: privacy@healthcareexams.com