Privacy Policy

1. Scope and who we are

PharmaTarget is an independent educational service for pharmacy exam preparation. In this policy, “PharmaTarget,” “we,” “us,” and “our” refer to the operator of the PharmaTarget app and website. PharmaTarget is not affiliated with or endorsed by the Pharmacy Examining Board of Canada (PEBC).

2. Information we collect

Depending on the features you use, we may process:

• Account and sign-in information: your name, email address, internal user identifier, and information needed to authenticate with email or Sign in with Apple. Your authentication provider stores password credentials; PharmaTarget does not display your password to us.
• Authentication emails: your email address and the content of account confirmation, verification, password-reset, and other authentication messages sent at your request, including secure action links.
• Profile information: phone number, retained address fields, profile photo, university or training information, PEBC exam preferences, and pharmacy experience details that you choose to provide.
• Study activity: lessons and questions viewed, answers, quiz and mock-exam results, bookmarks, notes, flashcard activity, audio position, study time, routines, achievements, progress, and weak-area insights.
• Purchases and entitlements: App Store product identifiers, transaction identifiers, subscription status, renewal or expiry information, and purchase-restoration results. Apple processes payment-card and billing details; PharmaTarget does not receive your full payment-card number.
• Notifications and device information: a push-notification token, notification preferences, device or vendor identifier, device type, app version, and operating-system version when needed to deliver or troubleshoot app functionality.
• Support information: the message and attachments you choose to send, your account email, and optional diagnostics you choose to include. Never send us your password or complete payment-card details.
• Website activity: limited landing-page events such as page views, section views, and App Store link clicks, together with the page path and campaign parameters. We do not add advertising identifiers or account details to these events. Hosting providers may process standard request and security logs, such as IP address and browser details.

Optional app usage analytics

Where this option is available, you can choose whether to share limited app usage analytics to help us understand registration, sample lessons, Premium feature discovery, and subscription screens. This choice is off until you enable it and does not change your study features, subscription, or price. You can change it in Settings → Usage analytics.

The account-creation screen separates required Terms of Use acceptance and acknowledgement of this Privacy Policy from optional analytics. Optional analytics starts unchecked; creating an account does not enable it. If analytics is available, your signup choice may be held securely on the device for up to seven days while you confirm your email. It is bound to that signup account and installation, contains no credentials or event history, and is consumed once after the same account is authenticated. An older signup choice does not override a later saved Settings decision.

When analytics is available, up to 20 early registration events may be held temporarily in the app's memory for no more than 24 hours. They are not transmitted until the same account is confirmed and you explicitly enable analytics. This temporary history is lost when the app restarts; we do not reconstruct abandoned or unconfirmed registration journeys.

These events contain a random analytics identifier, event time, app build, broad device type (such as iPhone or iPad), and limited predefined plan, feature, or action-result values. Our server keeps the account-to-identifier link privately so steps can be joined and deletion requests handled. This is pseudonymous, account-linked data, not fully anonymous data. Marketing reports show grouped counts, not your name or contact details.

We do not send your name, email, phone number, account password, question answers, exam scores, notes, lesson content, payment-card information, or raw App Store receipts to this analytics service. We do not use screen recording, session replay, advertising identifiers, or cross-app advertising tracking for these events.

Turning analytics off stops new optional usage events and requests removal of the existing analytics identifier and its usage events. Account deletion also requests this removal. Provider deletion is asynchronous: acceptance of a request is not confirmation that removal has finished. Subscription verification and essential study or security records are separate from optional usage analytics.

3. How we use information

• Provide, secure, and maintain your account and the app.
• Save and personalize study progress, routines, and recommendations based on your activity.
• Verify purchases, restore access, and keep subscription entitlements in sync.
• Deliver notifications you request and remember your preferences.
• Respond to support requests and investigate technical or security problems.
• Measure website performance and understand which public pages are useful.
• Where you enable optional app analytics, understand grouped usage and subscription-screen journeys.
• Comply with applicable law and enforce our Terms of Use.

4. Service providers and disclosure

We use service providers only as needed to operate PharmaTarget, including:

• Supabase for authentication, database services, server functions, and file storage.
• Apple for Sign in with Apple, StoreKit purchases, the App Store, and push notifications.
• Resend to deliver account confirmation, verification, password-reset, and other authentication emails. Resend processes the recipient email address and the content of the authentication message for this purpose.
• Vercel to host this public website and its limited landing-page analytics relay.
• PostHog, using our United States project, to process the limited pseudonymous app usage events described above when you enable optional analytics. We send these events through our server, not directly from your device to PostHog.

We do not sell personal information, use it for cross-app advertising, or provide it to data brokers. We may disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.

5. Retention and account deletion

We retain account-linked information while your account is active and for as long as needed to provide the service, resolve disputes, prevent fraud, and meet legal or accounting obligations. Retention periods differ by data type.

For optional app usage analytics, we schedule removal when records reach 90 days. Unsent server queue payloads expire after 24 hours. Provider deletion runs asynchronously and can take additional time; deletion jobs are retained until completion is verified.

You can request account deletion in the app from More → Settings → Delete Account. When deletion completes, the authentication account and account-linked application data are removed. Limited transaction, security, or compliance records may be retained when legally required or reasonably necessary, and are then restricted to that purpose.

6. Your choices and rights

You can update many profile details in the app, control notification permission in iOS, and manage an App Store subscription through Apple. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, objection, or a portable copy of certain information. Contact us to make a request. We may need to verify your identity before acting on it.

7. Security and international processing

We use administrative and technical safeguards, including encrypted HTTPS connections and access controls. No online service can guarantee absolute security. Our providers may process information in countries other than your own, subject to their safeguards and applicable law.

8. Children

PharmaTarget is an exam-preparation service and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us so we can investigate and delete it where required.

9. Changes to this policy

We may update this policy when the service or legal requirements change. We will publish the revised policy here and change the “Last updated” date. Material changes may also be communicated in the app when appropriate.

10. Contact

For privacy questions or requests, email pharmatargetowner@gmail.com. For other help, visit our Support page.