Privacy Policy

Effective date: 2026-07-05

Plain-English summary: We collect the minimum needed to run your account and subscription. Your study notes are yours. We never sell your data. Card details are handled by our payment processor (Stripe), not stored by us.

1. Who this applies to

This Privacy Policy explains how the Medical Coding Command web application (the "Service") collects, uses, and protects information when you create an account, subscribe, or use the Service.

2. Information we collect

Account information. Your email address and authentication details, handled through our authentication provider (Supabase), so you can sign in and we can associate your data with your account.
Subscription information. Your plan (Basic or Prime) and subscription status. Payments are processed by Stripe; we receive limited billing metadata (such as plan, status, and a customer identifier) but do not store your full card number.
Your Content. The notes, books, chapters, tags, and other content you create and store in the Service, so we can save and display it back to you.
Basic usage/technical data. Standard technical information such as your browser type and general activity, used to keep the Service running and secure.

3. How we use information

To provide, maintain, and improve the Service.
To authenticate you and secure your account.
To manage your subscription, process payments, and apply your plan's features.
To respond to support requests and suggestions you send us.
To comply with legal obligations and enforce our terms.

4. How we share information

We do not sell your personal information. We share information only with service providers that help us run the Service, specifically:

Supabase — authentication and secure storage of your account and content.
Stripe — payment processing and subscription management.
Hosting provider — to deliver the web application.

These providers process data on our behalf under their own security and privacy commitments. We may also disclose information if required by law or to protect the rights, safety, and security of users and the Service.

5. Data retention

We keep your account and content while your account is active. If you cancel or delete your account, we will delete or de-identify your content within a reasonable period, except where retention is required for legal, accounting, or security purposes. You can export your notes at any time from within the Service.

6. Your choices and rights

You can access and edit your content within the Service.
You can export your content at any time.
You can cancel your subscription and request deletion of your account.
Depending on where you live, you may have additional rights (such as access, correction, or deletion) under applicable privacy laws.

7. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. We encourage you to use a strong, unique password and to export backups of your content regularly.

8. Children's privacy

The Service is intended for adult students and professionals and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by reasonable means, and continued use of the Service after changes take effect constitutes acceptance of the updated policy.

10. Contact

Questions about this Privacy Policy can be directed to the operator through the contact or suggestion feature within the Service.

← Back to home