Privacy Policy
PREPLAB – PRIVACY POLICY Last Updated: May 24, 2026
PrepLab (“the Platform,” “we,” “us,” or “our”) is committed to protecting the privacy of our users (“Candidates,” “Learners,” or “you”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform accessible via preplab.ca.
By creating an account, accessing the Platform, or redeeming an access code, you explicitly consent to the data practices described in this Privacy Policy.
1. Information We Collect We collect information that identifies, relates to, or could reasonably be linked with an individual candidate.
Account & Authentication Data: Name, email address, username, password hashes, and individual access codes issued at checkout.
Study & Performance Metrics: To provide your dashboard analytics and calculate aggregate question "Difficulty" levels, we track your quiz attempts, specific answers selected, scores, bookmarked/flagged questions, time spent per question, and overall performance history.
Transaction & Billing Information: Payment records, subscription plans, and transaction timestamps. Note: All payment card processing is handled securely by our third-party payment gateways (e.g., Stripe). PrepLab does not view, collect, or store your credit card numbers.
Technical & Usage Logs: IP addresses, browser types, device information, operating systems, access timestamps, and basic interaction data collected to monitor platform security and prevent unauthorized content scraping.
Support Communications: Any emails, contact form submissions, or support messages you send to us.
2. How We Use Your Information We utilize the collected data strictly for the following purposes:
Service Delivery: Creating and managing your account, maintaining your user dashboard, and tracking your learning progress.
Platform Security & Anti-Scraping: Monitoring technical logs to detect unauthorized simultaneous logins, credential sharing, or automated data-extraction/scraping scripts.
Analytics & Product Improvement: Anonymizing and aggregating user quiz data to improve our AI-assisted question generation, refine clinical explanations, and dynamically adjust question difficulty benchmarks.
Customer Support: Responding to your technical questions, account issues, or billing inquiries.
Legal Compliance: Enforcing our Terms of Use and complying with applicable financial or regulatory legal requirements.
3. Data Disclosure & Third-Party Service Providers We do not sell, rent, or trade candidate personal information to third parties. We only share limited data with essential third-party service providers who perform operational functions on our behalf. These include:
Cloud infrastructure and database hosting providers.
Secured payment processing networks.
Automated transactional email delivery systems.
Essential application monitoring and security tools.
All such third parties are bound by strict contractual obligations to keep your data confidential and use it solely for the services they provide to us.
4. Data Retention and Deletion We retain your personal account data, transaction history, and individual study records for as long as your account remains active, or as necessary to fulfill the operational purposes outlined in this policy, handle disputes, and maintain platform integrity.
Account Deletion: You have the right to request the deletion of your account at any time by contacting our support team. Upon a verified request, we will delete or irreversibly anonymize your personal information within thirty (30) days, except where we are legally required to retain specific financial transaction records.
5. Security Safeguards We implement industry-standard administrative, technical, and physical security measures designed to protect your personal data from unauthorized access, loss, misuse, alteration, or disclosure. This includes the use of SSL/TLS encryption for data transmission and secure hashing for account credentials.
However, please note that no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
6. Canadian Privacy Compliance (PIPEDA) As an independent Canadian platform operated out of Ontario, PrepLab complies with the Personal Information Protection and Electronic Documents Act (PIPEDA).
Data Access and Accuracy: You have the right to request access to the personal information we hold about you and to request corrections if any details are inaccurate.
International Data Transfers: Your data may be stored or processed on servers located outside of your home province or country (such as in secure US-based cloud centers). By using the Platform, you acknowledge that your data may be subject to the legal jurisdictions of those regions.
7. Changes to This Privacy Policy We reserve the right to modify this Privacy Policy at any time. Any changes will become effective immediately upon posting the updated policy to preplab.ca/privacy. We encourage you to review this page periodically to stay informed about how we protect your information.
8. Contact Information If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please reach out to us via our Contact Us portal.