Privacy policy

Information we collect

Account information. We collect your email address and identifiers needed to create, authenticate, and maintain your learner account. If you choose Google sign-in, Google provides basic profile information, which may include your name, email address, profile picture, and Google account identifier. Our authentication provider stores account information needed to recognize you and manage your session.

Purchase information. When purchasing is available, Stripe processes checkout and payments. We receive information such as your checkout email, purchased course, amount, currency, transaction identifiers, payment status, and refund status. Card details are entered into Stripe's checkout; our course database does not store your full card number or card security code. Stripe handles payment information under its own privacy policy.

Learning records. As course and exam features become available, we collect the information needed to deliver them, such as enrollment, saved answers and progress, attempts, scores, completion dates, course evaluations, and certificate records. We may request professional identifiers or other details when needed for continuing-education documentation, and explain that request when collecting them. This policy does not mean that every described course feature is currently available.

Support information. We receive information you provide when you email us or request help. Please do not send patient information, medical records, Social Security numbers, card details, or account passwords.

Technical information. Our hosting and service providers may process IP addresses, browser and device information, request timestamps, and security or error logs to deliver and protect the service.

How we use information

We use information to authenticate you, maintain your account, connect eligible purchases to your verified account, provide course access and learning records, process payment and refund status, respond to support requests, prevent fraud and unauthorized access, troubleshoot problems, and meet applicable recordkeeping and legal obligations. We use contact information for messages needed to provide the service, such as sign-in links and account or course communications.

Google sign-in

Google sign-in is optional. It requests basic identity scopes: openid, email, and profile. We use this information to sign you in and associate you with your learner account. We do not request access to your Gmail messages, Google Drive files, calendar, or contacts, and we do not receive your Google password.

Google account information is processed through Supabase for authentication and stored as part of your account. We use Google user data only for the purposes described in this policy. We do not sell Google user data, use it for advertising, or use it to train generalized artificial-intelligence or machine-learning models. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements where applicable.

You can review or remove your connection to Lead Apron CE in your Google Account's third-party connections settings. Removing that connection does not itself delete your Lead Apron CE account or records; contact us to request deletion. Email sign-in is also available subject to the site's account-access requirements.

Sign-in security checks

We use Cloudflare Turnstile on the email sign-in form to help detect bots and prevent abuse. Cloudflare processes browser, device, and network signals for this check. The resulting verification token is sent through our service to Supabase to validate the sign-in request.

Cookies and similar technologies

We use necessary cookies to maintain your signed-in session and protect the sign-in process. Blocking or deleting these cookies may prevent sign-in or require you to sign in again. Google and Stripe may use their own cookies when you interact with their services.

When we share information

We share information with providers needed to operate the service, including Supabase for authentication and database services, Stripe for payments, website hosting and delivery providers, and email providers for service communications. These providers receive information relevant to their functions. Google processes your sign-in under its own terms and privacy policy.

We may provide necessary learner records to AHRA or ARRT in response to an audit. Apart from the service providers and disclosures described here, we do not share learner information with other organizations. We do not sell learner information. We may also disclose information when required by law or reasonably necessary to protect rights, investigate fraud, or secure the service. We do not publish individual learner records on the public website.

Retention and deletion

We keep information for as long as needed for the purposes described here, including account administration, continuing-education documentation, accounting, dispute resolution, security, and legal obligations. Some attendance and completion records must remain available after account closure under applicable continuing-education retention requirements. Deleting an account therefore may not delete all records immediately. Backup copies may remain until they expire under the relevant backup lifecycle.

You may contact us to request access to, correction of, or deletion of your personal information. We verify requests before releasing or changing records and explain any applicable retention restriction. We do not require you to send your password or full payment-card details to verify a request. Additional privacy rights may apply depending on your location and applicable law.

Security and processing locations

We use safeguards designed to protect learner information, including encrypted connections, protected sign-in sessions, and access restrictions. No online service can guarantee absolute security. Our providers may process information in the United States and other countries where they operate; protections and laws may differ from those in your location.

Intended audience

Lead Apron CE is designed for adult radiologic-technology professionals and is not directed to children. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

Changes and contact

We will post updates to this policy on this page and update its effective date. Where required, we will provide additional notice or obtain consent for material changes.

For privacy questions or requests, contact admin@leadapronce.com, with "Privacy request" in the subject line.