Privacy policy

Version of September 28, 2026.

Person responsible

The person responsible for the protection of personal information at RxSprint can be reached at hello@rxsprint.ca.

What we collect

Your email, which is your account identifier. Your profile: the examination session you aim for and any prior attempt. Your answers to the questions, the time of each answer, your training settings and your language. Pseudonymised usage events, which describe your path without your email. The IP address and technical data needed for account security. The link or campaign you arrived through, if any: a label of a few words, never an advertising identifier. The words you choose to write to us from your settings, in “A word about RxSprint”. If you arrive through a link another person shared, that link carries a mark that tells us so; they never learn of it. Nothing else: no date of birth, no phone, no address.

Why

To provide the service and personalise your training; to measure usage in order to improve the content and the settings; with your separate consent, to send you follow-up emails. Your learning data serves no automated decision with a legal effect on you.

Where and by whom

Your data is hosted in Canada, in the Montreal region, with Amazon Web Services, our cloud provider. No third-party analytics or advertising tool is used; your data is neither sold nor rented. The people who review the content never see your email nor your named path. The emails you send us at hello@rxsprint.ca are hosted by Zoho, our email provider, in the European Union; they contain only what you choose to write in them. If you choose “Continue with Google”, Google (United States) receives your email and the fact of your sign-in, nothing else; your learning data is never sent to it. If you take out a subscription, Stripe (United States) processes the payment: your email, your card, the billing address and the amount; we never see your card, and Stripe receives no learning data.

For how long

As long as your account exists. On account closure, your personal data is deleted within 30 days; usage events are kept in pseudonymised form. Your reports and comments on the content are kept, detached from your account, because they served to correct it; the words you write to us from your settings are deleted with your account; a testimonial you agreed to publish stays displayed until you ask for its removal.

Your rights

Access your data, have it corrected, withdraw a consent, have your account deleted, obtain your data in a structured format. Write to hello@rxsprint.ca; we answer within 30 days.

Cookies

Only those needed for the service to work (session, language). No tracking or advertising cookie.

Consents

They are asked through separate boxes, never pre-ticked; the version of the accepted text and the date are kept.

Incidents

A register of confidentiality incidents is kept. If an incident presents a risk of serious injury, the Commission d'accès à l'information and the persons concerned are notified.

Changes

This policy carries a dated version; a new version is presented to you at your next sign-in.